Re: [squid-users] Bump and Splice

2020-02-17 Thread AndyBinder
Am Montag, 17. Februar 2020, 10:37:20 CET schrieb Amos Jeffries: > On 17/02/20 10:23 pm, AndyBinder wrote: > > Hi, i have a question regarding the ssl-bump feature of squid. > > I have set up multiple ports for transparent mode on loopback interface > > and > > one explicit on my real local interfa

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Silva Daniel
ooh thanks too Rafael! while i was researching i used your guide as reference to understand better the mechanics, in part thanks to it i got this far ahahah very well documented! but some points i feared it would be distribution specic and felt insecure to try, with your tip i will read more deeply

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Silva Daniel
ooh, thanks L.P.H.!! this is exactly what i was wanting, a more stable way to feel secure using this authentication, i will experiment with this today! thanks a lot for the attention! -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Akchurin
Thanks will do! When you say outdated you means cyphers? Or instructions? Raf -Original Message- From: squid-users On Behalf Of L.P.H. van Belle Sent: Monday, 17 February 2020 11:23 To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] please, can someone help me with the neg

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread L . P . H . van Belle
Hai Rafeal, Yes, i agree, this is the other most simple way, but i suggest, you remove/change on this page: https://docs.diladele.com/administrator_guide_stable/active_directory/kerberos/keytab.html The generated Kerberos configuration file will usually look like: [libdefaults] default_realm

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread Rafael Akchurin
Hello Rafael, There is an easier option *without* joining the Squid machine to the domain, See tutorial at https://docs.diladele.com/administrator_guide_stable/active_directory/index.html (it also applies to vanilla Squid without our UI - just you would need to do more manual steps). Raf

Re: [squid-users] [ext] Re: Development goals in Squid-6?

2020-02-17 Thread Ralf Hildebrandt
* Amos Jeffries : > On 17/02/20 9:48 pm, Ralf Hildebrandt wrote: > > What are the main development goals for Squid-6? > > I wonder if I should already start tracking HEAD with at least one > > machine. > > We do not have a goal for v6 yet. It is just accumulating code > contributions that do to re

Re: [squid-users] Bump and Splice

2020-02-17 Thread Amos Jeffries
On 17/02/20 10:23 pm, AndyBinder wrote: > Hi, i have a question regarding the ssl-bump feature of squid. > I have set up multiple ports for transparent mode on loopback interface and > one explicit on my real local interface. On the loopback interface the > parameters ssl-bump and intercept are set

[squid-users] Bump and Splice

2020-02-17 Thread AndyBinder
Hi, i have a question regarding the ssl-bump feature of squid. I have set up multiple ports for transparent mode on loopback interface and one explicit on my real local interface. On the loopback interface the parameters ssl-bump and intercept are set. On the explicit interface the ssl- bump parame

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread L . P . H . van Belle
Ps., forgot to say, After installing winbind and setting up smb.conf Join the domain offcourse. net ads join -U Adminsitrator or, kinit Administrator net ads join -k yes In debian, there is not need to change any files except the smb.conf as shown. All other defaults, should work out of the

Re: [squid-users] Development goals in Squid-6?

2020-02-17 Thread Amos Jeffries
On 17/02/20 9:48 pm, Ralf Hildebrandt wrote: > What are the main development goals for Squid-6? > I wonder if I should already start tracking HEAD with at least one > machine. > We do not have a goal for v6 yet. It is just accumulating code contributions that do to resolve bugs or otherwise lead

Re: [squid-users] please, can someone help me with the negotiate kerberos?

2020-02-17 Thread L . P . H . van Belle
Hai, This is the most stable way to run with kerberos, or at least for me. * below works for me since with samba 3.x-4.11.x and squid 3.2 upto 4.10 Im running this on Debian Buster now. ( samba 4.11.6 + squid 4.10 ) ( all packaged in own repo.) 1) Setup samba and join the domain. this asume

[squid-users] Development goals in Squid-6?

2020-02-17 Thread Ralf Hildebrandt
What are the main development goals for Squid-6? I wonder if I should already start tracking HEAD with at least one machine. Ralf Hildebrandt Charité - Universitätsmedizin Berlin Geschäftsbereich IT | Abteilung Netzwerk Campus Benjamin Franklin (CBF) Haus I | 1. OG | Raum 105 Hindenburgdamm 30 |