Re: [squid-users] proxy_auth_regex

2024-10-28 Thread Alex Rousskov
On 2024-10-28 16:35, Piana, Josh wrote: TL;DR, anytime I turn on one of our ACL's that have "proxy_auth_regex", I'm unable to access the internet through the proxy at all. Hello Josh, Your Squid authentication helper probably does not work. Until that problem is fixed, you will not be ab

Re: [squid-users] proxy_auth_regex

2024-10-28 Thread Piana, Josh
Hey everyone, Continuing to look into this further. TL;DR, anytime I turn on one of our ACL's that have "proxy_auth_regex", I'm unable to access the internet through the proxy at all. Here's an example of one of our rules: # block certain user IDs from using proxy server acl block_user pro

Re: [squid-users] Help regarding access controls for TLS connections

2024-10-28 Thread Erik Schulz
Hi Alex, Thank you for your detailed response! I realized later that I was applying 'localnet' rules before the dstdomain rules, which was the cause of the unauthorized dns lookup. By rearranging the rules, such that `dstdomain -n` rules are tested first, there is no dns lookup. Well, I do see a

[squid-users] FW: proxy_auth_regex

2024-10-28 Thread Piana, Josh
Hey Alex, Here's a quick glimpse at what the cache.log is saying. 2024/10/25 11:49:18 kid1| ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: gss_acquire_cred() failed: No credentials were supplied, or the credentials were unavailable or inaccessible. No pr

Re: [squid-users] FW: proxy_auth_regex

2024-10-28 Thread Alex Rousskov
On 2024-10-28 15:08, Piana, Josh wrote: 2024/10/25 11:49:18 kid1| ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: gss_acquire_cred() failed: No credentials were supplied, or the credentials were unavailable or inaccessible. No principal in keytab matches d

Re: [squid-users] Help regarding access controls for TLS connections

2024-10-28 Thread Alex Rousskov
On 2024-10-28 11:47, Erik Schulz wrote: I realized later that I was applying 'localnet' rules before the dstdomain rules, which was the cause of the unauthorized dns lookup. By rearranging the rules, such that `dstdomain -n` rules are tested first, there is no dns lookup. Glad you are making p