|
Squid Cache v3.3.3 included in cygwin was ./configured with:
$ ./squid -v Squid Cache: Version 3.3.3 '--srcdir=/usr/src/ports/squid/squid-3.3.3-2.i686/src/squid-3.3.3' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--libexecdir=/usr/libexec' '--datadir=/usr/share' '--localstatedir=/var' '--sysconfdir=/etc' '--libdir=/usr/lib' '--datarootdir=/usr/share' '--docdir=/usr/share/doc/squid' '--htmldir=/usr/share/doc/squid/html' '-C' '--sysconfdir=/etc/squid' '--datadir=/usr/share/squid' '--libexecdir=/usr/lib/squid' '--disable-strict-error-checking' '--with-logdir=/var/log/squid' '--with-swapdir=/var/cache/squid' '--with-pidfile=/var/run/squid.pid' '--enable-ssl' '--enable-esi' '--enable-disk-io=AIO,Blocking,DiskThreads,IpcIo,Mmapped' '--enable-auth-basic=DB,LDAP,MSNT,MSNT-multi-domain,NCSA,POP3,RADIUS,SASL,SMB,fake,getpwnam' '--enable-auth-ntlm=fake,smb_lm' '--enable-auth-negotiate=kerberos,wrapper' '--enable-external-acl-helpers=LDAP_group,SQL_session,eDirectory_userip,file_userip,kerberos_ldap_group,session,time_quota,unix_group,wbinfo_group' '--with-filedescriptors=3072' 'CC=gcc' 'CFLAGS=-ggdb -O2 -pipe -Wimplicit-function-declaration -fdebug-prefix-map=/usr/src/ports/squid/squid-3.3.3-2.i686/build=/usr/src/debug/squid-3.3.3-2 -fdebug-prefix-map=/usr/src/ports/squid/squid-3.3.3-2.i686/src/squid-3.3.3=/usr/src/debug/squid-3.3.3-2' 'LDFLAGS=' 'LIBS=' 'CPPFLAGS=' 'CXX=g++' 'CXXFLAGS=-ggdb -O2 -pipe -fdebug-prefix-map=/usr/src/ports/squid/squid-3.3.3-2.i686/build=/usr/src/debug/squid-3.3.3-2 -fdebug-prefix-map=/usr/src/ports/squid/squid-3.3.3-2.i686/src/squid-3.3.3=/usr/src/debug/squid-3.3.3-2' Running squid -X log is here: http://pastebin.com/7f5U4k9W From: mirza.dedic@xxxxxxxxxxx To: squid3@xxxxxxxxxxxxx; squid-users@xxxxxxxxxxxxxxxxxxxxx Date: Wed, 8 Oct 2014 08:19:29 -0700 Subject: Re: Squid 2.7 STABLE8 (Win2008) can't get my MS Lync 2013 to work? Thanks Amos,
It seems I spoke too fast, the proxy prompt is back, so disabling SG didn't do the trick. Two two hits I see in access.log are: 1412778349.755 141 172.16.12.110 TCP_MISS/200 462 POST http://sqm.microsoft.com/sqm/wm/sqmserver.dll - DIRECT/65.55.7.141 - 1412778349.911 515 172.16.12.110 TCP_MISS/200 11695 CONNECT login.microsoftonline.com:443 - DIRECT/157.55.208.198 - These happen when I restart the Lync program and at the time of the proxy prompt. My config file is here: http://pastebin.com/MSsTWum2 I spent last night trying to mess with cygwin + squid to try and tackle this issue by upgrading to a more supported squid, I see there is a 3.3.3 published in their repository; I got this working at home (squid starts) on Windows 7 machine however getting errors trying to start the same cygwin setup on my win2003 remote server, getting.. 2014/10/08 08:12:56| aclIpParseIpData: Bad host/IP: '::1' in '::1', flags=0 : (8) Name or service not known FATAL: Bungled Default Configuration line 11: acl localhost src 127.0.0.1/32 ::1 Squid Cache (Version 3.3.3): Terminated abnormally. My cygwin squid.conf is similar to 2.7, except a few changes.. http://pastebin.com/BrCG8yHL I am confused because no where is acl loclahost src defined in my config, and I tried starting squid with -f to make sure I am reading in the correct squid.conf file. Figured i'd try the cygwin+squid route to get a more supported version going, but I am having issues starting it in my Win2003 box (the box has multiple network cards, so don't know if that has anything to do with it?). > Date: Wed, 8 Oct 2014 19:35:25 +1300 > From: squid3@xxxxxxxxxxxxx > To: squid-users@xxxxxxxxxxxxxxxxxxxxx > Subject: Re: Squid 2.7 STABLE8 (Win2008) can't get my MS Lync 2013 to work? > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 8/10/2014 12:17 p.m., Mirza Dedic wrote: > > Hi Eliezer, > > > > After I commented out the SquidGuard part of the config and > > restarted squid I restart my Lync 2013 client and it connects > > without a proxy prompt, in the log I still see the " 1412723608.354 > > 485 172.16.12.110 TCP_MISS/200 11695 CONNECT > > login.microsoftonline.com:443 - DIRECT/65.52.244.66 -" but no > > proxy on the client's side. > > > > So, something in SquidGuard must be causing this?? > > Yes several things. Basically SG does not contain all of the hacks and > disablings necessary to cope with demands NTLM places on HTTP proxies. > Which is reasonable since its design goal is to filter HTTP traffic. > > > > > I did not want to uncomment the NTLM because we use this to provide > > seamless authentication for the clients, if we only allow basic it > > will prompt for user/pass won't it? > > > > We use SquidGuard as it has a pre-defined list of blocked sites, so > > it was a quick way to add a set of blocked sites.. but this whole > > setup is old I don't even know where the win32 binaries came from > > for squidguard.. > > In which case there should be no need for you to have SG at all. > > The popular blocklist/blacklist sources for SG also provide Squid > format downloads of the same lists, or converters are easily written. > https://www.google.com/search?q=squid+blacklist > > > > > > You mentioned a 3.x being developed for Windows, is this internal > > only or somewhere I can follow the progress? > > I am the one driving that effort at present. It is a side hobby on my > overall goal of feature parity between Squid-2 and Squid-3 - keeping > Squid building and running on any OS Squid-2 was useful for. > > The official state of Squid on Windows is documented in here: > http://wiki.squid-cache.org/KnowledgeBase/Windows > the newest bits are down under "Porting Efforts" for now. > > Changes as they are found are being applied directly on the mainstream > 3.HEAD version. So the regular 3.HEAD ChangeLog and bugzilla are used > to track minor changes and issues. > > Summary: > So far I have MinGW-w64 executables of Squid-3.5 that produce "Error > 127". yay!. Any assistance figuring out what I have done wrong to get > that is welcome. So far I think its a missing DLL or wrong .exe > settings going into the compiler. > > Visual Studio 2012 builds are also ongoing, but will not be available > until the Foundation provides an upstream git repository (being planned). > > Personal donations welcome (<http://treenet.co.nz/projects/squid/>), > but due to the above error 127 I am disinclined to accept contracts > with anything like a deadline. > > Amos > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.22 (MingW32) > > iQEcBAEBAgAGBQJUNNstAAoJELJo5wb/XPRjN6IH/AhZf3+k0YizpxjmoyYh0E4/ > AgbJ+fCtA/tvObKPN862xKQ/TCLnV9uOT/SFClf9Occ8fqJZex0ViNnIJiSrLaS7 > 7SP4/C58D4T8FV1331HZmh36q38ui+bHTVvRWDjz4J0CC9/pmKCI5nVvLW8KbjYC > T0ZhOBU2L7VZ3zUhwTsKKD0UfroMzRyzcipmRMysNXpfG/5unZb4XLfk/AQdWRqo > zpXV6vA7uJGQnZO9fnuMOOysG7UqmyydlFWAkwM9XL+7SJC9bCKmPk/T9+CIvRN7 > 31gbNdi3ZfyWSkgI9lp1UmNu1tV/G9CrnsCgDWGCswmEoy14fhvgy1cmYGZ2Wu8= > =vAWZ > -----END PGP SIGNATURE----- > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users |
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
