Re: [squid-users] Authentication not applicable on intercepted requests

2017-10-27 Thread Vieri
From: Amos Jeffries > > You do not seem to be using Basic auth. Setting the realm for an unused auth > mechanism is pointless. > > Try: > http_access deny explicit !ORG_all > http_access deny explicit SSL_ports > http_access deny

Re: [squid-users] Authentication not applicable on intercepted requests

2017-10-27 Thread Amos Jeffries
On 27/10/17 20:22, Vieri wrote: Hi, I have: debug_options rotate=1 ALL,1 and I'm getting lots of these messages in cache.log: NOTICE: Authentication not applicable on intercepted requests. I have a mixed tproxy/sslbump + auth (via /usr/libexec/squid/negotiate_kerberos_auth) config. I know

[squid-users] Authentication not applicable on intercepted requests

2017-10-27 Thread Vieri
Hi, I have: debug_options rotate=1 ALL,1 and I'm getting lots of these messages in cache.log: NOTICE: Authentication not applicable on intercepted requests. I have a mixed tproxy/sslbump + auth (via /usr/libexec/squid/negotiate_kerberos_auth) config. I know authentication can't be done on

Re: [squid-users] Authentication pass-through cache_peer

2016-11-24 Thread Eduardo Carneiro
Hi Amos, I'm still trying to configure login pass-through. Now, I'm using negotiate / kerberos. On the frontend machine, I enabled login = PASSTHRU in the cache_peer configuration line. As previously stated, the authentication is present only on the parent machine. The cache.log of my parent

Re: [squid-users] Authentication problem

2016-10-31 Thread Amos Jeffries
On 1/11/2016 6:31 a.m., Eduardo Carneiro wrote: > Hi all. > > I have a strange authentication issue in my squid 3.5.19. My workstations > only can authenticate if they are entered into the domain. When they doesn't > entered into the domain, I access any URL on browser (Firefox and Chrome >

[squid-users] Authentication problem

2016-10-31 Thread Eduardo Carneiro
Hi all. I have a strange authentication issue in my squid 3.5.19. My workstations only can authenticate if they are entered into the domain. When they doesn't entered into the domain, I access any URL on browser (Firefox and Chrome tested) and I'm not able authenticate on the boxes that are shown

[squid-users] Authentication pop-ups. Questions

2015-12-09 Thread Verónica Ovando
Hi. I have Squid 3.5 running over Debian 8. I am using AD authentication. This is part of my squid.conf: #auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --domain=DOMAIN.com auth_param ntlm program /usr/local/bin/ntlm_auth

Re: [squid-users] Authentication pop-ups. Questions

2015-12-09 Thread Amos Jeffries
On 10/12/2015 3:25 a.m., Verónica Ovando wrote: > Hi. I have Squid 3.5 running over Debian 8. > > I am using AD authentication. This is part of my squid.conf: > > #auth_param ntlm program /usr/local/bin/ntlm_auth > --helper-protocol=squid-2.5-ntlmssp --domain=DOMAIN.com > auth_param ntlm program

Re: [squid-users] Authentication Problem

2015-12-04 Thread Dima Ermakov
Thank you, Amos. I checked all, that you wrote. It didn't help me. I have this problem only on google chrome browser. Before 2015-12-03 all was good. I didn't change my configuration more than one month. Ten minutes ago "Noel Kelly nke...@citrusnetworks.net" wrote in this list, that google

Re: [squid-users] Authentication Problem

2015-12-04 Thread Samuel Anderson
Hi Amos and Dima, I'm having the exact same problem. After updating Chrome to version (47.0.2526.73 m) I'm no longer able to authenticate. IE and Firefox still seem to work fine. I haven't changed anything in my config file for months. On Fri, Dec 4, 2015 at 5:22 AM, Dima Ermakov

[squid-users] Authentication Problem

2015-12-03 Thread Dima Ermakov
Hi! I have a problem with authentiation. I use samba ntlm authentication in my network. Some users ( not all ) have problems with http traffic. They see basic authentication request. If they enter correct domain login and password, they have auth error. If this users try to open https sites:

Re: [squid-users] Authentication Problem

2015-12-03 Thread Amos Jeffries
On 4/12/2015 9:46 a.m., Dima Ermakov wrote: > Hi! > I have a problem with authentiation. > > I use samba ntlm authentication in my network. > > Some users ( not all ) have problems with http traffic. > > They see basic authentication request. Meaning you *dont* have NTLM authentication on your

Re: [squid-users] authentication of every GET request from part of URL?

2015-11-06 Thread Amos Jeffries
On 7/11/2015 1:33 a.m., Sreenath BH wrote: > Hi > I am very new to Squid, and think have a strange requirement. > We want to serve cached content only if the client has been > authenticated before. > Since we don't expect the client software to send any information in > headers, we embed a token

[squid-users] authentication of every GET request from part of URL?

2015-11-06 Thread Sreenath BH
Hi I am very new to Squid, and think have a strange requirement. We want to serve cached content only if the client has been authenticated before. Since we don't expect the client software to send any information in headers, we embed a token in the URL that we present to the user. So when the

Re: [squid-users] authentication setup for squid-internal-mgr

2015-10-07 Thread Amos Jeffries
On 7/10/2015 6:41 a.m., Tory M Blue wrote: > So I was playing with squid-internal-mgr (replacement for cachemgr.cgi it > seems), but I have no real authentication access , other than my ACL's > > acl manager url_regex -i ^cache_object:// +i > ^https?://[^/]+/squid-internal-mgr/ > > > And

[squid-users] authentication setup for squid-internal-mgr

2015-10-06 Thread Tory M Blue
So I was playing with squid-internal-mgr (replacement for cachemgr.cgi it seems), but I have no real authentication access , other than my ACL's acl manager url_regex -i ^cache_object:// +i ^https?://[^/]+/squid-internal-mgr/ And limited to my networks obviously. But as of now those pages are

[squid-users] Authentication help

2015-03-05 Thread Informatico Neurodesarrollo
Hi list, I am new in the list and I want to solve a problem with the authentication process in the factory that I worked some years ago and in this place I began work with Linux. They use openSuSE 13.2 (64bits) with squid 3.4.4, the specification are: - the authentication is local, Unix users

[squid-users] Authentication Passthrough Failing

2015-02-26 Thread Curtis.M
Hi all, I have squid 2.7 setup on a Win2012R2 DC used for caching purposes. The main use is for caching Apple iOS updates but is also starting to be used for general web browsing. The issue I have is there is a web filtering system being used in this environment that relies on AD usernames to

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-25 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2014 10:06 PM, Jason Haar wrote: I think you are confusing proxy authentication with WPAD/PAC files. WPAD knows nothing about proxy authentication: browsers do ie you use WPAD to tell browsers where/if they need to use a proxy and under

[squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I do know that pac files contains some form of JS and in the past I have seen couple complex PAC files but unsure about the options. I want to know if a PAC file can be used for Authentication\Authorization, maybe even working against another external

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Kinkie
Hi Eliezer, I don't think so. PACfiles have no access to the DOM or facilities like AJAX, and are very limited in what they can return or affect as side-effects. In theory it could be possible to do something, but in practice it would be only advisory and not secure: a pacfile must by definition

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2014 03:24 PM, Kinkie wrote: But what if multiple users share the same IP (e.g. Citrix, X11)? This is another situation which requires authentication... Two users can use the same pac files and be authorized as another user(a regular forward

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Walter H.
Hi, a sample of a .pac-File function FindProxyForURL( url, host ) { var strURL = ( decodeURI( url ) ).toLowerCase( ); var strHost = host.toLowerCase( ); // Redirect to proxy with these URLs if ( ( strURL == http://flickr.com/images/spaceball.gif; ) || ( strURL == ... ) )

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well james you are 100% right. But as you may know not everybody can test all day long. Some have day jobs and someone else knows the answer already and can assist here and there. This is the basic foundation of this mailing list. Anyone anytime can

Re: [squid-users] authentication via web page

2014-02-04 Thread Al Zick
Hello, On Jan 31, 2014, at 12:12 PM, Amos Jeffries wrote: On 31/01/2014 11:56 a.m., Al Zick wrote: Hi, I am considering switching to authentication via a web page. Are there examples of how to do this somewhere? What are the pros and cons of this configuration? I am very concerned

Re: [squid-users] authentication via web page

2014-01-31 Thread Amos Jeffries
On 31/01/2014 11:56 a.m., Al Zick wrote: Hi, I am considering switching to authentication via a web page. Are there examples of how to do this somewhere? What are the pros and cons of this configuration? I am very concerned about security with web page authentication. The Pro (singular) is

Re: [squid-users] authentication via web page

2014-01-31 Thread Leonardo Rodrigues
Em 30/01/14 20:56, Al Zick escreveu: Hi, I am considering switching to authentication via a web page. Are there examples of how to do this somewhere? What are the pros and cons of this configuration? I am very concerned about security with web page authentication. Also, I am not really

[squid-users] authentication via web page

2014-01-30 Thread Al Zick
Hi, I am considering switching to authentication via a web page. Are there examples of how to do this somewhere? What are the pros and cons of this configuration? I am very concerned about security with web page authentication. Also, I am not really sure if it is a good idea. For

[squid-users] Authentication problem upgrading from squid 2 to squid 3

2012-12-20 Thread Javier Smaldone
I've been using squid 2.6.STABLE5 for a long time. Now, I'm upgrading to 3.1.19 (Ubuntu 12.04). On my previous setup i've used ldap_auth (with basic authentication) and after tuning my configuration I made it work for squid3. But now I have a problem with some (allowed) sites that load some

Re: Re: [squid-users] Authentication of non-standard methods

2012-12-14 Thread Trever L. Adams
On 12/11/2012 05:32 PM, Amos Jeffries wrote: On 12.12.2012 11:33, Trever L. Adams wrote: Hello Everyone, I am looking at Shibboleth. I have seen one example (http://www.switch.ch/aai/support/presentations/opcom-201105/AAI-OpCom-AAI_for_mandatory_authentication_and_proxy_usage.pdf) for

[squid-users] Authentication of non-standard methods

2012-12-11 Thread Trever L. Adams
Hello Everyone, I am looking at Shibboleth. I have seen one example (http://www.switch.ch/aai/support/presentations/opcom-201105/AAI-OpCom-AAI_for_mandatory_authentication_and_proxy_usage.pdf) for using it with Squid. I am afraid it makes no sense to me. I am afraid I do not know much about

Re: [squid-users] Authentication of non-standard methods

2012-12-11 Thread Amos Jeffries
On 12.12.2012 11:33, Trever L. Adams wrote: Hello Everyone, I am looking at Shibboleth. I have seen one example (http://www.switch.ch/aai/support/presentations/opcom-201105/AAI-OpCom-AAI_for_mandatory_authentication_and_proxy_usage.pdf) for using it with Squid. I am afraid it makes no sense to

[squid-users] Authentication problem

2012-11-22 Thread Warren Baker
HI List I have squid-3.2.3 configured to make use of negotiate, and to authenticate certain users. However the following config doesn't work acl userA proxy_auth warren acl userB proxy_auth testb http_access allow userA http_access allow userB http_access deny all userA successfully

[squid-users] Authentication problems with NTLM

2012-07-06 Thread Bruno Santos
Hi ! I've configure squid 3.1.10-1 (latest available for CentOS 6.2) with NTLM authentication, but squid keeps asking for username and password. And sometimes more than once... Users are authenticated in the domain, using IE6/7/9, but squid keeps asking for username/password. Those with

Re: [squid-users] Authentication problems with NTLM

2012-07-06 Thread Amos Jeffries
On 6/07/2012 11:42 p.m., Bruno Santos wrote: Hi ! I've configure squid 3.1.10-1 (latest available for CentOS 6.2) with NTLM authentication, but squid keeps asking for username and password. And sometimes more than once... Users are authenticated in the domain, using IE6/7/9, but squid

Re: [squid-users] Authentication problems with NTLM

2012-07-06 Thread Bruno Santos
start working - no authentication in windows... Thank you all ! - Original Message - From: Amos Jeffries squ...@treenet.co.nz To: squid-users@squid-cache.org Sent: Friday, 6 July, 2012 2:08:19 PM Subject: Re: [squid-users] Authentication problems with NTLM On 6/07/2012 11:42 p.m., Bruno

[squid-users] Authentication with active directory (Windows Server 2008).

2012-06-15 Thread João Paulo Ferreira
Hello, I would like an opinion of you, I'm implentando squid in the company where I work and would like to integrate with our active directory (windows server 2008 R2) in the same way that the ntlm but the same was giving a little problem because the user accounts were being blocked. Sorry I'm a

Re: [squid-users] Authentication bug in 3.1.19 solved in 3.2.0.17

2012-05-27 Thread Amos Jeffries
On 25/05/2012 8:37 p.m., Alan wrote: Hello, I'm implementing a proxy server that authenticates users via radius, and then based on the source ip, login and the destination, grants access or not to the requested objects. The relevant section of squid.conf is: auth_param basic program

[squid-users] Authentication bug in 3.1.19 solved in 3.2.0.17

2012-05-25 Thread Alan
Hello, I'm implementing a proxy server that authenticates users via radius, and then based on the source ip, login and the destination, grants access or not to the requested objects. The relevant section of squid.conf is: auth_param basic program /usr/lib/squid/squid_radius_auth -f

AW: AW: [squid-users] Authentication problem

2012-05-15 Thread Fuhrmann, Marcel
@squid-cache.org Betreff: Re: AW: [squid-users] Authentication problem On 09.05.2012 01:44, Fuhrmann, Marcel wrote: Hi Markus, sorry, but it doesn't work. :-( - Added this line in squid.conf - server squid3 reload - deleted IE cache restarted IE and open the website - same error. Err, yeah

[squid-users] authentication issue

2012-05-10 Thread Donald Sylvester Bacha
Dear All, Can you guys please advise on how to resolve authentication issue where pop up box keep prompting for authentication. Users are part of active directory and squid is set up to use ntlm for authentication. This issue is happening for all users. There were not any configuration

Re: [squid-users] authentication issue

2012-05-10 Thread Harry Mills
On 10/05/2012 22:31, Donald Sylvester Bacha wrote: Dear All, Can you guys please advise on how to resolve authentication issue where pop up box keep prompting for authentication. Users are part of active directory and squid is set up to use ntlm for authentication. This issue is happening

[squid-users] Authentication problem

2012-05-08 Thread Fuhrmann, Marcel
Hello, i am using 3.0.STABLE19-1ubuntu0.2 and I have a problem accessing a website. Normally (without proxy) I am getting this windows to login: http://ubuntuone.com/5fEJKKTenjJuAjJm9AJjSu With proxy I get this error (german; but understandable): http://ubuntuone.com/6zbxnmZevYWiDDqPMG24Um Can

RE: [squid-users] Authentication problem

2012-05-08 Thread Markus Lauterbach
15:04 An: squid-users@squid-cache.org Betreff: [squid-users] Authentication problem Hello, i am using 3.0.STABLE19-1ubuntu0.2 and I have a problem accessing a website. Normally (without proxy) I am getting this windows to login: http://ubuntuone.com/5fEJKKTenjJuAjJm9AJjSu With proxy I

AW: [squid-users] Authentication problem

2012-05-08 Thread Fuhrmann, Marcel
] Gesendet: Dienstag, 8. Mai 2012 15:32 An: squid-users@squid-cache.org Betreff: RE: [squid-users] Authentication problem Hi Marcel, You have to add a small piece in your config. I think, it should lool somehow like this: header_access Authorization allow all And restart your squid. Markus

Re: AW: [squid-users] Authentication problem

2012-05-08 Thread Amos Jeffries
On 09.05.2012 01:44, Fuhrmann, Marcel wrote: Hi Markus, sorry, but it doesn't work. :-( - Added this line in squid.conf - server squid3 reload - deleted IE cache restarted IE and open the website - same error. Err, yeah. Leaving the headers alone only works if one was already playing with

[squid-users] Authentication Logging/Debugging

2012-04-16 Thread Chris Waters
I am working some authentication/performance issues with Squid 3.1.19 on Ubuntu with NTLM via winbind and a filtering upstream service (proxy chaining). Is there a method for turning on more verbose logging that either shows the object the authentication parts are processing on or interleaving the

Re: [squid-users] Authentication Logging/Debugging

2012-04-16 Thread Amos Jeffries
On 17.04.2012 09:03, Chris Waters wrote: I am working some authentication/performance issues with Squid 3.1.19 on Ubuntu with NTLM via winbind and a filtering upstream service (proxy chaining). Is there a method for turning on more verbose logging that either shows the object the authentication

Re: [squid-users] Authentication problem

2012-04-06 Thread Mohamed Amine Kadimi
The designed purpose of these redirect tricks in commercial proxies (and Squid captive portals too) is to get the client to make a request to a controlled web service. That server pulls details such as the cient IP address and user-agent header (maybe other things) which the proxy can use as

Re: [squid-users] Authentication problem

2012-04-04 Thread Amos Jeffries
On 4/04/2012 3:54 a.m., Mohamed Amine Kadimi wrote: OK, so here's another pseudo code that comes to my mind, this is somehow similar to some commercial products (Ironport, bluecoat): - The user connects to http://www.somesite.com http://www.a.com/ via the proxy - The Proxy redirects to

Re: [squid-users] Authentication problem

2012-04-03 Thread Amos Jeffries
On 3/04/2012 3:40 a.m., Mohamed Amine Kadimi wrote: Dear Developpers and Community, I would like to set up the following configuration using squid: When a user asks for a web page he is transparently redirected to squid, where an authentication must be done before serving the user with

Re: [squid-users] Authentication problem

2012-04-03 Thread Mohamed Amine Kadimi
OK, so here's another pseudo code that comes to my mind, this is somehow similar to some commercial products (Ironport, bluecoat): - The user connects to http://www.somesite.com via the proxy - The Proxy redirects to http://authenticationportal/http://www.somesite.com with 302 return code. - User

[squid-users] Authentication problem

2012-04-02 Thread Mohamed Amine Kadimi
Dear Developpers and Community, I would like to set up the following configuration using squid: When a user asks for a web page he is transparently redirected to squid, where an authentication must be done before serving the user with content. However, users IP are being NATed before going to

RE: [squid-users] Authentication Prompts

2011-09-09 Thread Jenny Lee
Date: Fri, 9 Sep 2011 12:50:24 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication Prompts On 09/09/11 06:28, Matt Cochran wrote: I've been trying to model two different kinds of users in ACLs, where the kids are authenticated

Re: [squid-users] Authentication Prompts

2011-09-09 Thread Amos Jeffries
On 10/09/11 01:52, Jenny Lee wrote: Date: Fri, 9 Sep 2011 12:50:24 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication Prompts On 09/09/11 06:28, Matt Cochran wrote: I've been trying to model two different kinds of users in ACLs, where

[squid-users] Authentication Prompts

2011-09-08 Thread Matt Cochran
I've been trying to model two different kinds of users in ACLs, where the kids are authenticated by one account, and the adults another. The kids are allowed to go only to a whitelist of websites, but I'd like the adults to be able to override this behavior for a while if they enter their

Re: [squid-users] Authentication Prompts

2011-09-08 Thread Amos Jeffries
On 09/09/11 06:28, Matt Cochran wrote: I've been trying to model two different kinds of users in ACLs, where the kids are authenticated by one account, and the adults another. The kids are allowed to go only to a whitelist of websites, but I'd like the adults to be able to override this

RE: [squid-users] Authentication infinite loop

2011-08-10 Thread David Parks
for now. Dave -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, July 26, 2011 3:41 PM To: squid-users@squid-cache.org Subject: RE: [squid-users] Authentication infinite loop On Tue, 26 Jul 2011 15:05:22 -0700, David Parks wrote: After some more testing I'm

RE: [squid-users] Authentication infinite loop

2011-07-26 Thread David Parks
[mailto:davidpark...@yahoo.com] Sent: Monday, July 25, 2011 7:11 PM To: squid-users@squid-cache.org Subject: [squid-users] Authentication infinite loop In doing some dev work I see a situation where squid gets into an infinite loop with the browser. The situation: 1) Browser attempts digest authentication

RE: [squid-users] Authentication infinite loop

2011-07-26 Thread Amos Jeffries
On Tue, 26 Jul 2011 15:05:22 -0700, David Parks wrote: After some more testing I'm finding more cause for concern here. I'm using 3.2.0.9 in this test. Please use 3.2.0.10. .9 has some big issues. Digest authentication is configured. I am now just using a simple auth helper script which

[squid-users] Authentication infinite loop

2011-07-25 Thread David Parks
In doing some dev work I see a situation where squid gets into an infinite loop with the browser. The situation: 1) Browser attempts digest authentication against squid (running with a custom auth helper) 2) auth helper fails user authentication 3) I believe squid caches the authentication

[squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Robert Velter
Hi all, i have a (nice?) squid authentication/authorization challenge. I already have a working authentication configuration using negiotiate with squid_kerb_auth and ntlm using ntlm_auth. Authorization is done using an external_acl_type with squid_ldap_group. Now i want that users can

Re: [squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Amos Jeffries
On 06/07/11 23:19, Robert Velter wrote: Hi all, i have a (nice?) squid authentication/authorization challenge. I already have a working authentication configuration using negiotiate with squid_kerb_auth and ntlm using ntlm_auth. Authorization is done using an external_acl_type with

Re: [squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Robert Velter
Hi Amos, thanks for your clarification and the link. So i try now the following: 1) Add a working basic auth to auth_param (probably ldap_auth). 2) Modify the access list from http_access allow ldapgroup-access http_access deny all to http_access deny !ldapgroup-access

Re: [squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Amos Jeffries
On Wed, 06 Jul 2011 15:42:18 +0200, Robert Velter wrote: Hi Amos, thanks for your clarification and the link. So i try now the following: 1) Add a working basic auth to auth_param (probably ldap_auth). 2) Modify the access list from http_access allow ldapgroup-access http_access

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-02 Thread Saurabh Agarwal
I used pipeline_prefetch off setting in squid.conf and it works. Regards, Saurabh -Original Message- From: Senthilkumar [mailto:senthilkumaar2...@gmail.com] Sent: Wednesday, February 02, 2011 12:48 PM To: Saurabh Agarwal Subject: Re: [squid-users] Authentication to Sharepoint

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
15 minutes request_timeout 5 minutes half_closed_clients off pconn_timeout 1 minute Regards, Saurabh -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, February 01, 2011 12:12 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On 01/02/11 21:29, Saurabh Agarwal wrote: Hi Amos I am using squid.2.7.STABLE7. Following is my configuration. I want to allow everything. http_port 192.168.11.35:3128 transparent acl from_localhost src 192.168.11.35 http_port 10.102.79.82:3128 transparent acl from_localhost src

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
: Tuesday, February 01, 2011 3:34 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication to Sharepoint not happening On 01/02/11 21:29, Saurabh Agarwal wrote: Hi Amos I am using squid.2.7.STABLE7. Following is my configuration. I want to allow everything. http_port

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On 01/02/11 23:57, Saurabh Agarwal wrote: Thanks Amos. Yeah they were cut and paste errors. Other than that I have tried using http11 with http_port and ignore_expect and it still doesn't work. I think this is by design in Squid. Following code in client_side.c suggests that it will always

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
...@treenet.co.nz] Sent: Tuesday, February 01, 2011 4:39 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication to Sharepoint not happening On 01/02/11 23:57, Saurabh Agarwal wrote: Thanks Amos. Yeah they were cut and paste errors. Other than that I have tried using http11

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On 02/02/11 00:43, Saurabh Agarwal wrote: Looks like we are making progress. Yeah there is a condition in the code client_side.c that relates to when WWW-Authenticate header is being deleted. Condition checks for no_connection_auth flag in the request. This is the code. It checks if there is

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
Amos! Regards, Saurabh -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, February 01, 2011 6:30 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication to Sharepoint not happening On 02/02/11 00:43, Saurabh Agarwal wrote

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On Tue, 1 Feb 2011 20:25:42 +0530, Saurabh Agarwal saurabh.agar...@citrix.com wrote: It works now! I followed the code and then turned off pipeline_prefetch. In code there was this check which was setting no_connection_auth flag to 1. if (Config.onoff.pipeline_prefetch)

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Senthilkumar
Hi Amos, We are also having trouble in accessing share point site which uses NTLM authentication. We have configured squid with NTLM scheme. Whether the below fix (pipeline_prefetch on ) works for the squid which is configured with NTLM proxy authentication. Thanks Senthil Amos Jeffries

[squid-users] Authentication to Sharepoint not happening

2011-01-31 Thread Saurabh Agarwal
Hi All I am running Squid as a transparent proxy and can't authenticate to sharepoint server. If I bypass squid then everything works fine. I have not compiled Squid with any of the authentication related configurables --enable-auth=basic,digest,ntlm,negotiate

Re: [squid-users] Authentication to Sharepoint not happening

2011-01-31 Thread Amos Jeffries
On 01/02/11 19:27, Saurabh Agarwal wrote: Hi All I am running Squid as a transparent proxy and can't authenticate to sharepoint server. If I bypass squid then everything works fine. I have not compiled Squid with any of the authentication related configurables

[squid-users] authentication problems

2010-12-04 Thread ant2ne
I want to use squid and dansguardign to filter by groups. It is working, sort of. Problem 1, after launching the web browser it takes a very long time (a minute or 2) before the authentication dialog pops up. This needs to be instant. What am I doing wrong? Once it does finally pop up, I can

Re: [squid-users] authentication problems

2010-12-04 Thread Amos Jeffries
On 05/12/10 09:45, ant2ne wrote: I want to use squid and dansguardign to filter by groups. It is working, sort of. Problem 1, after launching the web browser it takes a very long time (a minute or 2) before the authentication dialog pops up. This needs to be instant. What am I doing wrong?

Re: [squid-users] authentication switching

2010-11-18 Thread Mikio Kishi
Hi, Amos Squid can offer both types. Configure two sets of auth_param in the order you would prefer them to be used. I know that. auth_param ntlm program . auth_param basic program . The above parameters return the follwoing http reply. HTTP/1.0 407 Proxy Authentication Required

Re: [squid-users] authentication switching

2010-11-18 Thread Amos Jeffries
On 18/11/10 22:49, Mikio Kishi wrote: Hi, Amos Squid can offer both types. Configure two sets of auth_param in the order you would prefer them to be used. I know that. auth_param ntlm program . auth_param basic program . The above parameters return the follwoing http reply.

[squid-users] authentication switching

2010-11-17 Thread Mikio Kishi
Hi, all Now, I'm using NTLM authentication (auth_param ntlm ..). However, we can not browse some sites (windows update or adobe's one) bacause activex control is not supported NTLM authentication. So, I'd like to browse via Basic auth when NTLM auth is failed. Is it possible to configure

Re: [squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-26 Thread Nick Cairncross
On 26/10/2010 03:56, Paul Freeman paul.free...@eml.com.au wrote: Hi. I have successfully installed Squid 3.1.8 on Ubuntu 10.04LTS and have enabled Kerberos/NTLM authentication using the squid_kerb_auth helper. This setup is working well and successfully authenticates Windows domain users when

RE: [squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-26 Thread Paul Freeman
-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2 On 26/10/2010 03:56, Paul Freeman paul.free...@eml.com.au wrote: Hi. I have successfully installed Squid 3.1.8 on Ubuntu 10.04LTS and have enabled Kerberos/NTLM authentication using

RE: [squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-26 Thread Paul Freeman
To: Nick Cairncross; Squid Users Subject: RE: [squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2 Hi Nick Thanks for looking at this. I appreciate your help. My answers to your questions are in line below -Original Message- From

[squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-25 Thread Paul Freeman
Hi. I have successfully installed Squid 3.1.8 on Ubuntu 10.04LTS and have enabled Kerberos/NTLM authentication using the squid_kerb_auth helper. This setup is working well and successfully authenticates Windows domain users when they are logged in using their domain credentials on Windows XP

Re: [squid-users] Authentication Reverse Proxy

2010-05-03 Thread Amos Jeffries
GIGO . wrote: Hi, What is the behaviour/mechanism of authentication if using squid proxy for both as forward proxy and reverse proxy. I have successfully setup it for a forward proxy using the Helper files by Markus and the following tutorial;

[squid-users] Authentication Reverse Proxy

2010-05-02 Thread GIGO .
Hi, What is the behaviour/mechanism of authentication if using squid proxy for both as forward proxy and reverse proxy. I have successfully setup it for a forward proxy using the Helper files by Markus and the following tutorial;

[squid-users] Authentication in squid windows

2010-04-15 Thread ondemandemails
dear frnds, i m looking forward to deploy squid on windows server 2003 for my wireless users. can some 1 help me in this case as i dnt want to make a domain because this will render the users unable to work on laptops out of the premises. other option is to make a username password file which

[squid-users] Authentication logging

2010-04-08 Thread John Horne
Hello, Using squid 2.7 stable 9, I have set the debug_options to 29,2 which logs authenticated users, e.g: user 'xxx' has been seen at a new IP address (11.22.33.44) However, is there a way I can log unsuccessful authentication attempts? I have increased the debug level to 6, but it still

Re: [squid-users] Authentication logging

2010-04-08 Thread John Horne
On Thu, 2010-04-08 at 21:43 +0100, John Horne wrote: Hello, Using squid 2.7 stable 9, I have set the debug_options to 29,2 which logs authenticated users, e.g: user 'xxx' has been seen at a new IP address (11.22.33.44) However, is there a way I can log unsuccessful authentication

[squid-users] Authentication helpers not shut down

2010-04-06 Thread David Parks
I noticed that running squid -k reconfigure starts a new authentication helper, but does not shut down the old one. Is this normal behavior? Do I just need to monitor for the closing of the input stream and shut down on that cue? Just wanna make sure I'm on track. Dave p.s. if there are any

Re: [squid-users] Authentication helpers not shut down

2010-04-06 Thread Henrik Nordström
tis 2010-04-06 klockan 13:49 -0700 skrev David Parks: I noticed that running squid -k reconfigure starts a new authentication helper, but does not shut down the old one. It does. Is this normal behavior? Do I just need to monitor for the closing of the input stream and shut down on that

Re: [squid-users] Authentication caching

2010-04-03 Thread Henrik Nordström
lör 2010-03-27 klockan 18:42 +0100 skrev Khaled Blah: Hi all, I'm developing an authentication helper (Negotiate/NTLM) for squid and I am trying to understand more how squid handles this process internally. Most of all I'd like to know how and how long squid caches authentication results. I

[squid-users] Authentication caching

2010-03-27 Thread Khaled Blah
Hi all, I'm developing an authentication helper (Negotiate/NTLM) for squid and I am trying to understand more how squid handles this process internally. Most of all I'd like to know how and how long squid caches authentication results. I have looked at the debug logs and they show that squid

[squid-users] Authentication caching

2010-03-27 Thread Khaled Blah
Hi all, I'm developing an authentication helper (Negotiate/NTLM) for squid and I am trying to understand more how squid handles this process internally. Most of all I'd like to know how and how long squid caches authentication results. I have looked at the debug logs and they show that squid

Re: [squid-users] authentication pass through upstream server

2010-02-23 Thread Amos Jeffries
Mark Engels wrote: Mark Engels wrote: Hello all, Im hopeing this is the place to come when seeking some assistance with a squid proxy configuration issue thats giving myself a little grief, and i certainly hope nothing like this has been asked before. The general idea of what im trying to

[squid-users] authentication pass through upstream server

2010-02-22 Thread Mark Engels
Hello all, Im hopeing this is the place to come when seeking some assistance with a squid proxy configuration issue thats giving myself a little grief, and i certainly hope nothing like this has been asked before. The general idea of what im trying to accomplish is to have a end user enter

Re: [squid-users] authentication pass through upstream server

2010-02-22 Thread Amos Jeffries
Mark Engels wrote: Hello all, Im hopeing this is the place to come when seeking some assistance with a squid proxy configuration issue thats giving myself a little grief, and i certainly hope nothing like this has been asked before. The general idea of what im trying to accomplish is to have

RE: [squid-users] authentication pass through upstream server

2010-02-22 Thread Mark Engels
Mark Engels wrote: Hello all, Im hopeing this is the place to come when seeking some assistance with a squid proxy configuration issue thats giving myself a little grief, and i certainly hope nothing like this has been asked before. The general idea of what im trying to accomplish is to

  1   2   3   4   5   6   >