[squid-users] error:invalid-request HTTP/1.1 (iPhone requesting icloud.com)

2020-07-22 Thread Scott
Hi, some iOS requests to gateway.icloud.com via squid (explicit) throw the following error in the logs: 2020-07-23T15:31:08+10:00 00.11.22.68 (squid-1): ABCD::17 (iphoneXs.domain.com) - via -:- - - [23/Jul/2020:15:31:08 +1000] "- error:invalid-request HTTP/1.1" 400 3739 "-" "-" NONE_NONE:HIER

Re: [squid-users] Simple REGEX not working...

2020-07-22 Thread David A. Gershman
Thank Amos.  Ironically I just found that out with testing and then a search pointing me here:     https://wiki.squid-cache.org/Features/HTTPS Sadly, I should have thought of that.  Been a long day I guess. Thanks again! --David On 7/22/20 8:58 PM, Amos Jeffries wrote: On 23/07/20 3:27 pm,

Re: [squid-users] Simple REGEX not working...

2020-07-22 Thread Amos Jeffries
On 23/07/20 3:27 pm, David A. Gershman wrote: > Hello again, > > After further testing, the looks like the only thing being regex'd > against is the domain name.  I shrunk the RE down to just: > >     acl user_allowed url_regex http  # nothing more, just 'http' > > and it /*still*/ failed!!!  It

Re: [squid-users] Simple REGEX not working...

2020-07-22 Thread David A. Gershman
Hello again, After further testing, the looks like the only thing being regex'd against is the domain name.  I shrunk the RE down to just:     acl user_allowed url_regex http  # nothing more, just 'http' and it /*still*/ failed!!!  It's as if the "whole url" (claimed by the docs) is /not/ be

[squid-users] Simple REGEX not working...

2020-07-22 Thread David A. Gershman
Hello, I have the following in my config file:     acl user_allowed url_regex ^https://example\.com/ but surfing to that site fails (authentication works fine).  My ultimate goal is to have an RE comparable to the PCRE of:     ^https?:\/\/.*?example\.com\/ While the PCRE works just fine in

[squid-users] Not working: http://www.squid-cache.org/cgi-bin/swish-query.cgi

2020-07-22 Thread David A. Gershman
Hello, The mailing list site     http://www.squid-cache.org/Support/mailing-lists.html states a search engine is available at     http://www.squid-cache.org/cgi-bin/swish-query.cgi However, going here results in a 404 not found.  Is there another search engine? --David

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Amos Jeffries
On 23/07/20 12:53 am, Klaus Brandl wrote: > On Thursday 23 July 2020 00:16:45 Amos Jeffries wrote: >> On 22/07/20 8:59 pm, Klaus Brandl wrote: >>> but i have compared the encoded string from the auth helper with the >>> string at the Proxy-Authentication header from the client with tcpdump, >>> and

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Klaus Brandl
On Thursday 23 July 2020 00:16:45 Amos Jeffries wrote: > On 22/07/20 8:59 pm, Klaus Brandl wrote: > > but i have compared the encoded string from the auth helper with the > > string at the Proxy-Authentication header from the client with tcpdump, > > and it's exactly the same: > > > > Proxy-Author

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Amos Jeffries
On 22/07/20 8:59 pm, Klaus Brandl wrote: > > but i have compared the encoded string from the auth helper with the string > at > the Proxy-Authentication header from the client with tcpdump, and it's > exactly > the same: > > Proxy-Authorization: Negotiate YIIGpQYGKwYBBQUCoIIGmTCCBpWgMDAuBgkqh

Re: [squid-users] Squid typo fixes for 4.12

2020-07-22 Thread L . P . H . van Belle
Hai, Thanks for the info Amos. Ok so i need to reverse the Licence/Credits due to the licencing. I'll reverse these and add these in the lintian overrides then. On the error messages translation text part, should think in squid langpack? For now i just used the debian supplied package with m

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Klaus Brandl
On Tuesday 21 July 2020 14:21:46 Alex Rousskov wrote: > On 7/21/20 10:41 AM, Klaus Brandl wrote: > > we have a problem with the squid kerberos auth helper and the note acl > > matching to user groups in an active directory. > > First the user was in one group, which was configured via the groupSid