Re: [squid-users] squid centos and osq_lock

2015-07-30 Thread Josip Makarevic
Hi Amos, cache_mem 0 cache deny all already there. Regarding number of nic ports we have 4 10G eth cards 2 in each bonding interface. Well, entire config would be way too long but here is the static part: via off cpu_affinity_map process_numbers=1 cores=2 forwarded_for delete visible_hostname

[squid-users] LDAP related question.

2015-07-30 Thread Eliezer Croitoru
I wanted to test the ext_ldap_group_acl so I created a ldap domain. The command I am testing is: /usr/lib/squid3/ext_ldap_group_acl -b "DC=ngtech,DC=local" -D "CN=admin,DC=ngtech,DC=local" -w "password" -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=CN=%a,DC=ngtech,DC=local))" -h 127.0.

Re: [squid-users] dns failover failing with 3.4.7

2015-07-30 Thread Amos Jeffries
On 31/07/2015 10:39 a.m., Mike wrote: > I suspect this may be a bug with squid 3.4.x since this issue happened > on 2 different squid servers, one is 3.4.6, another is 3.4.7. Yet on the > backups to each, one has 3.5.1 and other has 3.5.6 (I updated it today), > and they are not affected by this, b

Re: [squid-users] squid centos and osq_lock

2015-07-30 Thread Amos Jeffries
On 31/07/2015 8:05 a.m., Josip Makarevic wrote: > Hi, > > I have a problem with squid setup (squid version 3.5.6, built from source, > centos 6.6) > I've tried 2 options: > 1. SMP > 2. NON-SMP > > I've decided to stick with custom build non-smp version and the thing is: > - i don't need cache - a

Re: [squid-users] dns failover failing with 3.4.7

2015-07-30 Thread Mike
On 7/30/2015 16:30 PM, Amos Jeffries wrote: On 31/07/2015 3:48 a.m., Mike wrote: On 7/27/2015 17:25 PM, Amos Jeffries wrote: On 28/07/2015 8:38 a.m., Mike wrote: Running into an issue, using the squid.conf entry dns_nameservers 72.x.x.x 72.x.y.y These are different servers (under our control)

[squid-users] forward proxy - many users with one login/passwd.

2015-07-30 Thread Berkes, David
Just a basic question. I have a 3.5.0.4 forward proxy setup with basic authentication for my MDM proxy (iphones). All iphones are set with the global proxy and identical user-name/password. They will be on an LTE network and will be switching IP's often. The forward proxy user-name/password

Re: [squid-users] dns failover failing with 3.4.7

2015-07-30 Thread Amos Jeffries
On 31/07/2015 3:48 a.m., Mike wrote: > On 7/27/2015 17:25 PM, Amos Jeffries wrote: >> On 28/07/2015 8:38 a.m., Mike wrote: >>> Running into an issue, using the squid.conf entry >>> dns_nameservers 72.x.x.x 72.x.y.y >>> >>> These are different servers (under our control) for the purpose of >>> filte

Re: [squid-users] LDAP Auth re-prompting for credentials on browser close, need suggestions

2015-07-30 Thread Amos Jeffries
On 31/07/2015 3:36 a.m., Michael Monette wrote: > > > On 7/29/2015 5:20 PM, Amos Jeffries wrote: >> >>> Found this post asking the same question: >>> http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Ldap-Authen-AD-how-to-make-authentication-persistent-td3604487.html >>> >>> and it >>> >>>

Re: [squid-users] error windbind

2015-07-30 Thread Amos Jeffries
On 31/07/2015 2:49 a.m., Posta Esterna wrote: > Thanx.. > > I don't understand a something... > > Where do i need to find Samba? On the Proxy or on the AD Server? AD server is the server. Samba contains parts that are clients. Winbind, nmblookup, smbclient, and the ntlm_auth helper are the clien

[squid-users] squid centos and osq_lock

2015-07-30 Thread Josip Makarevic
Hi, I have a problem with squid setup (squid version 3.5.6, built from source, centos 6.6) I've tried 2 options: 1. SMP 2. NON-SMP I've decided to stick with custom build non-smp version and the thing is: - i don't need cache - any kind of it - I have DNS cache just for that - squid has to listen

Re: [squid-users] dns failover failing with 3.4.7

2015-07-30 Thread Mike
On 7/27/2015 17:25 PM, Amos Jeffries wrote: On 28/07/2015 8:38 a.m., Mike wrote: Running into an issue, using the squid.conf entry dns_nameservers 72.x.x.x 72.x.y.y These are different servers (under our control) for the purpose of filtering than listed in resolv.conf (which are out of our cont

Re: [squid-users] LDAP Auth re-prompting for credentials on browser close, need suggestions

2015-07-30 Thread Michael Monette
On 7/29/2015 5:20 PM, Amos Jeffries wrote: Found this post asking the same question: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Ldap-Authen-AD-how-to-make-authentication-persistent-td3604487.html and it There were two suggestions that stood out: There used to be a "authenticat

Re: [squid-users] error windbind

2015-07-30 Thread Posta Esterna
Thanx.. I don't understand a something... Where do i need to find Samba? On the Proxy or on the AD Server? I don't think i have to create a Samba server on the Proxy... is it true? So how can i tell Squid to connect to the right Samba Server? Il 24/07/2015 15.50, Amos Jeffries ha scritto:

Re: [squid-users] Squid 3.4.14

2015-07-30 Thread Amos Jeffries
On 30/07/2015 8:08 p.m., FredB wrote: > >> >> Well. Yes an 3.4 has a serious CVE that needs releasing. So it will >> be a >> thing this weekend. >> >> But no other bug fixes in the past few months qualify as security >> issues. So yes you need to be moving on to 3.5. Especially if you are >> using

Re: [squid-users] Squid 3.4.14

2015-07-30 Thread FredB
> > Well. Yes an 3.4 has a serious CVE that needs releasing. So it will > be a > thing this weekend. > > But no other bug fixes in the past few months qualify as security > issues. So yes you need to be moving on to 3.5. Especially if you are > using the ssl-bump features. > > Amos > So, no