Re: [squid-users] Memory Leak Squid 3.4.9 on FreeBSD 10.0 x64

2014-11-24 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/11/2014 9:06 a.m., Doug Sampson wrote: > Recently due to squid 2.7 being EOL'ed, we migrated our squid > server to version 3.4.9 on a FreeBSD 10.0-RELEASE running on 64-bit > hardware. We started seeing paging file being swapped out > eventually

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well james you are 100% right. But as you may know not everybody can test all day long. Some have day jobs and someone else knows the answer already and can assist here and there. This is the basic foundation of this mailing list. Anyone anytime can as

Re: [squid-users] External ACL with an HTTP reply header format doesn't

2014-11-24 Thread Jorge Iván Burgos Aguilar
Hi again, Solved by using %<{Content-Type} log format instead of the one with an additional h with it (recommend while running squid -k parse). Actually is a bug in the code handling the parsing of the external acl's but here is not the place to discuss it, i will open a new one bug report asap on

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread James Harper
> > On 11/24/2014 02:43 PM, Kinkie wrote: > > Hi Eliezer, I don't think so. PACfiles have no access to the DOM or > > facilities like AJAX, and are very limited in what they can return > > or affect as side-effects. In theory it could be possible to do > > something, but in practice it would be on

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Walter H.
Hi, a sample of a .pac-File function FindProxyForURL( url, host ) { var strURL = ( decodeURI( url ) ).toLowerCase( ); var strHost = host.toLowerCase( ); // Redirect to proxy with these URLs if ( ( strURL == "http://flickr.com/images/spaceball.gif"; ) || ( strURL == "..." ) )

[squid-users] Memory Leak Squid 3.4.9 on FreeBSD 10.0 x64

2014-11-24 Thread Doug Sampson
Recently due to squid 2.7 being EOL'ed, we migrated our squid server to version 3.4.9 on a FreeBSD 10.0-RELEASE running on 64-bit hardware. We started seeing paging file being swapped out eventually running out of available memory. From the time squid gets started it usually takes about two days

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Jason Haar
On 24/11/14 23:25, Eliezer Croitoru wrote: > I do know that pac files contains some form of JS and in the past I > have seen couple complex PAC files but unsure about the options. > I want to know if a PAC file can be used for > Authentication\Authorization, maybe even working against another > ext

Re: [squid-users] citrix client auth with squid

2014-11-24 Thread Tom Tom
Some of our internal users are connecting via squid and ica-webclient (java-applet) to the remote citrix-server. Because of our kerberos-authentication (java resp. ica-webclient seems not to know kerberos) we allowed the destination (citrix)-site without authentication, but based on the user-agent

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2014 03:24 PM, Kinkie wrote: > But what if multiple users share the same IP (e.g. Citrix, X11)? This is another situation which requires authentication... Two users can use the same pac files and be authorized as another user(a regular forward

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Kinkie
But what if multiple users share the same IP (e.g. Citrix, X11)? On Mon, Nov 24, 2014 at 2:13 PM, Eliezer Croitoru wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 11/24/2014 03:05 PM, Kinkie wrote: >> Still it'd be semi-public; you'd have to replicate the access >> control rules o

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2014 03:05 PM, Kinkie wrote: > Still it'd be semi-public; you'd have to replicate the access > control rules on the proxy anyway. So we can use a http backend for authentication via a radius server and then get a token or something else while

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Kinkie
Still it'd be semi-public; you'd have to replicate the access control rules on the proxy anyway. On Mon, Nov 24, 2014 at 1:46 PM, Eliezer Croitoru wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 11/24/2014 02:43 PM, Kinkie wrote: >> Hi Eliezer, I don't think so. PACfiles have no a

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2014 02:43 PM, Kinkie wrote: > Hi Eliezer, I don't think so. PACfiles have no access to the DOM or > facilities like AJAX, and are very limited in what they can return > or affect as side-effects. In theory it could be possible to do > somethi

Re: [squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Kinkie
Hi Eliezer, I don't think so. PACfiles have no access to the DOM or facilities like AJAX, and are very limited in what they can return or affect as side-effects. In theory it could be possible to do something, but in practice it would be only advisory and not secure: a pacfile must by definition

[squid-users] citrix client auth with squid

2014-11-24 Thread Andreas . Reschke
Hi there, does anybody use citrix clients in browser to connect citrix server of another company and squid as a proxy? How does the authentication work at the citrix client? Mit freundlichen Grüßen / Kind regards Mr. Andreas Reschke andreas.resc...@mahle.com _

[squid-users] Authentication\Authorization using a PAC file?

2014-11-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I do know that pac files contains some form of JS and in the past I have seen couple complex PAC files but unsure about the options. I want to know if a PAC file can be used for Authentication\Authorization, maybe even working against another external

Re: [squid-users] Problem with digest authentification and credential backend

2014-11-24 Thread FredB
> > > And it works great ! Thank you Amos for your patch. > In previous Squid 3.3.x DIGEST was very buggy , crash, 407, banners, > but now it seems very stable. Perhaps there are some little bugs > like this, but now it's usable. > Thanks for your works > Hi, William to be more clear this pa