<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40"
xmlns:ns0="http://schemas.microsoft.com/office/2004/12/omml">

<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
 namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--a:link
        {mso-style-priority:99;}
span.MSOHYPERLINK
        {mso-style-priority:99;}
a:visited
        {mso-style-priority:99;}
span.MSOHYPERLINKFOLLOWED
        {mso-style-priority:99;}

 /* Font Definitions */
 @font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:Calibri;}
a:link, span.MsoHyperlink
        {color:#0563C1;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {color:#954F72;
        text-decoration:underline;}
span.E-mailStijl17
        {mso-style-type:personal;
        font-family:Calibri;
        color:windowtext;}
span.E-mailStijl18
        {mso-style-type:personal-reply;
        font-family:Arial;
        color:navy;}
@page Section1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext="edit">
  <o:idmap v:ext="edit" data="1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=NL link="#0563C1" vlink="#954F72">

<div class=Section1>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hai, <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I had troubles also with the squid config
files, so i created “squid-conf-split” <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Basicly this small piece of code blow. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>## code starts here. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#!/bin/sh<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>DATE_NOW=$(date +%Y-%m-%d)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>if [ -d /etc/squid/conf.d ]; then<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    cp -R /etc/squid/conf.d-${DATE_NOW}<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>else<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    mkdir /etc/squid/conf.d<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>fi<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>cd /etc/squid/conf.d<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>if [ ! -e /etc/squid/squid.conf.debian ];
then<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    if [ -e
/etc/squid/squid.conf.dpkg-dist ]; then<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>        cp /etc/squid/squid.conf.dpkg-dist
/etc/squid/squid.conf.debian<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    else<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>        cp /etc/squid/squid.conf
/etc/squid/squid.conf.debian<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    fi<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>fi<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>csplit -f squid- -n2
/etc/squid/squid.conf.debian '/# -----------------------------------------------------------------------------/-1'
'{*}' > /dev/null<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>for x in `ls squid-*` ; do NAME=`cat $x |
head -n1 | tr -s ' ' | tr "[ ]" "[\-]"| cut -c3-100` ; mv
$x $x-00-$NAME.conf  ; done<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>cat << EOF >
/etc/squid/squid.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>########################################"<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>## Debian Squid splitted based config<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>## edit the files in /etc/squid/conf.d/<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>include /etc/squid/conf.d/*.conf"<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>EOF<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>## code ends here. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>You end up with a layout like this. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>All files starting with squid-XX-00 are
the default settings of squid. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>All squid-XX-01-custom are my changes. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Only 1 file with an exeption.    squid-03-00-ACCESS-CONTROLS.conf
. since order is a big thing in this file, i make a copy of it. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>And add my entries there. All other see
below. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-00-00-WELCOME-TO-SQUID-3.5.12.conf                               
squid-12-01-custom.conf                                     
squid-27-00-SNMP-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-01-00-OPTIONS-FOR-SMP.conf                                       
squid-13-00-OPTIONS-FOR-EXTERNAL-SUPPORT-PROGRAMS.conf      
squid-27-01-custom.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-02-00-OPTIONS-FOR-AUTHENTICATION.conf                            
squid-13-01-custom.conf                                      squid-28-00-ICP-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-02-01-auth-negotiate-both.conf                                   
squid-14-00-OPTIONS-FOR-URL-REWRITING.conf                  
squid-28-01-custom.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-02-04-auth-ldap-AD.conf                       
                   squid-15-00-OPTIONS-FOR-STORE-ID.conf                       
squid-29-00-MULTICAST-ICP-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-02-99-auth-acl.conf                                              
squid-16-00-OPTIONS-FOR-TUNING-THE-CACHE.conf                squid-30-00-INTERNAL-ICON-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-03-00-ACCESS-CONTROLS.conf                                       
squid-16-01-custom.conf                                     
squid-31-00-ERROR-PAGE-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-04-00-NETWORK-OPTIONS.conf                   
                    squid-17-00-HTTP-OPTIONS.conf                               
squid-31-01-custom.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-05-00-SSL-OPTIONS.conf                                           
squid-17-01-custom.conf                                      squid-32-00-OPTIONS-INFLUENCING-REQUEST-FORWARDING-.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-06-00-OPTIONS-RELATING-TO-EXTERNAL-SSL_CRTD-.conf                
squid-18-00-TIMEOUTS.conf                                   
squid-32-01-custom.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-07-00-OPTIONS-WHICH-AFFECT-THE-NEIGHBOR-SELECTION-ALGORITHM.conf 
squid-18-01-custom.conf                                     
squid-33-00-ADVANCED-NETWORKING-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-08-00-MEMORY-CACHE-OPTIONS.conf                                  
squid-19-00-ADMINISTRATIVE-PARAMETERS.conf                   squid-34-00-ICAP-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-08-01-custom.conf                                                
squid-19-01-custom.conf                                     
squid-34-01-icap-squidclamav.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-09-00-DISK-CACHE-OPTIONS.conf                            
        squid-20-00-OPTIONS-FOR-THE-CACHE-REGISTRATION-SERVICE.conf 
squid-35-00-eCAP-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-09-01-custom.conf                                                
squid-21-00-HTTPD-ACCELERATOR-OPTIONS.conf                  
squid-36-00-MESSAGE-ADAPTATION-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-10-00-LOGFILE-OPTIONS.conf                                       
squid-22-00-DELAY-POOL-PARAMETERS.conf                      
squid-37-00-DNS-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-10-01-custom.conf                                                
squid-23-00-CLIENT-DELAY-POOL-PARAMETERS.conf               
squid-37-01-custom.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-11-00-OPTIONS-FOR-TROUBLESHOOTING.conf                           
squid-24-00-WCCPv1-AND-WCCPv2-CONFIGURATION-OPTIONS.conf    
squid-38-00-MISCELLANEOUS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-11-01-custom.conf                                                
squid-25-00-PERSISTENT-CONNECTION-HANDLING.conf             
squid-38-01-custom.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>squid-12-00-OPTIONS-FOR-FTP-GATEWAYING.conf                            
squid-26-00-CACHE-DIGEST-OPTIONS.conf<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>If you use kerberos authentication. You can
use a setup like this., i’ve tested both, and both works as of 3.4.8 
-> 3.5.12 ( i recomiled 3.5 from sid ) <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>## this line needs a good working Pricipal
names. (SPN’s) Like  HTTP/proxy1.internal.domain.tld  and you need an A
and PTR record ! <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>auth_param negotiate program
/usr/lib/squid/negotiate_wrapper_auth -d \<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    --kerberos
/usr/lib/squid/negotiate_kerberos_auth -s HTTP/proxy1.internal.domain.tld@MY.REALM.TLD
\<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    --ntlm /usr/bin/ntlm_auth
--helper-protocol=gss-spnego --domain=NTDOMAIN<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>## or same, check the -s !<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#auth_param negotiate program
/usr/lib/squid/negotiate_wrapper_auth \<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#    --kerberos
/usr/lib/squid/negotiate_kerberos_auth -s GSS_C_NO_NAME -d \<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#    --ntlm /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp --domain= NTDOMAIN \<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>auth_param negotiate children 30 startup=5
idle=1<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>auth_param negotiate keep_alive on<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>take one of the above lines and test with
debug on , like :  <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>/usr/lib/squid/negotiate_wrapper_auth -d \<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    --kerberos
/usr/lib/squid/negotiate_kerberos_auth -s HTTP/proxy1.internal.domain.tld@MY.REALM.TLD
\<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>    --ntlm /usr/bin/ntlm_auth
--helper-protocol=gss-spnego --domain=NTDOMAIN -D<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>( -D added in this line )  <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>So, do the following, start over with a
clean new config. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Enable these: <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#acl localnet src 10.0.0.0/8    # RFC1918
possible internal network<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#acl localnet src 172.16.0.0/12 # RFC1918
possible internal network<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#acl localnet src 192.168.0.0/16        #
RFC1918 possible internal network<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#acl localnet src fc00::/7       # RFC
4193 local private network range<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>#acl localnet src fe80::/10      # RFC
4291 link-local (directly plugged) machines<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Which allows all local networks, or change
them to your ip range. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>http_port 3128 intercept<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>add to firewall: <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>-A PREROUTING -i eth0 -p tcp --dport 80 -j
REDIRECT --to-port 3128 <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Reload squid and test. <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Give it a try, im back here in 15 hours.. 
;-) <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Greetz, <o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Louis<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>

<div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'>

<div>

<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt;font-family:"Times New Roman"'>

<hr size=2 width="100%" align=center tabindex=-1>

</span></font></div>

<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>Van:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> squid-users
[mailto:squid-users-bounces@lists.squid-cache.org] <b><span style='font-weight:
bold'>Namens </span></b>dolson@ihcrc.org<br>
<b><span style='font-weight:bold'>Verzonden:</span></b> woensdag 23 december
2015 16:26<br>
<b><span style='font-weight:bold'>Aan:</span></b> squid-users@lists.squid-cache.org<br>
<b><span style='font-weight:bold'>Onderwerp:</span></b> [squid-users] Unable to
access websites through Squid</span></font><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman"'><o:p></o:p></span></font></p>

</div>

<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>Greetings,<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>I am working with Squid 3.4.8 on a Debian 8.2 system.   The
goal is to record all web activity, not block any sites at this time utilizing
squid.  I have followed several different sets of instructions on setting
up Squid to utilize Active Directory Authentication to record who goes
where.   I have yet to be able to access any websites, even internal
sites while passing through the Squid Proxy.   The browser I’m
testing on is Mozilla Firefox 42.0 on a Windows 7 Professional system.  I
am using Firefox for testing as I can set the proxy without affecting my other
browsers on my workstation.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>I have tried various different forms of the squid.conf file, found from
various sources and I have yet to get a successful connection.  Depending
on the file configuration I use, I am getting an “access denied”
page from the squid server, or a “Problem loading page:  The
connection was reset” error.   With the current squid.conf,
which brings up the second error, nothing is recorded in the access.log file,
and the cache.log file keeps reporting the following error:<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>WARNING:  memberof #Hlpr0 exited<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>FATAL:  The memberof helpers are crashing too rapidly, need help!<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>I feel like I’m banging my head against the wall at this
point.   I have tried slowly building the squid.conf file, adding one
authenticator program at a time until I got some sort of different response and
I have not been able to get anything to work.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>I have attached several different squid.conf files that I have
used.  The current “Squid.conf” file generates the
“Connection was reset” error message, while the squid.conf.bk5 file
just gives me an access is denied message.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>Please help!<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>Thank you,<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>Dan Olson<o:p></o:p></span></font></p>

<p class=MsoNormal><st1:place w:st="on"><st1:PlaceName w:st="on"><b><font
  size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt;font-weight:
  bold'>Indian</span></font></b></st1:PlaceName><b><span lang=EN-US
 style='font-weight:bold'> <st1:PlaceName w:st="on">Health</st1:PlaceName> <st1:PlaceName
 w:st="on">Care</st1:PlaceName> <st1:PlaceName w:st="on">Resource</st1:PlaceName>
 <st1:PlaceType w:st="on">Center</st1:PlaceType></span></b></st1:place><b><span
lang=EN-US style='font-weight:bold'><o:p></o:p></span></b></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>Network Support Specialist<o:p></o:p></span></font></p>

<p class=MsoNormal><st1:place w:st="on"><font size=2 face=Calibri><span
 lang=EN-US style='font-size:11.0pt'>Main</span></font></st1:place><span
lang=EN-US>: 918.588.1900 Ext. 2212<o:p></o:p></span></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'>Direct: 918.382.1212<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><a href="http://www.ihcrc.org"><font color=blue><span style='color:
blue'>www.ihcrc.org</span></font></a><o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:
11.0pt'><o:p> </o:p></span></font></p>

</div>

</div>

</body>

</html>