Debian :: Winbind Error After Reboot On Proxy Squid With Ntlm_auth
Oct 18, 2010
I'm running a squid server on debian lenny with ntlm_auth.
Everything is working good after following those two tutorials : [url] and [url]
As all was working perfectly i decided to rebbot my server, and after reboot the ntlm-auth was not working anymore.
When i tried to run the command "wbinfo" with many options i had this error message "error looking up domain users" or"error looking up domain group" so i think that the problem deals with winbind module.
I know that proxy user needs rights and that after reboot the rights are reseted, so this problem doesn't come from here.
And when i try to open IE with a client i have this "cache accesss denied" because the ntlm_auth wasn't done.
I tried to restart all services (samba,winbind,squid) without any success, only the "kinit" command is still working...
What is going on with winbind when the server is rebooted ?
today there was problem with isp but we fix it now other machine run internet fine but when we run through squid proxy machine it give this message to all users. what fields column values config i should check it. i also reset the cache make empty folder. restart machine also service clear the logs . it is on centos 5.4
see below message
ERROR: The requested URL could not be retrieved While trying to retrieve the URL: [URL] The following error was encountered: Read Error
The system returned:
(104) Connection reset by peerAn error condition occurred while reading data from the network. Please retry your request. Your cache administrator is root.
I need to setup a squid 3 proxy with https bumping. Unfortunately I'm not very familiar with squid and https in general.
I already perfomed the following steps:
1.) compile from source
Code: Select all./configure --with-openssl --enable-ssl-crtd make make install
2.) configuration (http) I used this guide: [URL]
3.) configuration (https) [URL]
The server is now working for http and https, but is the server secure, too? Is the default config already secure or do I need to configure additional security features? (e.g. things like cert validation, cert pinning, [dont know what's importend], ...)
I am using Squid Server from last 5years. There is a site "http://www.firstflight.net", which was accessible before few days but now I am unable to access this site. If I use IE8 then getting below error:
"Internet Explorer cannot display the webpage"
Or using Google chrome getting error:
"This webpage is not available The webpage at http://www.firstflight.net/ might be temporarily down or it may have moved permanently to a new web address. Error 330 (net::ERR_CONTENT_DECODING_FAILED): Unknown error."
I would like to ask some help and tutorial for setting up and how to configure squid proxy server in my (Home PC Server). I am a newbie in Linux Centos. I already installed in my system the CentOS 5.5 . Now, I want to configure it as my internet server, all of my 4 system running in Windows including the laptop I want to connect through my CentOS pc with username authentication. I assign all IP address by static. see tthe attachement in my set up. [url] I just want to know what I need to change and add in my squid config file. And how can I configure properly my CentOS with 2 LAN card as internet server.
Currently my DHCP Server is working now what i want to have is auto detection of squid proxy in any browser but I still got an error in my dhcp server when I restart it.
My Config:
# DHCP configuration generated by Firestarter ddns-update-style interim; ignore client-updates;
i want to setup squid proxy server at my home. my service provider has ISA server install on its machine. in windows as a client we have to enter proxy settings manually to IE and firefox. but now in squid where i have to define to use this proxy settings. and what about /etc/resolv.conf . my service provider's connection settings are stated as under.:
IP ADDR= 192.168.1.x subnet mask=255.255.255.0 Proxy= 192.168.1.1 port= 8080
I am using squid to controlling access to the internet all is working fine expect one of the user who is using outside organization portal to connect internet. But whenever he tries to enter in the portal by typing (EXAMPLE)url. Permission denied error from squid occur.
How can i allow this portal in squid. So squid will allow this to access.
I have a NAS which I've re-installed with DEBAIN. Mostly its all working great but when I tell it to ping a NetBIOS name it takes 10 seconds per attempt rather than 1. Despite this it actually resolves the NetBIOS names very quickly (the first line from the ping including the IP address appears almost instantly) it just sits there for 10 secs every ping.
# ping -c3 qnap PING qnap (192.168.1.100) 56(84) bytes of data. 64 bytes from 192.168.1.100: icmp_seq=1 ttl=64 time=0.175 ms 64 bytes from 192.168.1.100: icmp_seq=2 ttl=64 time=0.167 ms 64 bytes from 192.168.1.100: icmp_seq=3 ttl=64 time=0.158 ms
--- qnap ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 20036ms rtt min/avg/max/mdev = 0.158/0.166/0.175/0.016 ms # # ping -c 3 [URL] PING www.l.google.com (173.194.36.104) 56(84) bytes of data. 64 bytes from lhr14s01-in-f104.1e100.net (173.194.36.104): icmp_seq=1 ttl=49 time=40.3 ms 64 bytes from lhr14s01-in-f104.1e100.net (173.194.36.104): icmp_seq=2 ttl=49 time=25.4 ms 64 bytes from lhr14s01-in-f104.1e100.net (173.194.36.104): icmp_seq=3 ttl=49 time=25.7 ms --- www.l.google.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2022ms rtt min/avg/max/mdev = 25.491/30.518/40.313/6.926 ms
I'm really struggling to track down what may be causing this as it is strictly when resolving NetBIOS names yet it finds the IP immediately.
I have to use squid proxy server on fedora14 to develop the application/ software based on the Proxy sever analysing and count number of user and downloaded file size... .My main problems are, I'm not able to configure the access.log file in "Common Logfile Format" and how to develop the application
we having more than 5000 users and will have 7 squid proxy servers with high end configuration upto 4gb ram n 320*5 HD in rhel4&5 most of them complaining that at peak hours their browsing speed is slow but we are having 1gbpgs link at peak hours i.e when established connections r flowing more than 550 browsing gets slow how to do fine tuning are squid is only responsible to access upto 600 connections
I'm trying to set up squid proxy as a replacement for a cgiproxy perl script.I would like to be able to hit it with a url, and have it pass everything back to the browser, something like URL... much the same way the cgiproxy script works.
This is my first time messing with squid, and I am completely lost. Does anyone have a link to some very detailed step by step instructions on how to do this?Can someone please tell me *which* kind of proxy I'm looking for? I see "interception proxy" or "transparent proxy" and a bunch of other terms thrown around in the docs, but nothing I have seen tells me which of those I'm actually looking for, or if what I'm trying to do is even possible with squid.
I have 4 servers running squid/3.1.1 proxy server. Since the latest version I can no longer FTP. I have posted this problem in multiple places but have received almost no response. I've found several other post to this problem throughout the Internet which have also gone unanswered. So, once again, I thought I'd give it a try. As I said "I have 4 servers running the newest version of Squid". When I try to access an ftp, any ftp, I receive an error (check attached image). This was never a problem until just recently. Squid should work perfectly find with ftp, it is not a strictly http proxy.
I turned my firewall off just to make sure, still had the same issue. If I jump directly on the server itself with no proxy settings set in the browser it will work fine. As soon as I set the browser setting to access the Squid software I get the same error. I've included my squid config (which is unchanged from the default settings), maybe somebody better versed than myself can point out an obvious flaw. Everything else seem to work just fine, it's only FTP that's a problem.
I have a reverse proxy set up with squid. I'm going to try and explain what it's doing and I apologize for it being confusing, I'll do the best I can to describe my problem. First, it's for our phone system. We run a ShoreTel Voip system. The owner has decided he wants me to setup MCM (Mobile Call Manager), which from what I can see is an under developed, and almost impossible to get help with Shoretel software. But he's convinced he needs it for his Iphone. It's supposed to, in a nutshell, turn his Iphone into his work phone with all the advantages and doodads that come with it. Apparently, "they have an app for that". On the server side, I need to setup a reverse proxy back into the network on our phone server. Simple enough, I did this with squid. I used the following lines:
always_direct allow all It most definitely is allowing traffic back to the phone server, the problem is, it hands out my internal server address to the outside client. So for instance, if I connect to the outside routable address with my phone, it will immediately change the url to http://172.17.137.7 which is the inside nat address of my phone server. Which of course doesn't work, since I couldn't browse to that address from the outside. It does however work from the inside of the network, obviously because 172.17.137.7 is accessible from the inside.
I am trying to set up squid to make switching proxies easier. I have a laptop which I use at work and at home. At work, I need to connect to the internet via a authenticated proxy. At home, I connect directly to via mobile broadband. So I end up switching proxy settings twice daily, which is just irritating! To solve this I want to set up a system whereby I never have to worry about a proxy - my browser sees a direct internet connection which squid (on my computer) intercepts and forwards either to the mobile broadband connection or to the work proxy (along with the required authentication) depending on which is available. I've read various articles on how to do clever things with iptables and squid, but I don't understand enough of the networking jargon or concepts to know when I need to change to make it work in my situation, or if it is even possible.
I need to block some of my sites with SQUID Proxy. I added following lines to my SQUID configuration file but still the site remains unblocked.How to block it?
I have set up squid3 and dhcp server on my Ubuntu 10.04 box with IP address of 192.168.0.160. Single network card.Squid runs on port 3148. Everything works fine for the users provided that I set up the proxy details manually on each client pc.I want to set up the Squid to run as a transparent proxy and after reading around I have done the following.In the Squid3 conf file I have entered http_port 3148 transparent.Dropping to Root ( sudo -i )However the transparent proxy does not work and if I enter iptables -L I can see that the rule above has not been retained. The default rules in iptables only show up.
We have two offices suppose A and B. At office A, we use centos 5.3 computer as router and squid proxy server. At office B we use a cisco router to connect to Internet. Computers at office A that has direct access to Internet can access computers behind cisco router at office B using vnc viewer. But computers at office A that can use internet only through squid proxy can't access computers behind cisco router at office B. Is there any way so that I could allow squid clients to access computer behind cisco router at office B using vnc viewer.
How to make squid proxy transparent?I have configured a Squid proxy server with some ACLs but we have to check from client side whether those ACLs work or not ,I have to open their firefox and manually enter my machine's i.e. proxy server's ip, only after entering this ip , Those ACLs work properly.But now I want to make it work without manually entering the proxy on clients machine.I guess transparent proxy is the solution, but how to configure it/Please guide me and I am one of the machine in LAN.
