Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread John Mok
cache.org > http://lists.squid-cache.org/listinfo/squid-users > > > > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users > > Cumprimentos > Pedro Lobo > Solutions Architect | System Engineer > > pedro.l...@pt.clar

Re: [squid-users] Large rock supporting with stable squid version

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/10/2014 2:09 a.m., Ahmed Allzaeem wrote: > Hi > > I want to ask about Large rock supporting. > > In large rock supporting wts the max size for disk store ? and max > size of ram store? The disk store limit depends on HDD/SSD space available. T

Re: [squid-users] squid ipv6 tcp_outgoing limitation ??

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/10/2014 11:11 a.m., Ahmed Allzaeem wrote: > Hi , > > Recently I used squid 3.4.3 for ipv6 for tcp_outgoing for many > ipv6 addresses based on the username. > > > > > > I added about 1000 users with 1000 tcp_outgoing address but it > didn't

Re: [squid-users] Group check against AD

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/10/2014 6:26 a.m., masterx81 wrote: > Hi! I'm trying to check if a user is present in a Group, and now > i'm using the following config: > > external_acl_type memberof ttl=30 %LOGIN > /usr/local/squid/libexec/ext_ldap_group_acl -v 3 -R -K -b >

Re: [squid-users] squid 3.4.8 Eating all of the Bandwidth

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/10/2014 7:07 a.m., saleh madi wrote: > Hello, > > Why squid 3.4.8 Eating all of the Bandwidth: > > iptraf -d eth0 in the squid box > > Incoming rates: 435007.2 kbits/sec > 50974.2 packets/sec > > > Outgoing rates: 276229.9 kbits/sec > 45

Re: [squid-users] how to obtain info about actual active downloads?

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/10/2014 5:37 a.m., Leonardo Rodrigues wrote: > On 27/10/14 11:47, Antony Stone wrote: >> On Monday 27 October 2014 at 14:32:39 (EU time), Frantisek >> Hanzlik wrote: >> >>> Please, what is best way for determining who squid clients >>> (their PC

Re: [squid-users] Filtering keywords on google search

2014-10-27 Thread Rafael Akchurin
Hello Eliezer, I did not mean to be rude, just forgot to type CentOS *7* stock Squid from the distribution maintainers (not from you :) The FF requires patching in gadget.cc otherwise it shows sec_error_inadequate_key_usage for almost all SSL bumped pages. The new version 3.4.8 is probably bet

Re: [squid-users] Filtering keywords on google search

2014-10-27 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/27/2014 09:01 PM, Rafael Akchurin wrote: > Default stock Squid in CentOS for example allows for SSL Sump out > of the box (not for Firefox though). Why not for firefox? It is working on firefox and all other browsers while some will like the cert

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Pedro Lobo
ng list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users > > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users > > Cumprimentos > Pedro Lobo > Solutions Architect | System Enginee

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Pedro Lobo
Hi Markus, When I get in to the office tomorrow, I'll do that and send you the .cap file. Thanks for all the help so far. Pedro Lobo > On 27 Oct 2014, at 20:53, Markus Moeller wrote: > > Hi Pedro, > >Can you capture the traffic from one Windows 7 on XP client on port 88 ( > just afte

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Markus Moeller
Hi Pedro, Can you capture the traffic from one Windows 7 on XP client on port 88 ( just after the login before access a website via squid until successful or unsuccessful accessing the website) using wireshark ? Send me the .cap files to check. Markus "Pedro Lobo" wrote in message news

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Pedro Lobo
Hi Markus Moeller, Hi Markus, Yeah, I'm currently using that option and permissions are correct too. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Markus Moeller
Hi Pedro, Did you try the –s GSS_C_NO_NAME option ? Markus "Pedro Lobo" wrote in message news:94f74226-f24b-4910-95b7-b86ace815...@gmail.com... Hey Everybody, Seems as though I celebrated too soon on Saturday. Today things are back to not working for Windows 7+ machines and XP/2003 machin

Re: [squid-users] Filtering keywords on google search

2014-10-27 Thread Rafael Akchurin
Hello Francesco, You may want to look into ICAP servers for squid. The ICAP protocol was designed to allow content adaptation. Squid supports ICAP since version 3. Default stock Squid in CentOS for example allows for SSL Sump out of the box (not for Firefox though). This allows you to enforce s

[squid-users] squid 3.4.8 Eating all of the Bandwidth

2014-10-27 Thread saleh madi
Hello, Why squid 3.4.8 Eating all of the Bandwidth: iptraf -d eth0 in the squid box Incoming rates: 435007.2 kbits/sec 50974.2 packets/sec

[squid-users] Group check against AD

2014-10-27 Thread masterx81
Hi! I'm trying to check if a user is present in a Group, and now i'm using the following config: external_acl_type memberof ttl=30 %LOGIN /usr/local/squid/libexec/ext_ldap_group_acl -v 3 -R -K -b "dc=domain,dc=local" -D squid@domain.local -W /etc/squid/ldappass.txt -f "(&(objectclass=person)(sAMAc

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Pedro Lobo
Hey Everybody, Seems as though I celebrated too soon on Saturday. Today things are back to not working for Windows 7+ machines and XP/2003 machines are working just fine. I've also checked the permissions on the keytab file and they haven't changed since Saturday, so it's not that... ARGH

Re: [squid-users] how to obtain info about actual active downloads?

2014-10-27 Thread Leonardo Rodrigues
On 27/10/14 11:47, Antony Stone wrote: On Monday 27 October 2014 at 14:32:39 (EU time), Frantisek Hanzlik wrote: Please, what is best way for determining who squid clients (their PC IP addresses) have which downloads active? I want it to determine which clients burden our slow internet line. Ex

Re: [squid-users] how to obtain info about actual active downloads?

2014-10-27 Thread Antony Stone
On Monday 27 October 2014 at 14:32:39 (EU time), Frantisek Hanzlik wrote: > Please, what is best way for determining who squid clients (their > PC IP addresses) have which downloads active? > I want it to determine which clients burden our slow internet line. > Examining 'access.log' does not help

[squid-users] how to obtain info about actual active downloads?

2014-10-27 Thread Frantisek Hanzlik
Please, what is best way for determining who squid clients (their PC IP addresses) have which downloads active? I want it to determine which clients burden our slow internet line. Examining 'access.log' does not help much in this case, because users can download large files and it may take a few mi

Re: [squid-users] Filtering keywords on google search

2014-10-27 Thread Cassiano Martin
I have some proof of concept on my github. it can be done thought DNS hijacking. I modified a version of tinyproxy to enforce safe search. you can check it out on https://github.com/polaco1782/tinyproxy 2014-10-25 9:49 GMT-02:00 Job : > Hello, since Google switch definitely on SSL connection it s

Re: [squid-users] Delay Class 3 - Squid

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/10/2014 1:01 a.m., Amos Jeffries wrote: > On 28/10/2014 12:57 a.m., Jorge Visentini wrote: >> Hello! > >> Sorry my english. > >> I'm racking my brain to figure out why the error. > >> I've used a long time ago a rule delay pool but this time I

Re: [squid-users] Delay Class 3 - Squid

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/10/2014 12:57 a.m., Jorge Visentini wrote: > Hello! > > Sorry my english. > > I'm racking my brain to figure out why the error. > > I've used a long time ago a rule delay pool but this time I am not > able to implement ... > > In my squid.con

[squid-users] Delay Class 3 - Squid

2014-10-27 Thread Jorge Visentini
Hello! Sorry my english. I'm racking my brain to figure out why the error. I've used a long time ago a rule delay pool but this time I am not able to implement ... In my squid.conf looks like this: delay_pools 1 delay_class 1 3 delay_parameters 1 5/5 24000/24000 delay_access 1 allow re

[squid-users] Delay Class 3 - Squid

2014-10-27 Thread Jorge Visentini
Hello! Sorry my english. I'm racking my brain to figure out why the error. I've used a long time ago a rule delay pool but this time I am not able to implement ... In my squid.conf looks like this: ___ squid-users mailing list squid-users@lists.squid-

Re: [squid-users] squid 3.4.X multiple instances peering

2014-10-27 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/10/2014 12:17 a.m., saleh madi wrote: > Hello, > > I have in the same box four squid 3.4.8 instances, I'm not using > the workers Option. I will need to peering the multiple instances > together to avoid duplication of objects. The below setting

[squid-users] squid 3.4.X multiple instances peering

2014-10-27 Thread saleh madi
Hello, I have in the same box four squid 3.4.8 instances, I'm not using the workers Option. I will need to peering the multiple instances together to avoid duplication of objects. The below setting works for squid 2.7 but I have tested with squid 3.4.8 doesn't work. In SQUID2: cache_peer squi