Re: [squid-users] Does reload_into_ims not effective for HTTPS?

2016-03-18 Thread Amos Jeffries
On 19/03/2016 6:33 a.m., Yuri Voinov wrote: > > I reload the same url from the same browser, from the same tab, with the > same hotkey. So, request header is the same - "Reload with no-cache", yes? > Insufficient data. You have not shown the request headers that action generates. > So, then sq

Re: [squid-users] Squid with ICAP filter?

2016-03-18 Thread Mike Summers
Hi Eliezer, We're a couple of contractors trying to prove to a potential customer that we can build the app they want that integrates with their ICAP service. Our guess is they really don't want to do business as they're not forth coming about the nature of the ICAP service other than "it won't a

[squid-users] TCP_REFRESH_UNMODIFIED_ABORTED

2016-03-18 Thread Heiler Bemerguy
Shouldn't this be something like HIT_ABORTED? There's no header asking if it's modified or to refresh/reload.. (but I really aborted it) Tested a zillion times... Connecting to: au.v4.download.windowsupdate.com (via 10.1.10.9) Header Sent GET http://au.v4.download.windows

[squid-users] Negotiate wrappter returns AF = on Debian Jessie

2016-03-18 Thread James Zuelow
Hello - I have Squid 3.4.8 installed on Debian Jessie. I'm using the negotiate wrapper configured like this: auth_param negotiate program /usr/lib/squid3/negotiate_wrapper_auth -d \ --kerberos /usr/lib/squid3/negotiate_kerberos_auth -s HTTP/proxy.domain.local@DOMAIN.LOCAL \ --ntlm /usr/bi

[squid-users] not caching

2016-03-18 Thread joe
is this cachable HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: video/x-flv Server: nginx Cache-Control: public, public Age: 5707758 Date: Wed, 16 Mar 2016 11:15:20 GMT Last-Modified: Thu, 21 May 2015 14:56:19 GMT Expires: Mon, 09 May 2016 09:46:02 GMT Content-Length: 22371738 X-Cache: MISS

Re: [squid-users] Does reload_into_ims not effective for HTTPS?

2016-03-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Well, but what is preventing caching the HTTPS dublicate of URL exactly? 18.03.16 22:35, Amos Jeffries пишет: > On 19/03/2016 3:13 a.m., Yuri Voinov wrote: >> 18.03.16 19:42, Amos Jeffries пишет: >> >>> What headers are on the two requests? >> >>

Re: [squid-users] gzip deflate

2016-03-18 Thread Amos Jeffries
On 17/03/2016 10:56 p.m., joe wrote: > Alex Rousskov wrote >> On 03/16/2016 02:21 AM, joe wrote: >>> You need to direct messages to the service(s) using adaptation_access >>> directives: >>> isn't faster if we use gzip library instead that will minimize the >>> redirect >>> ms..direct decompress >>

Re: [squid-users] not caching

2016-03-18 Thread joe
my understood to L-M factor algorithm was wrong tks again it work -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/not-caching-tp4676710p4676719.html Sent from the Squid - Users mailing list archive at Nabble.com. _

Re: [squid-users] Squid not allowing SSL handshake

2016-03-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 root @ cthulhu / # openssl s_client -connect api.twilio.com:443 CONNECTED(0003) depth=3 C = ZA, ST = Western Cape, L = Cape Town, O = Thawte Consulting cc, OU = Certification Services Division, CN = Thawte Premium Server CA, emailAddress = prem

Re: [squid-users] Does reload_into_ims not effective for HTTPS?

2016-03-18 Thread Amos Jeffries
On 19/03/2016 3:13 a.m., Yuri Voinov wrote: > 18.03.16 19:42, Amos Jeffries пишет: > >> What headers are on the two requests? > > root @ cthulhu /patch # wget -S > http://icdn.lenta.ru/images/2016/03/17/09/20160317091221731/tabloid_8a08b3a372ff4499c0d95723ad4dc382.jpg > --2016-03-18 19:44:56-- >

Re: [squid-users] NEGOTIATE Kerberos Auth

2016-03-18 Thread Markus Moeller
Hi, Is you client a member of FATHER.COM or KID1.FATHER.COM / KID2.FATHER.COM ? Can you get a wireshark capture on your client on port 88 ? You should see some TGS –REQs in the capture and I assume also TGS-REPs with error messages. Can you share these error messages ? Regards M

Re: [squid-users] TCP_REFRESH_UNMODIFIED_ABORTED

2016-03-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It depends from your whole squid config. 18.03.16 0:45, Heiler Bemerguy пишет: > > Shouldn't this be something like HIT_ABORTED? There's no header asking if it's modified or to refresh/reload.. (but I really aborted it) > > Tested a zillion times.

Re: [squid-users] Squid not allowing SSL handshake

2016-03-18 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I see one problem in your squid's config: acl allowed_https_sites ssl::server_name .twilio.com Try to use ssl::server_name_regex \.twilio\.com instead of ssl::server_name. I've opened bug about it: ssl::server_name does not work. 17.03.16 22:2

Re: [squid-users] Squid Authentication with Window AD

2016-03-18 Thread Amos Jeffries
On 16/03/2016 10:25 p.m., vibhorsaraswat wrote: > Hello All, > > I am getting the below error during authentication, can any one helo me > EHLO. > > wbinfo -a auth_squi > Enter auth_squid's password: > plaintext password authentication failed > Could not authenticate user auth_squi

[squid-users] NEGOTIATE Kerberos Auth

2016-03-18 Thread akn ab
Dear all,   i'm having a problem in configuring my squid 3.5.15 with negotiated kerberos authentication in my Mono Forest Multi Domains.   My FATHER.COM is a forest with 2 children: KID1 and KID2. Like this: FATHER.COM -> KID1.FATHER.COM     -> KID2.FAT