Re: [squid-users] Authentication Problem

2015-12-04 Thread Samuel Anderson
list. >> >> You should remove all the commented out directives as well, some of them >> may be leading to misunderstanding of what the config is actually doing. >> >> >> Amos >> ___ >> squid-users mailing list >&g

Re: [squid-users] NTLM authentication problems with HTTP 1.1

2015-04-08 Thread Samuel Anderson
Generally the source is preferred to be statically > assigned otherwise you need to allow the entire dhcp pool or range. > Because there is no user-agent you can drop the requirement or force it > with some sort of negated logic (!any) > On Apr 8, 2015 11:21 AM, "Samuel Anderson"

[squid-users] NTLM authentication problems with HTTP 1.1

2015-04-08 Thread Samuel Anderson
amp;(objectclass=person) (sAMAccountname=%v)(memberof=CN=%a,OU=PROXY,ou=ALL Groups,DC= ,DC=local))" -h dc1..local,dc2..local,dc3..local,dc4..local # auth required acl auth proxy_auth REQUIRED http_access deny !auth all -- Samuel Anderson |

Re: [squid-users] Increase number of ext_ldap_group_acl processes

2015-04-07 Thread Samuel Anderson
che.org > http://lists.squid-cache.org/listinfo/squid-users > -- Samuel Anderson | Information Technology Administrator | International Document Services IDS | 11629 South 700 East, Suite 200 | Draper, UT 84020-4607 -- CONFIDENTIALITY NOTICE: This e-mail and any attachments are confid

Re: [squid-users] Refresh ACL list only

2015-03-30 Thread Samuel Anderson
ng to add a disk cache directory. #cache_dir ufs /var/spool/squid 100 16 256 cache deny all # Leave coredumps in the first cache dir coredump_dir /var/spool/squid # Add any of your own refresh_pattern entries above these. refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440

Re: [squid-users] Squid will not authenticate NTLM/Kerberos when behind a haproxy load balancer

2015-03-19 Thread Samuel Anderson
600, Samuel Anderson wrote: > > Hello All, > > > > > > I have 2 squid servers that authenticate correctly when you point your > > browser to either of them. I'm using a negotiate_wrapper. I set it up > > following this > > ( > http://wiki.squid-cache.o

[squid-users] Squid will not authenticate NTLM/Kerberos when behind a haproxy load balancer

2015-03-19 Thread Samuel Anderson
rnal ldap_group PROXY-HIGHLY-RESTRICTIVE PROXY-MEDIUM-RESTRICTIVE PROXY-MINIMAL-RESTRICTIVE PROXY-UNRESTRICTED PROXY-DEV PROXY-SALES http_access deny !auth all http_access deny !REQGROUPS all -- Samuel Anderson | Information Technology Administrator | International Document Services IDS | 11629

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Samuel Anderson
ure second squid > > instance a visa versa. > > > > 18.03.15 0:00, Brendan Kearney пишет: > > > On Tue, 2015-03-17 at 11:59 -0600, Samuel Anderson wrote: > > >> Unfortunately thats not really an option for me. I've already > > >> built everyth

Re: [squid-users] Refresh ACL list only

2015-03-17 Thread Samuel Anderson
s://www.urlfilterdb.com/products/ufdbguard.html > ? > It has separate server process which can be restart VERY quickly > independently of squid. > > 17.03.15 23:35, Samuel Anderson пишет: > > Hello all, > > > > Does anyone know of a way to reload a single ACL list?

[squid-users] Refresh ACL list only

2015-03-17 Thread Samuel Anderson
elists/DEV-WHITELIST" acl SALES-WHITELIST dstdomain "/etc/squid3/whitelists/SALES-WHITELIST" Thanks -- Samuel Anderson | Information Technology Administrator | International Document Services IDS | 11629 South 700 East, Suite 200 | Draper, UT 84020-4607 -- CON

[squid-users] whitelists and active directory help

2015-01-16 Thread Samuel Anderson
Hello All, I'm attempting to create way to grant users access to different categories using active directory. Currently what I have works but if a website is not listed in any of the whitelists it will allow traffic to that website. If I add a (http_access deny all) at the end, then nothing works.