[prev in list] [next in list] [prev in thread] [next in thread]
List: squid-users
Subject: Re: [squid-users] missing negotiate_kerberos_auth on my squid
From: "Markus Moeller" <huaraz () moeller ! plus ! com>
Date: 2016-05-31 21:31:20
Message-ID: nikvrp$3qr$1 () ger ! gmane ! org
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hi Nilesh,
Just add a –d to
# enable kerberos authentication
auth_param negotiate program /usr/lib/squid/negotiate_kerberos_auth -s \
HTTP/hostname.domain.org@DOMAIN.ORG
like
# enable kerberos authentication
auth_param negotiate program /usr/lib/squid/negotiate_kerberos_auth -s \
HTTP/hostname.domain.org@DOMAIN.ORG –d
Then you get debug output in your cache.log file.
Markus
"Markus Moeller" <huaraz@moeller.plus.com> wrote in message \
news:nikoqr$i2m$1@ger.gmane.org... What does the log say when you use the –d option \
with the helper
Markus
"Nilesh Gavali" <nilesh.gavali@tcs.com> wrote in message \
news:OF059DEDF2.DD0EB7D2-ON80257FC4.006A0132-80257FC4.006A2AD0@tcs.com... Hello All;
Configured the steps require for kerberos authentication as given at \
http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos but instead of SSO \
to work when we try to open url; it is prompt for username and password, when passing \
credential it is not authenticating. attached is our squid config for your \
reference.
Kindly let us know what went wrong.
we are using windows 2012 AD.
Thanks & Regards
Nilesh Suresh Gavali
From: Nilesh Gavali/MUM/TCS
To: squid-users@lists.squid-cache.org, belle@bazuin.nl
Date: 27/05/2016 15:07
Subject: missing negotiate_kerberos_auth on my squid
--------------------------------------------------------------------------------
Thanks louise for reply.
but
Should be include imo. -- not sure what is imo
Shoud be in any Squid-3.2 and later.
And on my debian server its locate here.
/usr/lib/squid/negotiate_kerberos_auth - check the path but it is not there on my \
linux box.
Did you enable : --enable-auth-negotiate=kerberos,wrapper on compile ? ---- NO \
didn't gave this option while compilation
Run squid –v to check it. -- we have"--enable-auth-negotiate" only and some other \
configured option.
can you help me how to get hit recomipled with reuqire options.
Thanks & Regards
Nilesh Suresh Gavali
----- Forwarded by Nilesh Gavali/MUM/TCS on 27/05/2016 15:01 -----
From: squid-users-request@lists.squid-cache.org
To: squid-users@lists.squid-cache.org
Date: 27/05/2016 12:42
Subject: squid-users Digest, Vol 21, Issue 101
Sent by: "squid-users" <squid-users-bounces@lists.squid-cache.org>
--------------------------------------------------------------------------------
Send squid-users mailing list submissions to
squid-users@lists.squid-cache.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.squid-cache.org/listinfo/squid-users
or, via email, send a message with subject or body 'help' to
squid-users-request@lists.squid-cache.org
You can reach the person managing the list at
squid-users-owner@lists.squid-cache.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of squid-users digest..."
Today's Topics:
1. NULL characters (joe)
2. Re: Looking for a way to route into cache_peer traffic
dynamically. (Alex Rousskov)
3. The system returned: (111) Connection refused; (deepa ganu)
4. Re: NULL characters (Eliezer Croitoru)
5. missing negotiate_kerberos_auth on my squid (Nilesh Gavali)
6. Re: missing negotiate_kerberos_auth on my squid (L.P.H. van Belle)
----------------------------------------------------------------------
Message: 1
Date: Thu, 26 May 2016 07:30:16 -0700 (PDT)
From: joe <chip_pop@hotmail.com>
To: squid-users@lists.squid-cache.org
Subject: [squid-users] NULL characters
Message-ID: <1464273016183-4677691.post@n4.nabble.com>
Content-Type: text/plain; charset=us-ascii
2016/05/26 06:41:28 kid1| ctx: enter level 0:
'http://js.advert.mirtesen.ru/data/js/82090.js'
2016/05/26 06:41:28 kid1| WARNING: HTTP header contains NULL characters
{Server: nginx
Date: Thu, 26 May 2016 03:46:52 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-MaxSize: 5
X-MaxShm: 5
X-ShmTol: 2
X-Loc: 2347
X-MID: 16
X-Node: ssel6
X-ChosenReserve: 2
X-TotalPrimary: 290
X-ExclByGeo: 266
X-TotalPrimaryPayable: 219
X-ChosenPrimary: 3
X-ExclByTime: 18
X-ShmNews: 1989237,2010118,2009700,
X-TotalPrimaryExchange: 0
X-TotalReserve: 332
X-ChosenPayable: 3
X-ShmCnt: 3
Set-Cookie: nid}
NULL
{Server: nginx
Date: Thu, 26 May 2016 03:46:52 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-MaxSize: 5
X-MaxShm: 5
X-ShmTol: 2
X-Loc: 2347
X-MID: 16
X-Node: ssel6
X-ChosenReserve: 2
X-TotalPrimary: 290
X-ExclByGeo: 266
X-TotalPrimaryPayable: 219
X-ChosenPrimary: 3
X-ExclByTime: 18
X-ShmNews: 1989237,2010118,2009700,
X-TotalPrimaryExchange: 0
X-TotalReserve: 332
X-ChosenPayable: 3
X-ShmCnt: 3
Set-Cookie: nid
2016/05/26 06:41:28 kid1| ctx: exit level 0
is it bad ?????
--
View this message in context: \
http://squid-web-proxy-cache.1019090.n4.nabble.com/NULL-characters-tp4677691.html \
Sent from the Squid - Users mailing list archive at Nabble.com.
------------------------------
Message: 2
Date: Thu, 26 May 2016 09:16:52 -0600
From: Alex Rousskov <rousskov@measurement-factory.com>
To: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] Looking for a way to route into cache_peer
traffic dynamically.
Message-ID: <57471364.4030007@measurement-factory.com>
Content-Type: text/plain; charset=utf-8
On 05/26/2016 03:52 AM, Eliezer Croitoru wrote:
> I think that the best way is to use an ICAP meta header instead of altering
> the request itself
Agreed.
> but I am not sure if it is possible
It is not possible today: Converting ICAP headers into annotations
understood by Squid ACLs is only supported for eCAP services.
IIRC, somebody posted a patch (on squid-dev) with a similar feature for
ICAP, but that implementation needed to be redone to be officially
accepted (IMO). I do not know whether the author will adjust their code
to follow my recommendations. Perhaps you can do it for them.
Alex.
------------------------------
Message: 3
Date: Fri, 27 May 2016 14:25:19 +0530
From: deepa ganu <deepaganu@gmail.com>
To: squid-users@lists.squid-cache.org
Subject: [squid-users] The system returned: (111) Connection refused;
Message-ID:
<CA+qV5k+cSUThvZYCS1JLcNuXsFCA8Vnk1Rmc5opK1w15W6asyg@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Hi
I am using squid as a reverse.
#http_port 80 accel defaultsite=202.53.13.19
https_port 443 accel cert=/var/www/html/webrtc/imp/teleuniv.net.crt
key=/var/www/html/webrtc/imp/teleuniv.net.key
cafile=/var/www/html/webrtc/imp/intermediate.crt defaultsite=202.53.13.19
no-vhost
#this ACL is url path specific which accepts only portal urls and deny
others.
acl portal urlpath_regex ^/portal6may
cache_peer 172.20.36.144 parent 80 0 no-query originserver name=portalserver
cache_peer_access portalserver allow portal
cache_peer_access portalserver deny all
http_access allow portal
cache_peer 172.20.36.150 parent 443 0 no-query originserver ssl
sslflags=DONT_VERIFY_PEER login=PASS connection-auth=off name=teleuniv
acl our_sites dstdomain 202.53.13.19
http_access allow our_sites
cache_peer_access teleuniv allow our_sites
cache_peer_access teleuniv deny all
SO when i try to access the url https://202.53.13.19/ I get the following
error
"The following error was encountered while trying to retrieve the URL: The
system returned: (111) Connection refused; The remote host or network may
be down. Please try the request again."
It only gives for 172.20.36.144 not for the urlpath acl. But this happens
only sometimes. When I physically go to that server (172.20.36.150) and
click on the wired connection (one of the LAN options using linux). It
works again. I am very confused
--
Regards
Deepa Ganu
R&D Head(CSE) KMIT
Ph no : 9908036660
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/998e60f3/attachment-0001.html>
------------------------------
Message: 4
Date: Fri, 27 May 2016 14:17:17 +0300
From: "Eliezer Croitoru" <eliezer@ngtech.co.il>
To: "'joe'" <chip_pop@hotmail.com>,
<squid-users@lists.squid-cache.org>
Subject: Re: [squid-users] NULL characters
Message-ID: <33b501d1b809$541a9620$fc4fc260$@ngtech.co.il>
Content-Type: text/plain; charset="utf-8"
If it ended with some kind of server issues else then the logs, then it would be \
considered not nice.
Eliezer
----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer@ngtech.co.il
-----Original Message-----
From: squid-users [mailto:squid-users-bounces@lists.squid-cache.org] On Behalf Of joe
Sent: Thursday, May 26, 2016 5:30 PM
To: squid-users@lists.squid-cache.org
Subject: [squid-users] NULL characters
2016/05/26 06:41:28 kid1| ctx: enter level 0:
'http://js.advert.mirtesen.ru/data/js/82090.js'
2016/05/26 06:41:28 kid1| WARNING: HTTP header contains NULL characters
{Server: nginx
Date: Thu, 26 May 2016 03:46:52 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-MaxSize: 5
X-MaxShm: 5
X-ShmTol: 2
X-Loc: 2347
X-MID: 16
X-Node: ssel6
X-ChosenReserve: 2
X-TotalPrimary: 290
X-ExclByGeo: 266
X-TotalPrimaryPayable: 219
X-ChosenPrimary: 3
X-ExclByTime: 18
X-ShmNews: 1989237,2010118,2009700,
X-TotalPrimaryExchange: 0
X-TotalReserve: 332
X-ChosenPayable: 3
X-ShmCnt: 3
Set-Cookie: nid}
NULL
{Server: nginx
Date: Thu, 26 May 2016 03:46:52 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-MaxSize: 5
X-MaxShm: 5
X-ShmTol: 2
X-Loc: 2347
X-MID: 16
X-Node: ssel6
X-ChosenReserve: 2
X-TotalPrimary: 290
X-ExclByGeo: 266
X-TotalPrimaryPayable: 219
X-ChosenPrimary: 3
X-ExclByTime: 18
X-ShmNews: 1989237,2010118,2009700,
X-TotalPrimaryExchange: 0
X-TotalReserve: 332
X-ChosenPayable: 3
X-ShmCnt: 3
Set-Cookie: nid
2016/05/26 06:41:28 kid1| ctx: exit level 0
is it bad ?????
--
View this message in context: \
http://squid-web-proxy-cache.1019090.n4.nabble.com/NULL-characters-tp4677691.html \
Sent from the Squid - Users mailing list archive at Nabble.com. \
_______________________________________________ squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
------------------------------
Message: 5
Date: Fri, 27 May 2016 12:32:15 +0100
From: Nilesh Gavali <nilesh.gavali@tcs.com>
To: squid-users@lists.squid-cache.org
Subject: [squid-users] missing negotiate_kerberos_auth on my squid
Message-ID:
<OF9C6F8F89.5CF2ECB1-ON80257FC0.003EE232-80257FC0.003F5EF7@tcs.com>
Content-Type: text/plain; charset="utf-8"
Hello ;
I have installed latest squid 3.5.19 on red hat Linux yesterday. That
means I am new to squid and linux.
able to start the squid and its working fine.
now we are trying to authenticate user via Kerberos with windows AD. but
facing issues.
followed the steps provided on
http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos
But unable to find negotiate_kerberos_auth on my Linux box at any
location.
now I need to know where i can find/download negotiate_kerberos_auth and
compile it to make authentication successful.
Thanks & Regards
Nilesh Suresh Gavali
Tata Consultancy Services
3rd Floor, Tithebarn House
Tithebarn Street
Liverpool - L2 2NZ
United Kingdom
Mailto: nilesh.gavali@tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty. IT Services
Business Solutions
Consulting
____________________________________________
Tata Consultancy Services Limited , incorporated with limited liability
and registered with Registrar of Companies, Mumbai, India - No: 11-84781
HQ : Nirmal Building , 9th Floor, Nariman Point, Mumbai - 400 021, India -
Registered in UK : 18 Grosvenor Place, London SW1X 7HS - BR :007627
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/b812d6ac/attachment-0001.html>
------------------------------
Message: 6
Date: Fri, 27 May 2016 13:41:34 +0200
From: L.P.H. van Belle <belle@bazuin.nl>
To: squid-users@squid-cache.org <squid-users@squid-cache.org>
Subject: Re: [squid-users] missing negotiate_kerberos_auth on my squid
Message-ID:
<vmime.5748326e.63bf.32264d027089be4e@ms249-lin-003.rotterdam.bazuin.nl>
Content-Type: text/plain; charset="windows-1252"
Should be include imo.
Shoud be in any Squid-3.2 and later.
And on my debian server its locate here.
/usr/lib/squid/negotiate_kerberos_auth
Did you enable : --enable-auth-negotiate=kerberos,wrapper on compile ?
Run squid –v to check it.
Greetz,
Louis
Van: squid-users [mailto:squid-users-bounces@lists.squid-cache.org] Namens Nilesh \
Gavali
Verzonden: vrijdag 27 mei 2016 13:32
Aan: squid-users@lists.squid-cache.org
Onderwerp: [squid-users] missing negotiate_kerberos_auth on my squid
Hello ;
I have installed latest squid 3.5.19 on red hat Linux yesterday. That means I am new \
to squid and linux. able to start the squid and its working fine.
now we are trying to authenticate user via Kerberos with windows AD. but facing \
issues. followed the steps provided on \
http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos But unable to find \
negotiate_kerberos_auth on my Linux box at any location. now I need to know where i \
can find/download negotiate_kerberos_auth and compile it to make authentication \
successful.
Thanks & Regards
Nilesh Suresh Gavali
Tata Consultancy Services
3rd Floor, Tithebarn House
Tithebarn Street
Liverpool - L2 2NZ
United Kingdom
Mailto: nilesh.gavali@tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty. IT Services
Business Solutions
Consulting
____________________________________________
Tata Consultancy Services Limited , incorporated with limited liability and \
registered with Registrar of Companies, Mumbai, India - No: 11-84781 HQ : Nirmal \
Building , 9th Floor, Nariman Point, Mumbai - 400 021, India - Registered in UK : \
18 Grosvenor Place, London SW1X 7HS - BR :007627
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/bbeb60e2/attachment.html>
------------------------------
Subject: Digest Footer
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
------------------------------
End of squid-users Digest, Vol 21, Issue 101
********************************************
--------------------------------------------------------------------------------
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
--------------------------------------------------------------------------------
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
[Attachment #5 (text/html)]
<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial'; COLOR: #000000">
<DIV>Hi Nilesh,</DIV>
<DIV> </DIV>
<DIV>Just add a –d to </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV># enable kerberos authentication</DIV>
<DIV>auth_param negotiate program /usr/lib/squid/negotiate_kerberos_auth -s <A
href="mailto:HTTP/hostname.domain.org@DOMAIN.ORG">HTTP/hostname.domain.org@DOMAIN.ORG</A></DIV>
<DIV> </DIV>
<DIV>like </DIV>
<DIV> </DIV>
<DIV># enable kerberos authentication</DIV>
<DIV>auth_param negotiate program /usr/lib/squid/negotiate_kerberos_auth -s <A
style='href: "mailto:HTTP/hostname.domain.org@DOMAIN.ORG"'
href="mailto:HTTP/hostname.domain.org@DOMAIN.ORG">HTTP/hostname.domain.org@DOMAIN.ORG</A> \
–d </DIV>
<DIV><FONT style="size: +0"></FONT> </DIV>
<DIV>Then you get debug output in your cache.log file.</DIV>
<DIV> </DIV>
<DIV>Markus</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; \
MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000"> <DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: \
normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'> <DIV>"Markus Moeller" \
<huaraz@moeller.plus.com> wrote in message \
news:nikoqr$i2m$1@ger.gmane.org...</DIV></DIV></DIV> <DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; \
MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000"> <DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: \
normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'> <DIV dir=ltr>
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial'; COLOR: #000000">
<DIV>What does the log say when you use the –d option with the helper</DIV>
<DIV> </DIV>
<DIV>Markus</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; \
MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000"> <DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: \
normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'> <DIV>"Nilesh Gavali" \
<nilesh.gavali@tcs.com> wrote in message \
news:OF059DEDF2.DD0EB7D2-ON80257FC4.006A0132-80257FC4.006A2AD0@tcs.com...</DIV></DIV></DIV>
<DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; \
MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000"> <DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: \
normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'><FONT size=2 \
face=sans-serif>Hello All;</FONT> <BR><BR><FONT size=2 face=sans-serif>Configured \
the steps require for kerberos authentication as given at </FONT><A
href="http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos"><FONT
color=blue size=2
face=sans-serif>http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos</FONT></A> \
<BR><FONT size=2 face=sans-serif>but instead of SSO to work when we try to open
url; it is prompt for username and password, when passing credential it is not
authenticating.</FONT> <BR><FONT size=2 face=sans-serif>attached is our squid
config for your reference. </FONT><BR><BR><FONT size=2 face=sans-serif>Kindly
let us know what went wrong.</FONT> <BR><BR><FONT size=2 face=sans-serif>we are
using windows 2012 AD.</FONT> <BR><BR><BR><BR><FONT size=2
face=sans-serif>Thanks & Regards<BR>Nilesh Suresh
Gavali<BR></FONT><BR><BR><BR><BR><FONT color=#5f5f5f size=1
face=sans-serif>From: </FONT><FONT
size=1 face=sans-serif>Nilesh Gavali/MUM/TCS</FONT> <BR><FONT color=#5f5f5f
size=1 face=sans-serif>To:
</FONT><FONT size=1 face=sans-serif>squid-users@lists.squid-cache.org,
belle@bazuin.nl</FONT> <BR><FONT color=#5f5f5f size=1
face=sans-serif>Date: </FONT><FONT
size=1 face=sans-serif>27/05/2016 15:07</FONT> <BR><FONT color=#5f5f5f size=1
face=sans-serif>Subject: </FONT><FONT
size=1 face=sans-serif>missing negotiate_kerberos_auth on my squid</FONT> <BR>
<HR noShade>
<BR><BR><FONT size=2 face=sans-serif>Thanks louise for reply.</FONT>
<BR><BR><FONT size=2 face=sans-serif>but</FONT> <BR><BR><TT><FONT size=2>Should
be include imo. -- <B>not sure what is imo</B><BR><BR> <BR><BR>Shoud be in
any Squid-3.2 and later.<BR><BR> <BR><BR>And on my debian server its locate
here. <BR><BR>/usr/lib/squid/negotiate_kerberos_auth - <B>check the path but it
is not there on my linux box.</B><BR><BR> <BR><BR>Did you enable :
--enable-auth-negotiate=kerberos,wrapper on compile ? ---- <B>NO didn't
gave this option while compilation</B><BR><BR> <BR><BR>Run squid –v to
check it. -- we have"--enable-auth-negotiate" only and some other configured
option.</FONT></TT> <BR><BR><TT><FONT size=2>can you help me how to get hit
recomipled with reuqire options.</FONT></TT> <BR><BR><BR><FONT size=2
face=sans-serif>Thanks & Regards<BR>Nilesh Suresh Gavali<BR></FONT><BR><FONT
color=#800080 size=1 face=sans-serif>----- Forwarded by Nilesh Gavali/MUM/TCS on
27/05/2016 15:01 -----</FONT> <BR><BR><FONT color=#5f5f5f size=1
face=sans-serif>From: </FONT><FONT
size=1 face=sans-serif>squid-users-request@lists.squid-cache.org</FONT>
<BR><FONT color=#5f5f5f size=1
face=sans-serif>To: </FONT><FONT
size=1 face=sans-serif>squid-users@lists.squid-cache.org</FONT> <BR><FONT
color=#5f5f5f size=1
face=sans-serif>Date: </FONT><FONT
size=1 face=sans-serif>27/05/2016 12:42</FONT> <BR><FONT color=#5f5f5f size=1
face=sans-serif>Subject: </FONT><FONT
size=1 face=sans-serif>squid-users Digest, Vol 21, Issue 101</FONT> <BR><FONT
color=#5f5f5f size=1 face=sans-serif>Sent
by: </FONT><FONT size=1
face=sans-serif>"squid-users"
<squid-users-bounces@lists.squid-cache.org></FONT> <BR>
<HR noShade>
<BR><BR><BR><TT><FONT size=2>Send squid-users mailing list submissions
to<BR> \
squid-users@lists.squid-cache.org<BR><BR>To subscribe or unsubscribe via the
World Wide Web,
visit<BR> \
</FONT></TT><A
href="http://lists.squid-cache.org/listinfo/squid-users"><TT><FONT
size=2>http://lists.squid-cache.org/listinfo/squid-users</FONT></TT></A><TT><FONT
size=2><BR>or, via email, send a message with subject or body 'help'
to<BR> \
squid-users-request@lists.squid-cache.org<BR><BR>You can reach the person
managing the list
at<BR> \
squid-users-owner@lists.squid-cache.org<BR><BR>When replying, please edit your
Subject line so it is more specific<BR>than "Re: Contents of squid-users
digest..."<BR><BR><BR>Today's Topics:<BR><BR> 1. NULL characters
(joe)<BR> 2. Re: Looking for a way to route into cache_peer
traffic<BR> dynamically. (Alex Rousskov)<BR> 3.
The system returned: (111) Connection refused; (deepa ganu)<BR> 4. Re:
NULL characters (Eliezer Croitoru)<BR> 5. missing negotiate_kerberos_auth
on my squid (Nilesh Gavali)<BR> 6. Re: missing negotiate_kerberos_auth on
my squid (L.P.H. van
Belle)<BR><BR><BR>----------------------------------------------------------------------<BR><BR>Message: \
1<BR>Date: Thu, 26 May 2016 07:30:16 -0700 (PDT)<BR>From: joe
<chip_pop@hotmail.com><BR>To:
squid-users@lists.squid-cache.org<BR>Subject: [squid-users] NULL
characters<BR>Message-ID:
<1464273016183-4677691.post@n4.nabble.com><BR>Content-Type: text/plain;
charset=us-ascii<BR><BR>2016/05/26 06:41:28 kid1| ctx: enter level
0:<BR>'http://js.advert.mirtesen.ru/data/js/82090.js'<BR>2016/05/26 06:41:28
kid1| WARNING: HTTP header contains NULL characters<BR>{Server: nginx<BR>Date:
Thu, 26 May 2016 03:46:52 GMT<BR>Content-Type:
application/javascript;charset=utf-8<BR>Transfer-Encoding:
chunked<BR>Connection: close<BR>Vary: Accept-Encoding<BR>X-MaxSize:
5<BR>X-MaxShm: 5<BR>X-ShmTol: 2<BR>X-Loc: 2347<BR>X-MID: 16<BR>X-Node:
ssel6<BR>X-ChosenReserve: 2<BR>X-TotalPrimary: 290<BR>X-ExclByGeo:
266<BR>X-TotalPrimaryPayable: 219<BR>X-ChosenPrimary: 3<BR>X-ExclByTime:
18<BR>X-ShmNews: 1989237,2010118,2009700,<BR>X-TotalPrimaryExchange:
0<BR>X-TotalReserve: 332<BR>X-ChosenPayable: 3<BR>X-ShmCnt: 3<BR>Set-Cookie:
nid}<BR>NULL<BR>{Server: nginx<BR>Date: Thu, 26 May 2016 03:46:52
GMT<BR>Content-Type: application/javascript;charset=utf-8<BR>Transfer-Encoding:
chunked<BR>Connection: close<BR>Vary: Accept-Encoding<BR>X-MaxSize:
5<BR>X-MaxShm: 5<BR>X-ShmTol: 2<BR>X-Loc: 2347<BR>X-MID: 16<BR>X-Node:
ssel6<BR>X-ChosenReserve: 2<BR>X-TotalPrimary: 290<BR>X-ExclByGeo:
266<BR>X-TotalPrimaryPayable: 219<BR>X-ChosenPrimary: 3<BR>X-ExclByTime:
18<BR>X-ShmNews: 1989237,2010118,2009700,<BR>X-TotalPrimaryExchange:
0<BR>X-TotalReserve: 332<BR>X-ChosenPayable: 3<BR>X-ShmCnt: 3<BR>Set-Cookie:
nid<BR>2016/05/26 06:41:28 kid1| ctx: exit level 0<BR><BR>is it bad
?????<BR><BR><BR><BR>--<BR>View this message in context: </FONT></TT><A
href="http://squid-web-proxy-cache.1019090.n4.nabble.com/NULL-characters-tp4677691.html"><TT><FONT \
size=2>http://squid-web-proxy-cache.1019090.n4.nabble.com/NULL-characters-tp4677691.html</FONT></TT></A><TT><FONT \
size=2><BR>Sent from the Squid - Users mailing list archive at
Nabble.com.<BR><BR><BR>------------------------------<BR><BR>Message: 2<BR>Date:
Thu, 26 May 2016 09:16:52 -0600<BR>From: Alex Rousskov
<rousskov@measurement-factory.com><BR>To:
squid-users@lists.squid-cache.org<BR>Subject: Re: [squid-users] Looking for a
way to route into
cache_peer<BR> \
traffic dynamically.<BR>Message-ID:
<57471364.4030007@measurement-factory.com><BR>Content-Type: text/plain;
charset=utf-8<BR><BR>On 05/26/2016 03:52 AM, Eliezer Croitoru wrote:<BR><BR>>
I think that the best way is to use an ICAP meta header instead of
altering<BR>> the request itself <BR><BR>Agreed.<BR><BR><BR>> but I am not
sure if it is possible<BR><BR>It is not possible today: Converting ICAP headers
into annotations<BR>understood by Squid ACLs is only supported for eCAP
services.<BR><BR>IIRC, somebody posted a patch (on squid-dev) with a similar
feature for<BR>ICAP, but that implementation needed to be redone to be
officially<BR>accepted (IMO). I do not know whether the author will adjust their
code<BR>to follow my recommendations. Perhaps you can do it for
them.<BR><BR>Alex.<BR><BR><BR><BR>------------------------------<BR><BR>Message:
3<BR>Date: Fri, 27 May 2016 14:25:19 +0530<BR>From: deepa ganu
<deepaganu@gmail.com><BR>To: squid-users@lists.squid-cache.org<BR>Subject:
[squid-users] The system returned: (111) Connection
refused;<BR>Message-ID:<BR> \
<CA+qV5k+cSUThvZYCS1JLcNuXsFCA8Vnk1Rmc5opK1w15W6asyg@mail.gmail.com><BR>Content-Type: \
text/plain; charset="utf-8"<BR><BR>Hi<BR>I am using squid as a
reverse.<BR><BR>#http_port 80 accel defaultsite=202.53.13.19<BR>https_port
443 accel
cert=/var/www/html/webrtc/imp/teleuniv.net.crt<BR>key=/var/www/html/webrtc/imp/teleuniv.net.key<BR>cafile=/var/www/html/webrtc/imp/intermediate.crt \
defaultsite=202.53.13.19<BR>no-vhost<BR><BR><BR>#this ACL is url path specific
which accepts only portal urls and deny<BR>others.<BR>acl portal urlpath_regex
^/portal6may<BR>cache_peer 172.20.36.144 parent 80 0 no-query originserver
name=portalserver<BR>cache_peer_access portalserver allow
portal<BR>cache_peer_access portalserver deny all<BR>http_access allow
portal<BR><BR><BR>cache_peer 172.20.36.150 parent 443 0 no-query originserver
ssl<BR>sslflags=DONT_VERIFY_PEER login=PASS connection-auth=off
name=teleuniv<BR>acl our_sites dstdomain 202.53.13.19<BR>http_access allow
our_sites<BR>cache_peer_access teleuniv allow our_sites<BR>cache_peer_access
teleuniv deny all<BR><BR>SO when i try to access the url </FONT></TT><A
href="https://202.53.13.19/"><TT><FONT
size=2>https://202.53.13.19/</FONT></TT></A><TT><FONT size=2> I get the
following<BR>error<BR>"The following error was encountered while trying to
retrieve the URL: The<BR>system returned: (111) Connection refused; The remote
host or network may<BR>be down. Please try the request again."<BR><BR>It only
gives for 172.20.36.144 not for the urlpath acl. But this happens<BR>only
sometimes. When I physically go to that server (172.20.36.150) and<BR>click on
the wired connection (one of the LAN options using linux). It<BR>works again. I
am very confused<BR><BR>-- <BR>Regards<BR>Deepa Ganu<BR>R&D Head(CSE)
KMIT<BR>Ph no : 9908036660<BR>-------------- next part --------------<BR>An HTML
attachment was scrubbed...<BR>URL: <</FONT></TT><A
href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/998e60f3/attachment-0001.html"><TT><FONT \
size=2>http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/998e60f3/attachment-0001.html</FONT></TT></A><TT><FONT \
size=2>><BR><BR>------------------------------<BR><BR>Message: 4<BR>Date:
Fri, 27 May 2016 14:17:17 +0300<BR>From: "Eliezer Croitoru"
<eliezer@ngtech.co.il><BR>To: "'joe'"
<chip_pop@hotmail.com>,<BR> \
<squid-users@lists.squid-cache.org><BR>Subject: Re: [squid-users] NULL
characters<BR>Message-ID:
<33b501d1b809$541a9620$fc4fc260$@ngtech.co.il><BR>Content-Type:
text/plain; \
charset="utf-8"<BR><BR>If it ended with some kind of server issues else then the
logs, then it would be considered not
nice.<BR><BR>Eliezer<BR><BR>----<BR>Eliezer Croitoru<BR>Linux System
Administrator<BR>Mobile: +972-5-28704261<BR>Email:
eliezer@ngtech.co.il<BR><BR><BR>-----Original Message-----<BR>From: squid-users
[</FONT></TT><A
href="mailto:squid-users-bounces@lists.squid-cache.org"><TT><FONT
size=2>mailto:squid-users-bounces@lists.squid-cache.org</FONT></TT></A><TT><FONT
size=2>] On Behalf Of joe<BR>Sent: Thursday, May 26, 2016 5:30 PM<BR>To:
squid-users@lists.squid-cache.org<BR>Subject: [squid-users] NULL
characters<BR><BR>2016/05/26 06:41:28 kid1| ctx: enter level
0:<BR>'http://js.advert.mirtesen.ru/data/js/82090.js'<BR>2016/05/26 06:41:28
kid1| WARNING: HTTP header contains NULL characters<BR>{Server: nginx<BR>Date:
Thu, 26 May 2016 03:46:52 GMT<BR>Content-Type:
application/javascript;charset=utf-8<BR>Transfer-Encoding:
chunked<BR>Connection: close<BR>Vary: Accept-Encoding<BR>X-MaxSize:
5<BR>X-MaxShm: 5<BR>X-ShmTol: 2<BR>X-Loc: 2347<BR>X-MID: 16<BR>X-Node:
ssel6<BR>X-ChosenReserve: 2<BR>X-TotalPrimary: 290<BR>X-ExclByGeo:
266<BR>X-TotalPrimaryPayable: 219<BR>X-ChosenPrimary: 3<BR>X-ExclByTime:
18<BR>X-ShmNews: 1989237,2010118,2009700,<BR>X-TotalPrimaryExchange:
0<BR>X-TotalReserve: 332<BR>X-ChosenPayable: 3<BR>X-ShmCnt: 3<BR>Set-Cookie:
nid}<BR>NULL<BR>{Server: nginx<BR>Date: Thu, 26 May 2016 03:46:52
GMT<BR>Content-Type: application/javascript;charset=utf-8<BR>Transfer-Encoding:
chunked<BR>Connection: close<BR>Vary: Accept-Encoding<BR>X-MaxSize:
5<BR>X-MaxShm: 5<BR>X-ShmTol: 2<BR>X-Loc: 2347<BR>X-MID: 16<BR>X-Node:
ssel6<BR>X-ChosenReserve: 2<BR>X-TotalPrimary: 290<BR>X-ExclByGeo:
266<BR>X-TotalPrimaryPayable: 219<BR>X-ChosenPrimary: 3<BR>X-ExclByTime:
18<BR>X-ShmNews: 1989237,2010118,2009700,<BR>X-TotalPrimaryExchange:
0<BR>X-TotalReserve: 332<BR>X-ChosenPayable: 3<BR>X-ShmCnt: 3<BR>Set-Cookie:
nid<BR>2016/05/26 06:41:28 kid1| ctx: exit level 0<BR><BR>is it bad
?????<BR><BR><BR><BR>--<BR>View this message in context: </FONT></TT><A
href="http://squid-web-proxy-cache.1019090.n4.nabble.com/NULL-characters-tp4677691.html"><TT><FONT \
size=2>http://squid-web-proxy-cache.1019090.n4.nabble.com/NULL-characters-tp4677691.html</FONT></TT></A><TT><FONT \
size=2><BR>Sent from the Squid - Users mailing list archive at
Nabble.com.<BR>_______________________________________________<BR>squid-users
mailing list<BR>squid-users@lists.squid-cache.org<BR></FONT></TT><A
href="http://lists.squid-cache.org/listinfo/squid-users"><TT><FONT
size=2>http://lists.squid-cache.org/listinfo/squid-users</FONT></TT></A><TT><FONT
size=2><BR><BR><BR><BR>------------------------------<BR><BR>Message: 5<BR>Date:
Fri, 27 May 2016 12:32:15 +0100<BR>From: Nilesh Gavali
<nilesh.gavali@tcs.com><BR>To:
squid-users@lists.squid-cache.org<BR>Subject: [squid-users] missing
negotiate_kerberos_auth on my
squid<BR>Message-ID:<BR> \
<OF9C6F8F89.5CF2ECB1-ON80257FC0.003EE232-80257FC0.003F5EF7@tcs.com><BR>Content-Type: \
text/plain; charset="utf-8"<BR><BR>Hello ;<BR>I have installed latest squid
3.5.19 on red hat Linux yesterday. That <BR>means I am new to squid and linux.
<BR>able to start the squid and its working fine. <BR>now we are trying to
authenticate user via Kerberos with windows AD. but <BR>facing
issues.<BR>followed the steps provided on <BR></FONT></TT><A
href="http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos"><TT><FONT
size=2>http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos</FONT></TT></A><TT><FONT \
size=2><BR>But unable to find negotiate_kerberos_auth on my Linux box at
any <BR>location. <BR>now I need to know where i can find/download
negotiate_kerberos_auth and <BR>compile it to make authentication
successful.<BR><BR>Thanks & Regards<BR>Nilesh Suresh Gavali<BR>Tata
Consultancy Services<BR>3rd Floor, Tithebarn House<BR>Tithebarn
Street<BR>Liverpool - L2 2NZ<BR>United Kingdom<BR>Mailto:
nilesh.gavali@tcs.com<BR>Website: </FONT></TT><A
href="http://www.tcs.com/"><TT><FONT
size=2>http://www.tcs.com</FONT></TT></A><TT><FONT
size=2><BR>____________________________________________<BR>Experience
certainty. IT
Services<BR> \
Business
Solutions<BR> \
Consulting<BR>____________________________________________<BR><BR>Tata
Consultancy Services Limited , incorporated with limited liability <BR>and
registered with Registrar of Companies, Mumbai, India - No: 11-84781<BR>HQ :
Nirmal Building , 9th Floor, Nariman Point, Mumbai - 400 021, India -
<BR>Registered in UK : 18 Grosvenor Place, London SW1X 7HS - BR
> 007627<BR>=====-----=====-----=====<BR>Notice: The information contained in
this e-mail<BR>message and/or attachments to it may contain <BR>confidential or
privileged information. If you are <BR>not the intended recipient, any
dissemination, use, <BR>review, distribution, printing or copying of the
<BR>information contained in this e-mail message <BR>and/or attachments to it
are strictly prohibited. If <BR>you have received this communication in error,
<BR>please notify us by reply e-mail or telephone and <BR>immediately and
permanently delete the message <BR>and any attachments. Thank
you<BR><BR><BR>-------------- next part --------------<BR>An HTML attachment was
scrubbed...<BR>URL: <</FONT></TT><A
href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/b812d6ac/attachment-0001.html"><TT><FONT \
size=2>http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/b812d6ac/attachment-0001.html</FONT></TT></A><TT><FONT \
size=2>><BR><BR>------------------------------<BR><BR>Message: 6<BR>Date:
Fri, 27 May 2016 13:41:34 +0200<BR>From: L.P.H. van Belle
<belle@bazuin.nl><BR>To: squid-users@squid-cache.org
<squid-users@squid-cache.org><BR>Subject: Re: [squid-users] missing
negotiate_kerberos_auth on my
squid<BR>Message-ID:<BR> \
<vmime.5748326e.63bf.32264d027089be4e@ms249-lin-003.rotterdam.bazuin.nl><BR>&nb \
sp; \
<BR>Content-Type: text/plain; charset="windows-1252"<BR><BR>Should be include
imo. <BR><BR> <BR><BR>Shoud be in any Squid-3.2 and
later.<BR><BR> <BR><BR>And on my debian server its locate here.
<BR><BR>/usr/lib/squid/negotiate_kerberos_auth <BR><BR> <BR><BR>Did you
enable : --enable-auth-negotiate=kerberos,wrapper on compile ?
<BR><BR> <BR><BR>Run squid –v to check it. <BR><BR> <BR><BR>Greetz,
<BR><BR> <BR><BR>Louis<BR><BR> <BR><BR> <BR><BR><BR>Van:
squid-users [</FONT></TT><A
href="mailto:squid-users-bounces@lists.squid-cache.org"><TT><FONT
size=2>mailto:squid-users-bounces@lists.squid-cache.org</FONT></TT></A><TT><FONT
size=2>] Namens Nilesh Gavali<BR>Verzonden: vrijdag 27 mei 2016 13:32<BR>Aan:
squid-users@lists.squid-cache.org<BR>Onderwerp: [squid-users] missing
negotiate_kerberos_auth on my squid<BR><BR><BR> <BR><BR>Hello ; <BR>I have
installed latest squid 3.5.19 on red hat Linux yesterday. That means I am new to
squid and linux. <BR>able to start the squid and its working fine. <BR>now we
are trying to authenticate user via Kerberos with windows AD. but facing issues.
<BR>followed the steps provided on </FONT></TT><A
href="http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos"><TT><FONT
size=2>http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos</FONT></TT></A><TT><FONT \
size=2> <BR>But unable to find negotiate_kerberos_auth on my Linux box at
any location. <BR>now I need to know where i can find/download
negotiate_kerberos_auth and compile it to make authentication successful.
<BR><BR>Thanks & Regards<BR>Nilesh Suresh Gavali<BR>Tata Consultancy
Services<BR>3rd Floor, Tithebarn House<BR>Tithebarn Street<BR>Liverpool - L2
2NZ<BR>United Kingdom<BR>Mailto: nilesh.gavali@tcs.com<BR>Website:
</FONT></TT><A href="http://www.tcs.com/"><TT><FONT
size=2>http://www.tcs.com</FONT></TT></A><TT><FONT
size=2><BR>____________________________________________<BR>Experience
certainty. IT
Services<BR> \
Business
Solutions<BR> \
Consulting<BR>____________________________________________<BR><BR>Tata
Consultancy Services Limited , incorporated with limited liability and
registered with Registrar of Companies, Mumbai, India - No: 11-84781<BR>HQ :
Nirmal Building , 9th Floor, Nariman Point, Mumbai - 400 021, India -
Registered in UK : 18 Grosvenor Place, London SW1X 7HS - BR
> 007627<BR><BR>=====-----=====-----=====<BR>Notice: The information contained in
this e-mail<BR>message and/or attachments to it may contain <BR>confidential or
privileged information. If you are <BR>not the intended recipient, any
dissemination, use, <BR>review, distribution, printing or copying of the
<BR>information contained in this e-mail message <BR>and/or attachments to it
are strictly prohibited. If <BR>you have received this communication in error,
<BR>please notify us by reply e-mail or telephone and <BR>immediately and
permanently delete the message <BR>and any attachments. Thank
you<BR><BR><BR>-------------- next part --------------<BR>An HTML attachment was
scrubbed...<BR>URL: <</FONT></TT><A
href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/bbeb60e2/attachment.html"><TT><FONT \
size=2>http://lists.squid-cache.org/pipermail/squid-users/attachments/20160527/bbeb60e2/attachment.html</FONT></TT></A><TT><FONT \
size=2>><BR><BR>------------------------------<BR><BR>Subject: Digest
Footer<BR><BR>_______________________________________________<BR>squid-users
mailing list<BR>squid-users@lists.squid-cache.org<BR></FONT></TT><A
href="http://lists.squid-cache.org/listinfo/squid-users"><TT><FONT
size=2>http://lists.squid-cache.org/listinfo/squid-users</FONT></TT></A><TT><FONT
size=2><BR><BR><BR>------------------------------<BR><BR>End of squid-users
Digest, Vol 21, Issue
101<BR>********************************************<BR></FONT></TT><BR>
<P>
<HR>
_______________________________________________<BR>squid-users mailing
list<BR>squid-users@lists.squid-cache.org<BR>http://lists.squid-cache.org/listinfo/squid-users<BR></DIV></DIV></DIV></DIV>
<P>
<HR>
_______________________________________________<BR>squid-users mailing
list<BR>squid-users@lists.squid-cache.org<BR>http://lists.squid-cache.org/listinfo/squid-users<BR></DIV></DIV></DIV></DIV></BODY></HTML>
[Attachment #6 (text/plain)]
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic