<div dir="ltr"><span id="result_box" class="" lang="en"><span class="">Hello</span> <span class="">Amos</span> <span class="">Jeffries</span><span>!</span> <br><br><span class="">I tried to use</span> <span class="">three</span> <span class="">parameters</span><span>, but</span> <span class="">it did not work</span><span>.</span> <br><br><span class="">I did not understand</span> <span class="">why</span> <span class="">this</span> <span class="">is giving</span> <span class="">error</span><span class="">...<br><br><br><br></span></span><div class="gmail_extra"><br><div class="gmail_quote">2014-10-27 14:40 GMT-02:00 <span dir="ltr"><<a href="mailto:squid-users-request@lists.squid-cache.org" target="_blank">squid-users-request@lists.squid-cache.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send squid-users mailing list submissions to<br>
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:squid-users-request@lists.squid-cache.org">squid-users-request@lists.squid-cache.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:squid-users-owner@lists.squid-cache.org">squid-users-owner@lists.squid-cache.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of squid-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Delay Class 3 - Squid (Amos Jeffries)<br>
2. Re: Delay Class 3 - Squid (Amos Jeffries)<br>
3. Re: Filtering keywords on google search (Cassiano Martin)<br>
4. how to obtain info about actual active downloads?<br>
(Frantisek Hanzlik)<br>
5. Re: how to obtain info about actual active downloads?<br>
(Antony Stone)<br>
6. Re: how to obtain info about actual active downloads?<br>
(Leonardo Rodrigues)<br>
7. Re: Kerberos Authentication Failing for Windows 7+ with BH<br>
gss_accept_sec_context() failed (Pedro Lobo)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Tue, 28 Oct 2014 01:01:34 +1300<br>
From: Amos Jeffries <<a href="mailto:squid3@treenet.co.nz">squid3@treenet.co.nz</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Delay Class 3 - Squid<br>
Message-ID: <<a href="mailto:544E341E.7080801@treenet.co.nz">544E341E.7080801@treenet.co.nz</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
On 28/10/2014 12:57 a.m., Jorge Visentini wrote:<br>
> Hello!<br>
><br>
> Sorry my english.<br>
><br>
> I'm racking my brain to figure out why the error.<br>
><br>
> I've used a long time ago a rule delay pool but this time I am not<br>
> able to implement ...<br>
><br>
> In my squid.conf looks like this:<br>
><br>
> delay_pools 1 delay_class 1 3 delay_parameters 1 50000/50000<br>
> 24000/24000<br>
<br>
<a href="http://www.squid-cache.org/Doc/config/delay_parameters/" target="_blank">http://www.squid-cache.org/Doc/config/delay_parameters/</a><br>
<br>
class 1 pools only have one speed parameter. Not two.<br>
<br>
<br>
Amos<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2.0.22 (MingW32)<br>
<br>
iQEcBAEBAgAGBQJUTjQeAAoJELJo5wb/XPRjm0IH/3Fwh9VhfFOhpMfn1Z20ii2b<br>
49SC9fhyMmVfoNdm49uOY9txb/7VDQpfRtb4yvNcAJJ+t0soNRlz8wcYrvJHeu52<br>
HMG1te3wySXVZgar/DzQbsI/k15Ar2uuUVmJJ/rkQextBjftqXF7HLXo6kBNRLG7<br>
xcwSSrtGy9SIY8yOZflz+4ANJr5Z1Fme1w2Cp88UXXBLuKXZ3JNeQrte06aRpJkn<br>
KwWQwSLwv3KGF48PbuLRD2M8flA/eFkoqg0VK0CRzjytGwxb/b0OIE9shl/GH2A0<br>
oEcWVowZHqAXSsSbbpW9GIyNpKoxjndY80VBijaTvvXj+tBQK2DaIse7e7NaEGc=<br>
=tJHs<br>
-----END PGP SIGNATURE-----<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Tue, 28 Oct 2014 01:06:13 +1300<br>
From: Amos Jeffries <<a href="mailto:squid3@treenet.co.nz">squid3@treenet.co.nz</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] Delay Class 3 - Squid<br>
Message-ID: <<a href="mailto:544E3535.7050805@treenet.co.nz">544E3535.7050805@treenet.co.nz</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
On 28/10/2014 1:01 a.m., Amos Jeffries wrote:<br>
> On 28/10/2014 12:57 a.m., Jorge Visentini wrote:<br>
>> Hello!<br>
><br>
>> Sorry my english.<br>
><br>
>> I'm racking my brain to figure out why the error.<br>
><br>
>> I've used a long time ago a rule delay pool but this time I am<br>
>> not able to implement ...<br>
><br>
>> In my squid.conf looks like this:<br>
><br>
>> delay_pools 1 delay_class 1 3 delay_parameters 1 50000/50000<br>
>> 24000/24000<br>
><br>
> <a href="http://www.squid-cache.org/Doc/config/delay_parameters/" target="_blank">http://www.squid-cache.org/Doc/config/delay_parameters/</a><br>
><br>
> class 1 pools only have one speed parameter. Not two.<br>
><br>
<br>
Meh, sorry. I mean class 3 has 3 parameters.<br>
<br>
Amos<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2.0.22 (MingW32)<br>
<br>
iQEcBAEBAgAGBQJUTjU1AAoJELJo5wb/XPRjHYAIAI2oAOpjZTgsTlbdz20LZW+k<br>
XAAAnm8QgJSDBI7ErmZAJ7AxJILfi2PR2M60411mN5AgrVYulofUriTebS13bguR<br>
g0aoFmVMBj003T70sNZWwSgyf18Gr9ewu5X6sOSu1IdQg6M9VMJFaUUMs+FFy2bs<br>
IOqfhEhkcszlz0wrmY+xhAxR7mm8qWenrRk47W6rQR90p5Ml5m6ha0cCyTMTo46H<br>
euojiX3JHvbFa3NtoOiNTmNOK7ZVt6bE/KTDSGobx6ehNtsUgKQgMBfyQ9ET2269<br>
x8/MBDBjpK3JSld0UF3CjTkF8eWZHLAC+/Y6ZRR1vY6ihXi5B4yK7+Ve0ZvK5eU=<br>
=7r5y<br>
-----END PGP SIGNATURE-----<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Mon, 27 Oct 2014 11:05:33 -0200<br>
From: Cassiano Martin <<a href="mailto:cassiano@polaco.pro.br">cassiano@polaco.pro.br</a>><br>
To: Job <<a href="mailto:Job@colliniconsulting.it">Job@colliniconsulting.it</a>><br>
Cc: "<a href="mailto:squid-users@squid-cache.org">squid-users@squid-cache.org</a>" <<a href="mailto:squid-users@squid-cache.org">squid-users@squid-cache.org</a>><br>
Subject: Re: [squid-users] Filtering keywords on google search<br>
Message-ID:<br>
<<a href="mailto:CAOoxthNmWSP7Xck4BpNxOO-wNNsGe3e4jkXgfvsLffeSbk9f2A@mail.gmail.com">CAOoxthNmWSP7Xck4BpNxOO-wNNsGe3e4jkXgfvsLffeSbk9f2A@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
I have some proof of concept on my github. it can be done thought DNS<br>
hijacking. I modified a version of tinyproxy to enforce safe search.<br>
you can check it out on <a href="https://github.com/polaco1782/tinyproxy" target="_blank">https://github.com/polaco1782/tinyproxy</a><br>
<br>
2014-10-25 9:49 GMT-02:00 Job <<a href="mailto:Job@colliniconsulting.it">Job@colliniconsulting.it</a>>:<br>
> Hello, since Google switch definitely on SSL connection it seems there is no way to filter semantic (with danguardian, squidguard or squid).<br>
><br>
> SSL Bump can help in this case, both on explicit or transparent proxying?<br>
><br>
> Is there another way to filter searches (and image searches!)?<br>
><br>
> Thank you!<br>
> Francesco<br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Mon, 27 Oct 2014 14:32:39 +0100<br>
From: Frantisek Hanzlik <<a href="mailto:franta@hanzlici.cz">franta@hanzlici.cz</a>><br>
To: Squid users list <<a href="mailto:squid-users@squid-cache.org">squid-users@squid-cache.org</a>><br>
Subject: [squid-users] how to obtain info about actual active<br>
downloads?<br>
Message-ID: <<a href="mailto:544E4977.3050705@hanzlici.cz">544E4977.3050705@hanzlici.cz</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
Please, what is best way for determining who squid clients (their<br>
PC IP addresses) have which downloads active?<br>
I want it to determine which clients burden our slow internet line.<br>
Examining 'access.log' does not help much in this case, because users<br>
can download large files and it may take a few minutes or hours (e.g.<br>
in case of consuming some audio/video streams).<br>
<br>
I tried inspecting informations in 'Client-side Active Requests' menu<br>
in cachemgr.cgi, where are paragraphs as:<br>
<br>
Connection: 0x7f442037aa48<br>
FD 94, read 5892, wrote 148211583<br>
FD desc: Reading next request<br>
in: buf 0x7f440efc9150, offset 0, size 4096<br>
remote: <a href="http://192.168.1.44:1631" target="_blank">192.168.1.44:1631</a><br>
local: <a href="http://192.168.1.254:3128" target="_blank">192.168.1.254:3128</a><br>
nrequests: 7<br>
uri <a href="http://ice.abradio.cz/prachen64.mp3" target="_blank">http://ice.abradio.cz/prachen64.mp3</a><br>
logType TCP_MISS<br>
out.offset 148178800, out.size 148179207<br>
req_sz 724<br>
entry 0x7f440d5d6220/A1AD3A830E803B23F9295A9BCB9C1949<br>
start 1414389495.929684 (18515.473233 seconds ago)<br>
username<br>
delay_pool 0<br>
<br>
which seems to contain the necessary items and it would not be a big<br>
problem adjust them to shorter form using e.g. awk or sed script,<br>
and this informations is possible obtain in batch with some as:<br>
<br>
wget -q -O - '<a href="http://localhost/Squid/cgi-bin/cachemgr.cgi?host=localhost&port=3128&user_name=&operation=active_requests" target="_blank">http://localhost/Squid/cgi-bin/cachemgr.cgi?host=localhost&port=3128&user_name=&operation=active_requests</a>'<br>
or<br>
lynx -dump '<a href="http://localhost/Squid/cgi-bin/cachemgr.cgi?host=localhost&port=3128&user_name=&operation=active_requests" target="_blank">http://localhost/Squid/cgi-bin/cachemgr.cgi?host=localhost&port=3128&user_name=&operation=active_requests</a>'<br>
<br>
But is this the correct way? Or Squid offers other tools for this<br>
case? Or is possible cachemgr.cgi supply/enwrap with some filter<br>
which output needed info in some customized format?<br>
We are using squid-3.3.13/Linux i686 now, it run on our LAN internet<br>
router, LAN has approx. twenty PCs.<br>
<br>
Thanks in advance, Franta Hanzlik<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Mon, 27 Oct 2014 14:47:00 +0100<br>
From: Antony Stone <<a href="mailto:Antony.Stone@squid.open.source.it">Antony.Stone@squid.open.source.it</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] how to obtain info about actual active<br>
downloads?<br>
Message-ID: <<a href="mailto:201410271447.00509.Antony.Stone@squid.open.source.it">201410271447.00509.Antony.Stone@squid.open.source.it</a>><br>
Content-Type: Text/Plain; charset="utf-8"<br>
<br>
On Monday 27 October 2014 at 14:32:39 (EU time), Frantisek Hanzlik wrote:<br>
<br>
> Please, what is best way for determining who squid clients (their<br>
> PC IP addresses) have which downloads active?<br>
> I want it to determine which clients burden our slow internet line.<br>
> Examining 'access.log' does not help much in this case, because users<br>
> can download large files and it may take a few minutes or hours (e.g.<br>
> in case of consuming some audio/video streams).<br>
<br>
I would use the tool 'iptraf', either running on your squid server, or on a<br>
machine which can sniff your internal network traffic (possibly with the use of a<br>
spanning port on the switch).<br>
<br>
That can give you real-time bandwidth measurements per IP address.<br>
<br>
Regards,<br>
<br>
<br>
Antony.<br>
<br>
--<br>
Anything that improbable is effectively impossible.<br>
<br>
- Murray Gell-Mann, Nobel Prizewinner in Physics<br>
<br>
Please reply to the list;<br>
please *don't* CC me.<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Mon, 27 Oct 2014 14:37:43 -0200<br>
From: Leonardo Rodrigues <<a href="mailto:leolistas@solutti.com.br">leolistas@solutti.com.br</a>><br>
To: <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
Subject: Re: [squid-users] how to obtain info about actual active<br>
downloads?<br>
Message-ID: <<a href="mailto:544E74D7.2030104@solutti.com.br">544E74D7.2030104@solutti.com.br</a>><br>
Content-Type: text/plain; charset=utf-8; format=flowed<br>
<br>
On 27/10/14 11:47, Antony Stone wrote:<br>
> On Monday 27 October 2014 at 14:32:39 (EU time), Frantisek Hanzlik wrote:<br>
><br>
>> Please, what is best way for determining who squid clients (their<br>
>> PC IP addresses) have which downloads active?<br>
>> I want it to determine which clients burden our slow internet line.<br>
>> Examining 'access.log' does not help much in this case, because users<br>
>> can download large files and it may take a few minutes or hours (e.g.<br>
>> in case of consuming some audio/video streams).<br>
> I would use the tool 'iptraf', either running on your squid server, or on a<br>
> machine which can sniff your internal network traffic (possibly with the use of a<br>
> spanning port on the switch).<br>
><br>
> That can give you real-time bandwidth measurements per IP address.<br>
><br>
<br>
I use this script:<br>
<br>
<a href="http://samm.kiev.ua/sqstat/" target="_blank">http://samm.kiev.ua/sqstat/</a><br>
<br>
Set it to auto-update on 15/15 seconds, for example, and you'll<br>
have a great and easy way to evaluate active connections and high<br>
bandwidth use connections.<br>
<br>
--<br>
<br>
<br>
Atenciosamente / Sincerily,<br>
Leonardo Rodrigues<br>
Solutti Tecnologia<br>
<a href="http://www.solutti.com.br" target="_blank">http://www.solutti.com.br</a><br>
<br>
Minha armadilha de SPAM, NÃO mandem email<br>
<a href="mailto:gertrudes@solutti.com.br">gertrudes@solutti.com.br</a><br>
My SPAMTRAP, do not email it<br>
<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 7<br>
Date: Mon, 27 Oct 2014 16:39:17 +0000<br>
From: "Pedro Lobo" <<a href="mailto:palobo@gmail.com">palobo@gmail.com</a>><br>
To: "Markus Moeller" <<a href="mailto:huaraz@moeller.plus.com">huaraz@moeller.plus.com</a>><br>
Cc: <a href="mailto:squid-users@squid-cache.org">squid-users@squid-cache.org</a><br>
Subject: Re: [squid-users] Kerberos Authentication Failing for Windows<br>
7+ with BH gss_accept_sec_context() failed<br>
Message-ID: <<a href="mailto:94F74226-F24B-4910-95B7-B86ACE815995@gmail.com">94F74226-F24B-4910-95B7-B86ACE815995@gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hey Everybody,<br>
<br>
Seems as though I celebrated too soon on Saturday. Today things are back to not working for Windows 7+ machines and XP/2003 machines are working just fine.<br>
<br>
I've also checked the permissions on the keytab file and they haven't changed since Saturday, so it's not that... ARGH!!!!<br>
<br>
Craving ideas and solutions right now... Pilot users are less than satisfied ;)<br>
<br>
Cheers,<br>
Pedro<br>
<br>
On 25 Oct 2014, at 14:13, Markus Moeller wrote:<br>
<br>
> Hi Pedro,<br>
><br>
> I wonder if he upper case in the name is a problem. Can you try<br>
><br>
> auth_param negotiate program /usr/lib/squid3/negotiate_kerberos_auth -d -r -s GSS_C_NO_NAME<br>
><br>
> instead of<br>
><br>
> auth_param negotiate program /usr/lib/squid3/negotiate_kerberos_auth -d -r -s HTTP/<a href="http://proxy01tst.fake.net" target="_blank">proxy01tst.fake.net</a><br>
><br>
> Markus<br>
><br>
> "Pedro Lobo" <<a href="mailto:palobo@gmail.com">palobo@gmail.com</a>> wrote in message news:FD6832B9-3F1F-48C6-A76F-47A224F1697B@gmail.com...<br>
> Hi Markus,<br>
><br>
> I used msktutil to create the keytab.<br>
><br>
> msktutil -c -s HTTP/<a href="http://proxy01tst.fake.net" target="_blank">proxy01tst.fake.net</a> -h <a href="http://proxy01tst.fake.net" target="_blank">proxy01tst.fake.net</a> -k /etc/squid3/PROXY.keytab --computer-name proxy01-tst --upn HTTP/<a href="http://proxy01tst.fake.net" target="_blank">proxy01tst.fake.net</a> --server <a href="http://srv01.fake.net" target="_blank">srv01.fake.net</a> --verbose<br>
> Output of klist -ekt:<br>
><br>
> 2 10/24/2014 22:59:50 proxy01-tst$@<a href="http://FAKE.NET" target="_blank">FAKE.NET</a> (arcfour-hmac)<br>
> 2 10/24/2014 22:59:50 proxy01-tst$@<a href="http://FAKE.NET" target="_blank">FAKE.NET</a> (aes128-cts-hmac-sha1-96)<br>
> 2 10/24/2014 22:59:50 proxy01-tst$@<a href="http://FAKE.NET" target="_blank">FAKE.NET</a> (aes256-cts-hmac-sha1-96)<br>
> 2 10/24/2014 22:59:50 HTTP/<a href="mailto:proxy01tst.FAKE.net@FAKE.NET">proxy01tst.FAKE.net@FAKE.NET</a> (arcfour-hmac)<br>
> 2 10/24/2014 22:59:50 HTTP/<a href="mailto:proxy01tst.FAKE.net@FAKE.NET">proxy01tst.FAKE.net@FAKE.NET</a> (aes128-cts-hmac-sha1-96)<br>
> 2 10/24/2014 22:59:50 HTTP/<a href="mailto:proxy01tst.FAKE.net@FAKE.NET">proxy01tst.FAKE.net@FAKE.NET</a> (aes256-cts-hmac-sha1-96)<br>
> 2 10/24/2014 22:59:50 host/<a href="mailto:proxy01tst.FAKE.net@FAKE.NET">proxy01tst.FAKE.net@FAKE.NET</a> (arcfour-hmac)<br>
> 2 10/24/2014 22:59:50 host/<a href="mailto:proxy01tst.FAKE.net@FAKE.NET">proxy01tst.FAKE.net@FAKE.NET</a> (aes128-cts-hmac-sha1-96)<br>
> 2 10/24/2014 22:59:50 host/<a href="mailto:proxy01tst.FAKE.net@FAKE.NET">proxy01tst.FAKE.net@FAKE.NET</a> (aes256-cts-hmac-sha1-96)<br>
> Yep, using MIT Kerberos<br>
><br>
> Thanks in advance for any help.<br>
><br>
> Cheers,<br>
> Pedro<br>
><br>
> On 25 Oct 2014, at 1:26, Markus Moeller wrote:<br>
><br>
> Hi Pedro,<br>
><br>
> How did you create your keytab ? What does klist –ekt <squid.keytab> show ( I assume you use MIT Kerberos) ?<br>
><br>
> Markus<br>
><br>
> "Pedro Lobo" <a href="mailto:palobo@gmail.com">palobo@gmail.com</a> wrote in message news:40E1E0E7-50C6-4117-94AA-50B06573430A@gmail.com...<br>
> Hi Squid Gurus,<br>
><br>
> I'm at my wit's end and in dire need of some squid expertise.<br>
><br>
> We've got a production environment with a couple of squid 2.7 servers using NTLM and basic authentication. Recently though, we decided to upgrade and I'm now setting up squid 3.3 with Kerberos and NTLM Fallback. I've followed just about every guide I could find and in my testing environment, things were working great. Now that I've hooked it up to the main domain, things are awry.<br>
><br>
> If I use a machine that's not part of the domain, NTLM kicks in and I can surf the web fine. If I use a Windows XP or Windows Server 2003, kerberos works just fine, however, if I use a machine Windows 7, 8 or 2008 server, I keep getting a popup asking me to authenticate and even then, it's and endless loop until it fails. My cache.log is littered with:<br>
><br>
> negotiate_kerberos_auth.cc(200): pid=1607 :2014/10/24 23:03:01| negotiate_kerberos_auth: ERROR: gss_accept_sec_context() failed: Unspecified GSS failure. Minor code may provide more information.<br>
> 2014/10/24 23:03:01| ERROR: Negotiate Authentication validating user. Error returned 'BH gss_accept_sec_context() failed: Unspecified GSS failure. Minor code may provide more information. '<br>
> The odd thing, is that this has worked before. Help me Obi Wan... You're my only hope! :)<br>
><br>
> Current Setup<br>
> Squid 3.3 running on Ubuntu 14.04 server. It's connected to a 2003 server with function level 2000 (I know, we're trying to fase out the older servers).<br>
><br>
> krb5.conf<br>
><br>
> [libdefaults]<br>
> default_realm = <a href="http://FAKE.NET" target="_blank">FAKE.NET</a><br>
> dns_lookup_kdc = yes<br>
> dns_lookup_realm = yes<br>
> ticket_lifetime = 24h<br>
> default_keytab_name = /etc/squid3/PROXY.keytab<br>
><br>
> ; for Windows 2003<br>
> default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5<br>
> default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5<br>
> permitted_enctypes = rc4-hmac des-cbc-crc des-cbc-md5<br>
><br>
> [realms]<br>
> <a href="http://FAKE.NET" target="_blank">FAKE.NET</a> = {<br>
> kdc = <a href="http://srv01.fake.net" target="_blank">srv01.fake.net</a><br>
> kdc = <a href="http://srv02.fake.net" target="_blank">srv02.fake.net</a><br>
> kdc = <a href="http://srv03.fake.net" target="_blank">srv03.fake.net</a><br>
> admin_server = <a href="http://srv01.fake.net" target="_blank">srv01.fake.net</a><br>
> default_domain = <a href="http://fake.net" target="_blank">fake.net</a><br>
> }<br>
><br>
> [domain_realm]<br>
> .<a href="http://fake.net" target="_blank">fake.net</a> = <a href="http://FAKE.NET" target="_blank">FAKE.NET</a><br>
> <a href="http://fake.net" target="_blank">fake.net</a> = <a href="http://FAKE.NET" target="_blank">FAKE.NET</a><br>
><br>
> [logging]<br>
> kdc = FILE:/var/log/kdc.log<br>
> admin_server = FILE:/var/log/kadmin.log<br>
> default = FILE:/var/log/krb5lib.log<br>
> squid.conf<br>
><br>
> auth_param negotiate program /usr/lib/squid3/negotiate_kerberos_auth -d -r -s HTTP/<a href="http://proxy01tst.fake.net" target="_blank">proxy01tst.fake.net</a><br>
> auth_param negotiate children 20 startup=0 idle=1<br>
> auth_param negotiate keep_alive off<br>
><br>
> auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=<a href="http://FAKE.NET" target="_blank">FAKE.NET</a><br>
> auth_param ntlm children 10<br>
> auth_param ntlm keep_alive off<br>
> Cheers,<br>
> Pedro<br>
><br>
> Cumprimentos<br>
> Pedro Lobo<br>
> Solutions Architect | System Engineer<br>
><br>
> <a href="mailto:pedro.lobo@pt.clara.net">pedro.lobo@pt.clara.net</a><br>
> Tlm.: <a href="tel:%2B351%20939%20528%20827" value="+351939528827">+351 939 528 827</a> | Tel.: <a href="tel:%2B351%20214%20127%20314" value="+351214127314">+351 214 127 314</a><br>
><br>
> Claranet Portugal<br>
> Ed. Parque Expo<br>
> Av. D. João II, 1.07-2.1, 4º Piso<br>
> 1998-014 Lisboa<br>
> <a href="http://www.claranet.pt" target="_blank">www.claranet.pt</a><br>
><br>
> Empresa certificada ISO 9001, ISO 20000 e ISO 27001<br>
><br>
><br>
> ------------------------------------------------------------------------------<br>
><br>
> ------------------------------------------------------------------------------<br>
><br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
><br>
> ------------------------------------------------------------------------------<br>
><br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
> Cumprimentos<br>
> Pedro Lobo<br>
> Solutions Architect | System Engineer<br>
><br>
> <a href="mailto:pedro.lobo@pt.clara.net">pedro.lobo@pt.clara.net</a><br>
> Tlm.: <a href="tel:%2B351%20939%20528%20827" value="+351939528827">+351 939 528 827</a> | Tel.: <a href="tel:%2B351%20214%20127%20314" value="+351214127314">+351 214 127 314</a><br>
><br>
> Claranet Portugal<br>
> Ed. Parque Expo<br>
> Av. D. João II, 1.07-2.1, 4º Piso<br>
> 1998-014 Lisboa<br>
> <a href="http://www.claranet.pt" target="_blank">www.claranet.pt</a><br>
><br>
><br>
><br>
><br>
><br>
> Empresa certificada ISO 9001, ISO 20000 e ISO 27001<br>
><br>
><br>
><br>
><br>
> --------------------------------------------------------------------------------<br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20141027/219e87ff/attachment.html" target="_blank">http://lists.squid-cache.org/pipermail/squid-users/attachments/20141027/219e87ff/attachment.html</a>><br>
-------------- next part --------------<br>
A non-text attachment was scrubbed...<br>
Name: signature.asc<br>
Type: application/pgp-signature<br>
Size: 536 bytes<br>
Desc: OpenPGP digital signature<br>
URL: <<a href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20141027/219e87ff/attachment.sig" target="_blank">http://lists.squid-cache.org/pipermail/squid-users/attachments/20141027/219e87ff/attachment.sig</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of squid-users Digest, Vol 2, Issue 97<br>
******************************************<br>
</blockquote></div><br></div></div>