Re: [squid-users] Errors in cache.log

2016-09-22 Thread Amos Jeffries
On 23/09/2016 6:11 a.m., erdosain9 wrote: > Hi. > Im having this message in cache.log > > Error negotiating SSL on FD 121: error::lib(0):func(0):reason(0) > (5/0/0) > 2016/09/22 14:20:36 kid1| BUG: Unexpected state while connecting to a > cache_peer or origin server > 2016/09/22 14:29:23

Re: [squid-users] SSO and Squid, SAML 2.0 ?

2016-09-22 Thread Jason Haar
On Tue, Sep 20, 2016 at 8:39 PM, FredB wrote: > I'm searching a way to use a secure SSO with Squid, how did you implement > the authenticate method with an implicit proxy ? > I'm reading many documentations about SAML, but I found nothing about Squid > > I guess we can only do something with cook

Re: [squid-users] Accelerator Mode - HSTS and Redirect

2016-09-22 Thread Amos Jeffries
On 23/09/2016 12:45 p.m., creditu wrote: > We have been using squid in accelerator mode for a number of years. In > the current setup we have the squid frontends that send all the http > requests to the backend apache webservers using a simple redirect > script. We need to switch to https for the

[squid-users] Accelerator Mode - HSTS and Redirect

2016-09-22 Thread creditu
We have been using squid in accelerator mode for a number of years. In the current setup we have the squid frontends that send all the http requests to the backend apache webservers using a simple redirect script. We need to switch to https for the public presence. So, our initial thought would b

Re: [squid-users] Question about the url rewrite before proxy out

2016-09-22 Thread Bill Yuan
Thanks for replying I see, it is a url rewrite and i am trying to find an sample to have a test the content are not required to be updated if it is a image On Thursday, September 22, 2016, Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 09/22/2016 04:20 AM, squid-us...@filter.l

Re: [squid-users] libevent

2016-09-22 Thread reinerotto
Although off topic, >Oh, yes, we've seen. Bugs can not be closed for years. If the bug is not obvious or can not be replayed in one action - it is ignored. < there is no software (besides mine :-) which is free of bugs. So the amount of bugs still present simply should be "managable". More or les

Re: [squid-users] libevent

2016-09-22 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 23.09.2016 3:33, reinerotto пишет: >> You are too few in number to provide something decent enough, and not from > the last century.< > The smaller the development team, the more efficient it is. Highly qualified > staff assumed. Oh, yes, we've s

Re: [squid-users] libevent

2016-09-22 Thread reinerotto
>You are too few in number to provide something decent enough, and not from the last century.< The smaller the development team, the more efficient it is. Highly qualified staff assumed. And LINUX is as suitable to event-driven programming as MVS. Therefore, (bad) compromise has to be made. -- V

Re: [squid-users] SSO (kerberos)

2016-09-22 Thread Markus Moeller
Hi Did you try the debug option -d for ext_kerberos_ldap_group_acl to get some debug ? Maybe it gives some indication of the problem ? Markus "erdosain9" wrote in message news:1474570767416-4679652.p...@n4.nabble.com... So, i have a little more of info this is config ###Kerberos Auth

Re: [squid-users] SSO (kerberos)

2016-09-22 Thread erdosain9
So, i have a little more of info this is config ###Kerberos Auth with ActiveDirectory### auth_param negotiate program /lib64/squid/negotiate_kerberos_auth -d -s HTTP/squid.example@example.lan auth_param negotiate children 10 auth_param negotiate keep_alive on #acl auth proxy_auth

[squid-users] Errors in cache.log

2016-09-22 Thread erdosain9
Hi. Im having this message in cache.log Error negotiating SSL on FD 121: error::lib(0):func(0):reason(0) (5/0/0) 2016/09/22 14:20:36 kid1| BUG: Unexpected state while connecting to a cache_peer or origin server 2016/09/22 14:29:23 kid1| Error negotiating SSL connection on FD 33: error:140

Re: [squid-users] Question about the url rewrite before proxy out

2016-09-22 Thread Alex Rousskov
On 09/22/2016 04:20 AM, squid-us...@filter.luko.org wrote: > Then not only the request needs to be rewritten, but probably the > page content too. [...] If that is the case, > then Squid doesn't seem like the right tool for the job. Why not? If rewriting is needed, an ICAP or eCAP service can re

Re: [squid-users] Question about the url rewrite before proxy out

2016-09-22 Thread squid-users
> > > > If you input http://www.yahoo.com/page.html, this will be transformed > > to http://192.168.1.1/www.google.com/page.html. > > I got the impression that the OP wanted the rewrite to work the other way > around. My apologies, that does seem to be the case. > Squid sees http://192.168.1.1

Re: [squid-users] Question about the url rewrite before proxy out

2016-09-22 Thread Antony Stone
On Thursday 22 Sep 2016 at 06:04, squid-us...@filter.luko.org wrote: > > i am looking for a proxy which can "bounce" the request, which is not a > > classic proxy. > > > > I want it works in this way. > > > > e.g. a proxy is running a 192.168.1.1 > > and when i want to open http://www.yahoo.com,

Re: [squid-users] multiple instances with different outgoing addresses and 2x external nics

2016-09-22 Thread Antony Stone
On Thursday 22 Sep 2016 at 06:47, Drikus Brits wrote: > HI Experts, > > I'm struggling to get squid to work the way i need it to. > > My setup : > > 1x Server : Ubuntu 14 > 3x Interfaces : 1x Inside ( 192.168.100.10 ) 2x Outside connected to DSL > (1st = 10.0.0.2, 2nd 10.0.1.2) > 2x default rou