[squid-users] leaking memory in squid 3.4.8 and 3.4.7.

[Rafael Akchurin]

I believe I do (but you made me doubt:)

Can you please check if your browser is set to use FQDN of proxy not proxy's IP address.
Raf

________________________________________
From: Victor Sudakov <sudakov at sibptus.tomsk.ru>
Sent: Friday, October 3, 2014 4:46 PM
To: Rafael Akchurin
Cc: Amos Jeffries; squid-users at lists.squid-cache.org
Subject: Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

Rafael Akchurin wrote:
> > Does Kerberos proxy authentication work with Firefox (Windows) at all?
> > Success stories and recipes, anyone?
>
> If you see 'received type 1 NTLM token' message it means your IE was
> not able to use the Kerberos auth and have chosen NTLM instead.

Any ideas how I can figure out the cause thereof?

I understand that the browser should be requesting a ticket for the
HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU service from the
domain controller.

How can I find out why it is not requesting it or not receiving it?

> Please ensure you are browsing from *domain joined* machine

I certainly am.

> and
> using NTLM/Kerberos authentication wrapper as described in
> http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory#Install_negotiate_wrapper.

My objective is to enable Kerberos proxy authentication from domain joined
Windows machines in MSIE, Firefox and possible Chrome.

Why and when do I need this wrapper? Is squid's own
negotiate_kerberos_auth plugin not good enough for my purpose?

>
> If you do not want to use NTLM

I most certainly don't want to use NTLM. I want to use Kerberos with
MSIE and Firefox. It is possible at all, especially with the latter?

> then probably our humble guide will
> be of any use -
> http://docs.diladele.com/administrator_guide_3_4/installation_and_removal/active_directory/index.html

I have basically done all that already, except the Basic auth and LDAP
groups stuff. I don't want those for the present.

Tell me please, after implementing your guide, do you enjoy Kerberos
proxy authentication in Firefox, or does it fall back to Basic auth?

--
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru