Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Amos Jeffries
On 24/07/20 5:09 am, Service MV wrote: > Hi Klaus, > I think something similar. But I understand that you can use the > Kerberos delegation in AD. That's partly why I'm not convinced by the > documentation I read, which tells me to create a user account in Active > Directory. And I don't understand

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Brett Lymn
On Thu, Jul 23, 2020 at 06:07:39PM +0200, Klaus Brandl wrote: > > But if anyone knows a solution, i will spread my ears :) > What we do is: 1) create a user account in AD that will be used for the HA front end, set a password and export the keytab for this user 2) Use ktadmin to import the keyt

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Service MV
Hi Klaus, I think something similar. But I understand that you can use the Kerberos delegation in AD. That's partly why I'm not convinced by the documentation I read, which tells me to create a user account in Active Directory. And I don't understand what a user account has to do here. Maybe the do

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Klaus Brandl
Hi Gabriel, same problem here on our HA systems. I think, this is caused by kerberos overall, the tickets are always bound to the hosts realname and address, look at "klist" on your client, and only exactly this name could be used as proxy entry. But if anyone knows a solution, i will spread my

Re: [squid-users] Squid and multipart form decode

2020-07-23 Thread Ryan Le
Thanks, I have been looking at the squid debug and can see that it is getting the multipart. POST http://bb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Re

[squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Service MV
Hi, everybody. I have a SQUID 4.11 compiled on Debian 9.8 with kerberos integration authenticating and browsing without problems: cache.log squid_kerb_auth: User some.user authenticated access.log 10.10.10.203 TCP_TUNNEL/200 5264 CONNECT update.googleapis.com:443 some.user HIER_DIRECT/172.217.162.3

Re: [squid-users] Squid and multipart form decode

2020-07-23 Thread Alex Rousskov
On 7/23/20 9:22 AM, Ryan Le wrote: > I have been trying to configure squid to decode and send multipart form > data to another service. Is there an acl or build parameter needed for > multipart form data support? No, there is no need to allow any specific Content-Type, including multipart. Squid d

Re: [squid-users] Squid and multipart form decode

2020-07-23 Thread Antony Stone
On Thursday 23 July 2020 at 15:33:01, Ryan Le wrote: > sorry not decode, just parse to send headers to icap as well. Aha, icap - sorry, I can't help you there, but I'm pretty sure there are others here who have used it. > On Thu, Jul 23, 2020 at 9:27 AM Antony Stone wrote: > > On Thursday 23 Ju

Re: [squid-users] Squid and multipart form decode

2020-07-23 Thread Ryan Le
sorry not decode, just parse to send headers to icap as well. On Thu, Jul 23, 2020 at 9:27 AM Antony Stone < antony.st...@squid.open.source.it> wrote: > On Thursday 23 July 2020 at 15:22:56, Ryan Le wrote: > > > I have been trying to configure squid to decode and send multipart form > > data to a

Re: [squid-users] Squid and multipart form decode

2020-07-23 Thread Antony Stone
On Thursday 23 July 2020 at 15:22:56, Ryan Le wrote: > I have been trying to configure squid to decode and send multipart form > data to another service. What do you mean by "decode"? > Is there an acl or build parameter needed for multipart form data support? No; Squid sends on what it gets fr

[squid-users] Squid and multipart form decode

2020-07-23 Thread Ryan Le
I have been trying to configure squid to decode and send multipart form data to another service. Is there an acl or build parameter needed for multipart form data support? Thanks, Ryan ___ squid-users mailing list squid-users@lists.squid-cache.org http:/

Re: [squid-users] Not working: http://www.squid-cache.org/cgi-bin/swish-query.cgi

2020-07-23 Thread Francesco Chemolli
Hi, unfortunately not. You can use google search to search through the archives. On Thu, Jul 23, 2020 at 3:47 AM David A. Gershman wrote: > Hello, > > The mailing list site > > http://www.squid-cache.org/Support/mailing-lists.html > > states a search engine is available at > > http://w