Re: [squid-users] Force LDAP groups to de-authenticate?

2015-07-03 Thread Amos Jeffries
On 4/07/2015 6:08 a.m., Dan Purgert wrote: > I'm setting up a squid proxy with LDAP user/group authentication, and so > far have been able to sort out the problems I've run into with a little > help from google and caches of the various squid mailing lists. > > Currently, it's in a mostly worki

Re: [squid-users] Force LDAP groups to de-authenticate?

2015-07-03 Thread Jason Haar
On 04/07/15 06:08, Dan Purgert wrote: > I need to kick the users and force a re- > auth, as this is for a school environment. You can't really do that with proxy authentication methods. Once a browser has successfully authenticated, it remembers that - so even if you flush the server cache, all t

Re: [squid-users] squid 3.5.5 issue after restart the system

2015-07-03 Thread Mohammad Shakir
After 24hours my squid performance which is not as much as good. should I change to get better performance. Squid Object Cache: Version 3.5.5-20150701-r13857 Build Info: Service Name: squid Start Time: Thu, 02 Jul 2015 15:54:20 GMT Current Time: Fri, 03 Jul 2015 19:12:30 GMT Connection

[squid-users] Force LDAP groups to de-authenticate?

2015-07-03 Thread Dan Purgert
I'm setting up a squid proxy with LDAP user/group authentication, and so far have been able to sort out the problems I've run into with a little help from google and caches of the various squid mailing lists. Currently, it's in a mostly working state for nearly everything (i.e. user authentica

Re: [squid-users] TProxy and client_dst_passthru

2015-07-03 Thread Amos Jeffries
On 4/07/2015 3:21 a.m., Stakres wrote: > Amos, > OK, got your points. > > What I don't understand is: > - The dns records do not match. Squid does the dns request by itself, Reverse those two. > downloads the object, ... from the ORIGINAL_DST (*not* its own DNS lookup) > delivers it to the cli

Re: [squid-users] TProxy and client_dst_passthru

2015-07-03 Thread Stakres
Amos, OK, got your points. What I don't understand is: - The dns records do not match. Squid does the dns request by itself, downloads the object, delivers it to the client and flags with an ORIGINAL_DST, right ? - Same request from another client, same way, it'll be the same object and flagged OR

Re: [squid-users] reply_body_max_size question

2015-07-03 Thread Amos Jeffries
On 3/07/2015 5:46 a.m., Danny wrote: >> It works as documented at >> . If that >> does not fit your criteria then its not what you need. > > I am aware of that, I was just a little unsure how to split the different > dowload > sizes amo

Re: [squid-users] Setting logfile_daemon

2015-07-03 Thread Amos Jeffries
On 4/07/2015 1:20 a.m., Byron Mackay wrote: >> Did you compile the new helper? >> What happens if you run it manually? > > That was it! I admit that I'm new to the space, but I still should have > tried to understand basic c++ first. I got it to run manually on my Mac, > but it looks like I need t

Re: [squid-users] TProxy and client_dst_passthru

2015-07-03 Thread Amos Jeffries
On 4/07/2015 1:21 a.m., Stakres wrote: > Amos, > You told the Squid will check the original dns from the headers, then it'll > do its own dns resolution to verify they both match. > So, if no match, Squid does the request to internet based on the dns it > found. > If I'm right, that the current way

Re: [squid-users] TProxy and client_dst_passthru

2015-07-03 Thread Stakres
Amos, You told the Squid will check the original dns from the headers, then it'll do its own dns resolution to verify they both match. So, if no match, Squid does the request to internet based on the dns it found. If I'm right, that the current way, correct ? What we could do is the same way but a

Re: [squid-users] Setting logfile_daemon

2015-07-03 Thread Byron Mackay
> Did you compile the new helper? > What happens if you run it manually? That was it! I admit that I'm new to the space, but I still should have tried to understand basic c++ first. I got it to run manually on my Mac, but it looks like I need to compile it on Ubuntu instead of just throwing it up

Re: [squid-users] TProxy and client_dst_passthru

2015-07-03 Thread Amos Jeffries
On 4/07/2015 12:05 a.m., Stakres wrote: > Hi Amos, > Can we expect a workaround to allow the object to the cache if the dns > record is corrected by Squid instead that having an ORIGINAL_DST ? > If Squid corrects the request, it mean the URL will be good, so we should be > able to cache the object

Re: [squid-users] TProxy and client_dst_passthru

2015-07-03 Thread Stakres
Hi Amos, Can we expect a workaround to allow the object to the cache if the dns record is corrected by Squid instead that having an ORIGINAL_DST ? If Squid corrects the request, it mean the URL will be good, so we should be able to cache the object Fred -- View this message in context: http:

Re: [squid-users] Dynamic content

2015-07-03 Thread Amos Jeffries
On 3/07/2015 8:36 p.m., Jiri Wetter wrote: > Hello, > > I have problem with caching of dynamic content. > > I verified conditions which have to be met in order to cache dynamic content > here: > http://wiki.squid-cache.org/SquidFaq/InnerWorkings#How_come_some_objects_do_not_get_cached.3F > and

[squid-users] Dynamic content

2015-07-03 Thread Jiri Wetter
Hello, I have problem with caching of dynamic content. I verified conditions which have to be met in order to cache dynamic content here: http://wiki.squid-cache.org/SquidFaq/InnerWorkings#How_come_some_objects_do_not_get_cached.3F and also check by online tool https://redbot.org/ Result is th