Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid 3 - Exchange 2013 SP1

    Scheduled Pinned Locked Moved pfSense Packages
    33 Posts 2 Posters 6.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stanthewizard
      last edited by

      Hello

      Huge issue with Exchange 2013 SP1 and the new protocol MAPI over HTTP (in place of RPC over HTTPS)

      Squid has no GUI settings for MAPI and I tried to change the squid_reverse conf manually with no success at all.

      Can someone help me ?

      Thanks

      1 Reply Last reply Reply Quote 0
      • T
        trendchiller
        last edited by

        i already committed a change, just needs to be approved by the core team…

        1 Reply Last reply Reply Quote 0
        • S
          stanthewizard
          last edited by

          Cool

          I changed the conf file without the GUI … and managed to make it worked

          GUI is a welcomed change
          ;D

          1 Reply Last reply Reply Quote 0
          • T
            trendchiller
            last edited by

            did you just add the /mapi uri or didi you change other settings, too ?

            1 Reply Last reply Reply Quote 0
            • S
              stanthewizard
              last edited by

              After digging in my conf
              here is what I did (simpler in fact)

              Simple mapping through GUI with this URI

              mydomainename.com/mapi.*$

              1 Reply Last reply Reply Quote 0
              • T
                trendchiller
                last edited by

                well, that's one thing the gui does, too ;-)
                how did you configure the external auth in exchange 2013 ?
                set negotiate auth on outlook-anywhere ?

                1 Reply Last reply Reply Quote 0
                • T
                  trendchiller
                  last edited by

                  in squid 3.3 (beta) there will be passthru auth implemented (which means you can pass all types of auth to the backend)  :)

                  1 Reply Last reply Reply Quote 0
                  • S
                    stanthewizard
                    last edited by

                    It's negotiate (if I remember correctly)

                    What could be a very (but very) good thing is to easily block the ECP ! (it's not that simple)

                    I'm eagerly awaiting for that new package !

                    1 Reply Last reply Reply Quote 0
                    • S
                      stanthewizard
                      last edited by

                      The package is here !!!  :D

                      1 Reply Last reply Reply Quote 0
                      • T
                        trendchiller
                        last edited by

                        Just to be curious, are you running an exchange dag ?

                        1 Reply Last reply Reply Quote 0
                        • S
                          stanthewizard
                          last edited by

                          Nope it's just for my lab for the moment
                          BUT
                          It's one of my many project …

                          The question about the DAG is because there is only one IP adress in squid RP ?

                          1 Reply Last reply Reply Quote 0
                          • T
                            trendchiller
                            last edited by

                            No,
                            As the reverse ip, just put the dag ip.
                            Just asked bacause of a config question ;-)

                            1 Reply Last reply Reply Quote 0
                            • S
                              stanthewizard
                              last edited by

                              ok

                              I have an issue with the update

                              Jun 7 14:30:49 squid: Bungled /usr/pbi/squid-amd64/etc/squid/squid.conf line 82: cache_peer 192.168.0.4 parent 80 0 proxy-only no-query no-digest originserver login=PASSTHRU round-robinname=rvp_xxx_80

                              Jun 7 14:30:49 php: rc.start_packages: The command '/usr/pbi/squid-amd64/sbin/squid -f /usr/pbi/squid-amd64/etc/squid/squid.conf' returned exit code '1', the output was '2014/06/07 14:30:49| parse_peer: token='round-robinname=rvp_xxx_80' FATAL: Bungled /usr/pbi/squid-amd64/etc/squid/squid.conf line 82: cache_peer 192.168.0.4 parent 80 0 proxy-only no-query no-digest originserver login=PASSTHRU round-robinname=rvp_xxx_80 Squid Cache (Version 3.3.10): Terminated abnormally. CPU Usage: 0.010 seconds = 0.005 user + 0.005 sys Maximum Resident Size: 38032 KB Page faults with physical i/o: 0'

                              1 Reply Last reply Reply Quote 0
                              • T
                                trendchiller
                                last edited by

                                Oh, i see…
                                There's a missing space after round-robin.
                                I'll patch this later this evening ...
                                Sorry ...

                                1 Reply Last reply Reply Quote 0
                                • T
                                  trendchiller
                                  last edited by

                                  patch checked in, should be committed tonight…

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    trendchiller
                                    last edited by

                                    It should now work. The patch is online ;-)

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      stanthewizard
                                      last edited by

                                      It's the 3.3.10 PKG 2.2.5 ?

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        trendchiller
                                        last edited by

                                        Yes

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          stanthewizard
                                          last edited by

                                          maybe a snapchot before to avoid a veeam restore  ;)

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            stanthewizard
                                            last edited by

                                            Done and working  ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.