<font size=2 face="sans-serif">Hello Antony;</font>
<br><font size=2 face="sans-serif">we have Squid 3.5 on Windows 2012 R2
OS & for which I need to integrate squid with AD. I search online but
all of the link are based on linux platform squid.</font>
<br><font size=2 face="sans-serif">I am looking for squid running on Windows
Platform which need to integrate with AD authentication.</font>
<br>
<br><font size=2 face="sans-serif">Thanks & Regards<br>
Nilesh Suresh Gavali<br>
</font>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">squid-users-request@lists.squid-cache.org</font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">squid-users@lists.squid-cache.org</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">12/05/2016 17:33</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">squid-users
Digest, Vol 21, Issue 54</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Sent by:
</font><font size=1 face="sans-serif">"squid-users"
<squid-users-bounces@lists.squid-cache.org></font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>Send squid-users mailing list submissions to<br>
squid-users@lists.squid-cache.org<br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
</font></tt><a href="http://lists.squid-cache.org/listinfo/squid-users"><tt><font size=2>http://lists.squid-cache.org/listinfo/squid-users</font></tt></a><tt><font size=2><br>
or, via email, send a message with subject or body 'help' to<br>
squid-users-request@lists.squid-cache.org<br>
<br>
You can reach the person managing the list at<br>
squid-users-owner@lists.squid-cache.org<br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of squid-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Problems configuring Squid with C-ICAP+Squidclamav<br>
(SOLVED) (Amos Jeffries)<br>
2. Re: Linking with *SSL (Spil Oss)<br>
3. Re: Getting the full file content on a range request,
but not<br>
on EVERY get ... (Hans-Peter Jansen)<br>
4. Windows Squid with AD authentication (Nilesh Gavali)<br>
5. Re: Getting the full file content on a range request, but not<br>
on EVERY get ... (Heiler Bemerguy)<br>
6. Re: Windows Squid with AD authentication (Antony Stone)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 13 May 2016 00:00:05 +1200<br>
From: Amos Jeffries <squid3@treenet.co.nz><br>
To: squid-users@lists.squid-cache.org<br>
Subject: Re: [squid-users] Problems configuring Squid with<br>
C-ICAP+Squidclamav (SOLVED)<br>
Message-ID: <dc535419-e24f-b6ee-00ac-45970ec67304@treenet.co.nz><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
On 12/05/2016 11:13 p.m., C. L. Martinez wrote:<br>
> <br>
> But when squid sents an OPTIONS request to ICAP, why works when I
use 127.0.0.1 and not localhost?? Maybe it is a problem with openbsd's
package ...<br>
> <br>
<br>
It is quite possible. 127.0.0.1 is not the only address modern computers<br>
use for localhost. Double check what your hosts file contains.<br>
<br>
Amos<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Thu, 12 May 2016 15:33:30 +0200<br>
From: Spil Oss <spil.oss@gmail.com><br>
To: squid-users@lists.squid-cache.org, timp87@gmail.com<br>
Subject: Re: [squid-users] Linking with *SSL<br>
Message-ID:<br>
<CAEJyAvM8O6uVCgSipvzXAK1OsUrH3izc7BVTgaS0kPkWmAn3BQ@mail.gmail.com><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
> Hi!<br>
> When we worked on squid port on FreeBSD one of the FreeBSD user<br>
> (Bernard Spil) noticed:<br>
><br>
> When working on this, I ran into another issue. Perhaps maintainer
can<br>
> fix that with upstream. I've now added LIBOPENSSL_LIBS="-lcrypto<br>
> -lssl" because of configure failing in configure.ac line 1348.<br>
><br>
> > AC_CHECK_LIB(ssl,[SSL_library_init],[LIBOPENSSL_LIBS="-lssl
$LIBOPENSSL_LIBS"],[AC_MSG_ERROR([library 'ssl' is required for OpenSSL])<br>
><br>
> You cannot link against libssl when not linking libcrypto as well<br>
> leading to an error with LibreSSL. This check should add -lcrypto
in<br>
> addition to -lssl to pass.<br>
><br>
> Is this something someone could take a look at?<br>
<br>
Hi All,<br>
<br>
Sorry for replying out-of-thread.<br>
<br>
What happens is that the check for SSL_library_init fails as -lcrypto<br>
is missing.<br>
<br>
Output from configure<br>
<br>
> checking for CRYPTO_new_ex_data in -lcrypto... yes<br>
> checking for SSL_library_init in -lssl... no<br>
> configure: error: library 'ssl' is required for OpenSSL<br>
> ===> Script "configure" failed unexpectedly.<br>
<br>
What I usually see in autoconf scripts is that temp CFLAGS etc are set<br>
before the test for SSL libs and reversed after the test.<br>
<br>
Adding LIBOPENSSL_LIBS="-lcrypto -lssl" to configure works as
well<br>
<br>
Would be great if you can fix this!<br>
<br>
Thanks,<br>
<br>
Bernard Spil.<br>
</font></tt><a href=https://wiki.freebsd.org/BernardSpil><tt><font size=2>https://wiki.freebsd.org/BernardSpil</font></tt></a><tt><font size=2><br>
</font></tt><a href=https://wiki.freebsd.org/LibreSSL><tt><font size=2>https://wiki.freebsd.org/LibreSSL</font></tt></a><tt><font size=2><br>
</font></tt><a href=https://wiki.freebsd.org/OpenSSL><tt><font size=2>https://wiki.freebsd.org/OpenSSL</font></tt></a><tt><font size=2><br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Thu, 12 May 2016 16:06:40 +0200<br>
From: Hans-Peter Jansen <hpj@urpla.net><br>
To: squid-users@lists.squid-cache.org<br>
Subject: Re: [squid-users] Getting the full file content on a range<br>
request,
but not on EVERY get ...<br>
Message-ID: <2575073.4c7f0552JP@xrated><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
On Mittwoch, 11. Mai 2016 21:37:17 Heiler Bemerguy wrote:<br>
> Hey guys,<br>
> <br>
> First take a look at the log:<br>
> <br>
> root@proxy:/var/log/squid# tail -f access.log |grep<br>
> </font></tt><a href="http://download.cdn.mozilla.net/pub/firefox/releases/45.0.1/update/win32/pt-"><tt><font size=2>http://download.cdn.mozilla.net/pub/firefox/releases/45.0.1/update/win32/pt-</font></tt></a><tt><font size=2>>
BR/firefox-45.0.1.complete.mar 1463011781.572 8776 10.1.3.236 TCP_MISS/206<br>
> 300520 GET<br>
[...] <br>
> Now think: An user is just doing a segmented/ranged download, right?<br>
> Squid won't cache the file because it is a range-download, not a full<br>
> file download.<br>
> But I WANT squid to cache it. So I decide to use "range_offset_limit<br>
> -1", but then on every GET squid will re-download the file from
the<br>
> beginning, opening LOTs of simultaneous connections and using too
much<br>
> bandwidth, doing just the OPPOSITE it's meant to!<br>
> <br>
> Is there a smart way to allow squid to download it from the beginning
to<br>
> the end (to actually cache it), but only on the FIRST request/get?
Even<br>
> if it makes the user wait for the full download, or cancel it<br>
> temporarily, or.. whatever!! Anything!!<br>
<br>
Well, this is exactly, what my squid_dedup helper was created for!<br>
<br>
See my announcement: <br>
<br>
Subject: [squid-users] New StoreID helper: squid_dedup<br>
Date: Mon, 09 May 2016 23:56:45 +0200<br>
<br>
My openSUSE environment is fetching _all_ updates with byte-ranges from
many <br>
servers. Therefor, I created squid_dedup.<br>
<br>
Your specific config could look like this:<br>
<br>
/etc/squid/dedup/mozilla.conf:<br>
[mozilla]<br>
match: http\:\/\/download\.cdn\.mozilla\.net/(.*)<br>
replace: </font></tt><a href=http://download.cdn.mozilla.net.%(intdomain)s//1><tt><font size=2>http://download.cdn.mozilla.net.%(intdomain)s/\1</font></tt></a><tt><font size=2><br>
fetch: true<br>
<br>
The fetch parameter is unique among the other StoreID helper (AFAIK): it
is <br>
fetching the object after a certain delay with a pool of fetcher threads.<br>
<br>
The idea is: after the first access for an object, wait a bit (global setting,
<br>
default: 15 secs), and then fetch the whole thing once. It won't solve
<br>
anything for the first client, but for all subsequent accesses. <br>
<br>
The fetcher avoids fetching anything more than once by checking the http
<br>
headers.<br>
<br>
This is a pretty new project, but be assured, that the basic functions
are <br>
working fine, and I will do my best to solve any upcoming issues. It is
<br>
implemented with Python3 and prepared for supporting additional features
<br>
easily, while keeping a good part of an eye on efficiency.<br>
<br>
Let me know, if you're going to try it.<br>
<br>
Pete<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Thu, 12 May 2016 17:46:36 +0100<br>
From: Nilesh Gavali <nilesh.gavali@tcs.com><br>
To: squid-users@lists.squid-cache.org<br>
Subject: [squid-users] Windows Squid with AD authentication<br>
Message-ID:<br>
<OFC3392A46.462F0184-ON80257FB1.00598D57-80257FB1.0059AB8F@tcs.com><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Team;<br>
we have squid running on Windows and need to integrate it with Windows
AD <br>
.can anyone help me with steps to be perform to get this done.<br>
<br>
Thanks & Regards<br>
Nilesh Suresh Gavali<br>
=====-----=====-----=====<br>
Notice: The information contained in this e-mail<br>
message and/or attachments to it may contain <br>
confidential or privileged information. If you are <br>
not the intended recipient, any dissemination, use, <br>
review, distribution, printing or copying of the <br>
information contained in this e-mail message <br>
and/or attachments to it are strictly prohibited. If <br>
you have received this communication in error, <br>
please notify us by reply e-mail or telephone and <br>
immediately and permanently delete the message <br>
and any attachments. Thank you<br>
<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <</font></tt><a href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20160512/327a38cb/attachment-0001.html"><tt><font size=2>http://lists.squid-cache.org/pipermail/squid-users/attachments/20160512/327a38cb/attachment-0001.html</font></tt></a><tt><font size=2>><br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Thu, 12 May 2016 13:28:00 -0300<br>
From: Heiler Bemerguy <heiler.bemerguy@cinbesa.com.br><br>
To: squid-users@lists.squid-cache.org<br>
Subject: Re: [squid-users] Getting the full file content on a range<br>
request, but not on EVERY get ...<br>
Message-ID: <61bf3ff3-c8b2-647f-9b5e-3112b2f43d6c@cinbesa.com.br><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
<br>
Hi Pete, thanks for replying... let me see if I got it right..<br>
<br>
Will I need to specify every url/domain I want it to act on ? I want <br>
squid to do it for every range-request downloads that should/would be <br>
cached (based on other rules, pattern_refreshs etc)<br>
<br>
It doesn't need to delay any downloads as long as it isn't a dupe of <br>
what's already being downloaded.....<br>
<br>
<br>
Best Regards,<br>
<br>
<br>
-- <br>
Heiler Bemerguy - (91) 98151-4894<br>
Assessor Técnico - CINBESA (91) 3184-1751<br>
<br>
<br>
Em 12/05/2016 11:06, Hans-Peter Jansen escreveu:<br>
> On Mittwoch, 11. Mai 2016 21:37:17 Heiler Bemerguy wrote:<br>
>> Hey guys,<br>
>><br>
>> First take a look at the log:<br>
>><br>
>> root@proxy:/var/log/squid# tail -f access.log |grep<br>
>> </font></tt><a href="http://download.cdn.mozilla.net/pub/firefox/releases/45.0.1/update/win32/pt-"><tt><font size=2>http://download.cdn.mozilla.net/pub/firefox/releases/45.0.1/update/win32/pt-</font></tt></a><tt><font size=2>>
BR/firefox-45.0.1.complete.mar 1463011781.572 8776 10.1.3.236 TCP_MISS/206<br>
>> 300520 GET<br>
> [...]<br>
>> Now think: An user is just doing a segmented/ranged download,
right?<br>
>> Squid won't cache the file because it is a range-download, not
a full<br>
>> file download.<br>
>> But I WANT squid to cache it. So I decide to use "range_offset_limit<br>
>> -1", but then on every GET squid will re-download the file
from the<br>
>> beginning, opening LOTs of simultaneous connections and using
too much<br>
>> bandwidth, doing just the OPPOSITE it's meant to!<br>
>><br>
>> Is there a smart way to allow squid to download it from the beginning
to<br>
>> the end (to actually cache it), but only on the FIRST request/get?
Even<br>
>> if it makes the user wait for the full download, or cancel it<br>
>> temporarily, or.. whatever!! Anything!!<br>
> Well, this is exactly, what my squid_dedup helper was created for!<br>
><br>
> See my announcement:<br>
><br>
> Subject:
[squid-users] New StoreID helper: squid_dedup<br>
> Date:
Mon, 09 May 2016 23:56:45 +0200<br>
><br>
> My openSUSE environment is fetching _all_ updates with byte-ranges
from many<br>
> servers. Therefor, I created squid_dedup.<br>
><br>
> Your specific config could look like this:<br>
><br>
> /etc/squid/dedup/mozilla.conf:<br>
> [mozilla]<br>
> match: http\:\/\/download\.cdn\.mozilla\.net/(.*)<br>
> replace: </font></tt><a href=http://download.cdn.mozilla.net.%(intdomain)s//1><tt><font size=2>http://download.cdn.mozilla.net.%(intdomain)s/\1</font></tt></a><tt><font size=2><br>
> fetch: true<br>
><br>
> The fetch parameter is unique among the other StoreID helper (AFAIK):
it is<br>
> fetching the object after a certain delay with a pool of fetcher threads.<br>
><br>
> The idea is: after the first access for an object, wait a bit (global
setting,<br>
> default: 15 secs), and then fetch the whole thing once. It won't solve<br>
> anything for the first client, but for all subsequent accesses.<br>
><br>
> The fetcher avoids fetching anything more than once by checking the
http<br>
> headers.<br>
><br>
> This is a pretty new project, but be assured, that the basic functions
are<br>
> working fine, and I will do my best to solve any upcoming issues.
It is<br>
> implemented with Python3 and prepared for supporting additional features<br>
> easily, while keeping a good part of an eye on efficiency.<br>
><br>
> Let me know, if you're going to try it.<br>
><br>
> Pete<br>
> _______________________________________________<br>
> squid-users mailing list<br>
> squid-users@lists.squid-cache.org<br>
> </font></tt><a href="http://lists.squid-cache.org/listinfo/squid-users"><tt><font size=2>http://lists.squid-cache.org/listinfo/squid-users</font></tt></a><tt><font size=2><br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <</font></tt><a href="http://lists.squid-cache.org/pipermail/squid-users/attachments/20160512/44b7d9df/attachment-0001.html"><tt><font size=2>http://lists.squid-cache.org/pipermail/squid-users/attachments/20160512/44b7d9df/attachment-0001.html</font></tt></a><tt><font size=2>><br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Thu, 12 May 2016 18:34:08 +0200<br>
From: Antony Stone <Antony.Stone@squid.open.source.it><br>
To: squid-users@lists.squid-cache.org<br>
Subject: Re: [squid-users] Windows Squid with AD authentication<br>
Message-ID: <201605121834.08490.Antony.Stone@squid.open.source.it><br>
Content-Type: Text/Plain; charset="iso-8859-15"<br>
<br>
On Thursday 12 May 2016 at 18:46:36, Nilesh Gavali wrote:<br>
<br>
> Team;<br>
> we have squid running on Windows and need to integrate it with Windows
AD<br>
> .can anyone help me with steps to be perform to get this done.<br>
<br>
This specific question has appeared a few times on this list only recently.<br>
<br>
Have you so far:<br>
<br>
- searched the list archives for likely answers to your question?<br>
<br>
</font></tt><a href="http://lists.squid-cache.org/pipermail/squid-users/"><tt><font size=2>http://lists.squid-cache.org/pipermail/squid-users/</font></tt></a><tt><font size=2><br>
<br>
- consulted the Squid documentation for guidance?<br>
<br>
</font></tt><a href="http://www.squid-cache.org/Doc/"><tt><font size=2>http://www.squid-cache.org/Doc/</font></tt></a><tt><font size=2><br>
<br>
- looked for any independent HOWTOs etc which show how people have done
this <br>
in the past?<br>
<br>
</font></tt><a href="http://www.google.com/search?q=squid+active+directory+authentication"><tt><font size=2>http://www.google.com/search?q=squid+active+directory+authentication</font></tt></a><tt><font size=2><br>
<br>
<br>
Here's some friendly advice:<br>
<br>
1. The more information you give us (such as: which version of Squid are
you <br>
using, which version of Windows are you running under, which form of <br>
authentication are you using?), the easier it is for people here to help.<br>
<br>
2. If you have tried something already and run into problems, tell us what
you <br>
have tried and what problems (log file extracts, complete client error
message, <br>
etc) you encountered, so we can offer specific suggestions.<br>
<br>
3. If you haven't yet tried to implement anything, at least let us know
what <br>
documentation you have looked up and what problems you encountered when
<br>
following it, so we can try to fill in the gaps.<br>
<br>
<br>
Regards,<br>
<br>
<br>
Antony.<br>
<br>
-- <br>
Most people have more than the average number of legs.<br>
<br>
Please reply to the list;<br>
please *don't* CC me.<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
squid-users@lists.squid-cache.org<br>
</font></tt><a href="http://lists.squid-cache.org/listinfo/squid-users"><tt><font size=2>http://lists.squid-cache.org/listinfo/squid-users</font></tt></a><tt><font size=2><br>
<br>
<br>
------------------------------<br>
<br>
End of squid-users Digest, Vol 21, Issue 54<br>
*******************************************<br>
</font></tt>
<br>