Hi Yuri
thx a lot for your links.. following the first one, what I did:
1. Create and sign the .pem certificate
2. Update my squid.conf with:
https_port 3130 ssl-bump \
cert=/etc/squid/ssl/myCA.pem \
generate-host-certificates=on dynamic_cert_mem_cache_size=4MB
acl step1 at_step SslBump1
ssl_b
Amos,
Thank you very much for you reply,
But I would just like to confirm this,
I thought ETAG is something which we can verify like,
- when the server is sending response it sends ETAG.
- squid then decides to cache it with ETAG
- now if somebody tries to fetch the same URL given they are on s
Hi Silamael,
Can you perform a kinit u...@example.com ? Does the squid user have
read access to krb5.conf ?
Markus
"Silamael Darkomen" wrote in message
news:955b9071-4d07-f0a2-2925-8f63fa332...@coronamundi.de...
Hello,
I'm currently working on setting up our proxy to authenticate
On 16/09/2016 11:45 p.m., Verónica Ovando wrote:
> Hi!
>
> I am trying to set up delay pools for AD authenticated users.
>
> I run Squid 3.4.8 in a Debian 8 server.
>
>
> I configured come delay pools, but they really don't have effect. What I want
> to do is to provide full bandwidth for some
16.09.2016 17:50, VB пишет:
Hi guys
I'd like to ask you for a suggestion..
I'm running SQUID 3.4.8 under Rasberry PI3 (Rasbian Jesse) - proxy server
"intercept" mode (with iptables forwarding rule to 3128).
I've created ACL for devices (ipad, mobiles...) - time based, because I
need to allow
on 09/16/2016 08:28 AM, wrote: "Rafael Akchurin"rafael.akchu...@diladele.com
> Why not to setup HAproxy in front of your ICAP instances?
> Best regards
The haproxy was actually occurred to me before,but I am confused how to
configure
1、How can I configure squid that the next traffic will go to ha
Hi guys
I'd like to ask you for a suggestion..
I'm running SQUID 3.4.8 under Rasberry PI3 (Rasbian Jesse) - proxy server
"intercept" mode (with iptables forwarding rule to 3128).
I've created ACL for devices (ipad, mobiles...) - time based, because I
need to allow Internet connection restricted
on 09/16/2016 08:58 AM, wrote: "Amos Jeffries"squ...@treenet.co.nz
> This is *not* what Alex advised
> tcp_outgoing_address is the IP Squid will use to contact
Thank you and Alex。
It's OK.___
squid-users mailing list
squid-users@lists.squid-cache.org
htt
Hi!
I am trying to set up delay pools for AD authenticated users.
I run Squid 3.4.8 in a Debian 8 server.
I configured come delay pools, but they really don't have effect. What I want
to do is to provide full bandwidth for some pages and create a delay for ALL
the others. This is because I ca
On 16/09/2016 7:09 p.m., Hardik Dangar wrote:
> *Amos,*
>
> Thanks for the reply but it seems i am not able to tell you what i
> want to do. i don't want to cache repo files. i want to cache .zip
> files only. i don't want .git file to cache but only .zip files which
> are fetch from github.com,
On 16/09/2016 8:19 p.m., yanghe wrote:
> On 09/14/2016 09:51 PM, wrote: "Alex Rousskov"
>> Unfortunately, Squid does not support true load
>> However, there is a workaround: Use
>
> Thanks for your adivice.
> IF I do not use adaptation_service_set or adaptation_service_chain to list N
> c-icap
I think you forgot in your test, that you may need to modify the default
kerberos ticket used.
I suggest you change you config a bit to something like
external_acl_type internet-win-allowed %LOGIN
/usr/local/libexec/squid/ext_kerberos_ldap_group_acl \
-D YOUR.REALM.TLD \
-g allowed
Hello Yanghe,
Why not to setup HAproxy in front of your ICAP instances?
ICAP is relatively easily can be load balanced by HAProxy.
We have it in place up and running.
Best regards,
Rafael Akchurin
Diladele B.V.
http://www.quintolabs.com
http://www.diladele.com
--
Please take a look at Web
On 09/14/2016 09:51 PM, wrote: "Alex
Rousskov"
> Unfortunately, Squid does not support true load
> However, there is a workaround: Use
Thanks for your adivice.
IF I do not use adaptation_service_set or adaptation_service_chain to list N
c-icap services.the traffic will only go to the first.
G
Hello,
I'm currently working on setting up our proxy to authenticate the users
via Kerberos against a Windows AD.
The simple user authentication through negotiate_kerberos_auth is
already working.
But the second step for checking the group of an authenticated users
gives me some headache. Even wit
*Amos,*
Thanks for the reply but it seems i am not able to tell you what i
want to do. i don't want to cache repo files. i want to cache .zip
files only. i don't want .git file to cache but only .zip files which
are fetch from github.com,
Also you have said things about commits but i am talking a
16 matches
Mail list logo
