[squid-users] Just a simple question about ACL

2016-03-05 Thread VerĂ³nica Ovando
Hi, community. I need to understand why this rules are not working. My squid is working with AD authentication. I need to allow the group *AD_informatico* to visit facebook only during *maniana_ocio* and *tarde_ocio* and have full access to the web. They are not working. *AD_informatico* can

Re: [squid-users] Kerberos (Negotiate) problem with win2008 AD users

2016-03-05 Thread Markus Moeller
You are welcome Markus "Victor Sudakov" wrote in message news:20160305180102.ga94...@admin.sibptus.tomsk.ru... Markus Moeller wrote: If I look at the wireshark capture details I see that the client is sending a key of version 3( kvno) , but the keytab is version 1. This will create a m

[squid-users] Whether bypass the part TAG_NONE/400 4413 NONE error:invalid-request - HIER_NONE/- text/html at access.log

2016-03-05 Thread johnzeng
Hello Dear Sir i found more error info at access.log 192.168.0.16 TAG_NONE/400 4413 NONE error:invalid-request - HIER_NONE/- text/html Whether we can skip or bypass the TAG_NONE/400 ? if it wont't affect normal access , Whether we can skip the part at access.log and too more same info at acces

[squid-users] external_acl_type wont work

2016-03-05 Thread Baselsayeh
hello im using external_acl_type with my php script squid config: http://pastebin.com/raw/kWJ7WwMj php script: http://pastebin.com/HNL3T1wW nothing gets to php stdin or null values so whats the problem? -- View this message i

Re: [squid-users] Kerberos (Negotiate) problem with win2008 AD users

2016-03-05 Thread Victor Sudakov
Markus Moeller wrote: > > If I look at the wireshark capture details I see that the client is sending > a key of version 3( kvno) , but the keytab is version 1. This will create a > mismatch. What do you get when using the 2003 clients ? Markus, you are great! That was indeed the cause of the

Re: [squid-users] Kerberos (Negotiate) problem with win2008 AD users

2016-03-05 Thread Markus Moeller
Hi Victor, If I look at the wireshark capture details I see that the client is sending a key of version 3( kvno) , but the keytab is version 1. This will create a mismatch. What do you get when using the 2003 clients ? [truncated]Proxy-Authorization: Negotiate YIISrgYGKwYBBQUCoIISojCCEp6gM

Re: [squid-users] Kerberos (Negotiate) problem with win2008 AD users

2016-03-05 Thread Victor Sudakov
Markus Moeller wrote: > > What does the squid log say when you use -d for the authentication > helper ? I have uploaded the cache.log here: ftp://ftp.sibptus.ru/pub/vas/1.zip There seems to be a message size limit in this list, so I cannot attach it. The helper error message is along the li