Package: squid3
Version: 3.1.20-1
Severity: normal

Dear Maintainer,

In authorization process

/var/log/squid3/cache.log:
....
2012/12/03 15:56:04.032| The request GET http://www.qnx.com/ is DENIED, because 
it matched 'AUTH'
2012/12/03 15:56:04.063| ZPH: Preserving TOS on miss, TOS=0
2012/12/03 15:56:04.064| The reply for GET http://www.qnx.com/ is ALLOWED, 
because it matched 'AUTH'
2012/12/03 15:56:04.064| ConnStateData::swanSong: FD 10
--------
2012/12/03 15:56:29.270| authenticateAuthUserAddIp: user 'john' has been seen 
at a new IP address (192.168.66.32:48789)
2012/12/03 15:56:29.270| aclMatchExternal: check_ad_group("john inet") = lookup 
needed
2012/12/03 15:56:29.270| aclMatchExternal: "john inet": entry=@0, age=0
2012/12/03 15:56:29.271| aclMatchExternal: "john inet": queueing a call.
2012/12/03 15:56:29.271| aclMatchExternal: "john inet": return -1.
2012/12/03 15:56:29.271| externalAclLookup: lookup in 'check_ad_group' for 
'john inet'
Connected OK
group filter 
'(&(objectclass=user)(sAMAccountName=john)(memberof=cn=inet,ou=usergroups,dc=nsk,dc=lanta,dc=ru))',
 searchbase 'dc=nsk,dc=lanta,dc=ru'
2012/12/03 15:56:29.275| externalAclHandleReply: reply="OK"
2012/12/03 15:56:29.276| external_acl_cache_add: Adding 'john inet' = 1
2012/12/03 15:56:29.276| aclMatchExternal: check_ad_group = 1
2012/12/03 15:56:29.276| The request GET http://www.qnx.com/ is ALLOWED, 
because it matched 'localnet'
2012/12/03 15:56:29.276| client_side_request.cc(556) clientAccessCheck2: No 
adapted_http_access configuration.
2012/12/03 15:56:29.277| The request GET http://www.qnx.com/ is ALLOWED, 
because it matched 'localnet'
2012/12/03 15:56:29.744| ctx: enter level  0: 'http://www.qnx.com/'
2012/12/03 15:56:29.745| hdr cc: unknown cache-directive: near 'post-check=0, 
pre-check=0' in '0xbfea9114'
2012/12/03 15:56:29.745| hdr cc: unknown cache-directive: near 'pre-check=0' in 
'0xbfea9114'
2012/12/03 15:56:29.745| ctx: exit level  0
2012/12/03 15:56:29.745| ZPH: Preserving TOS on miss, TOS=0
2012/12/03 15:56:29.746| hdr cc: unknown cache-directive: near 'post-check=0, 
pre-check=0' in '0xbfea8e44'
2012/12/03 15:56:29.746| hdr cc: unknown cache-directive: near 'pre-check=0' in 
'0xbfea8e44'
2012/12/03 15:56:32| Starting Squid Cache version 3.1.20 for 
i486-pc-linux-gnu...

/var/log/syslog:
....
Dec  3 15:56:29 squid kernel: [11044.464660] squid3[9204]: segfault at c ip 
b76ad6c6 sp bfea8c20 error 4 in squid3[b74cd000+300000]
Dec  3 15:56:29 squid squid[8726]: Squid Parent: child process 9204 exited due 
to signal 11 with status 0
Dec  3 15:56:32 squid squid[8726]: Squid Parent: child process 9233 started
....


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (90, 'unstable'), (1, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages squid3 depends on:
ii  adduser           3.113+nmu3
ii  libc6             2.13-37
ii  libcap2           1:2.22-1.2
ii  libcomerr2        1.42.5-1
ii  libdb5.1          5.1.29-5
ii  libexpat1         2.1.0-1
ii  libgcc1           1:4.7.2-4
ii  libgssapi-krb5-2  1.10.1+dfsg-3
ii  libk5crypto3      1.10.1+dfsg-3
ii  libkrb5-3         1.10.1+dfsg-3
ii  libldap-2.4-2     2.4.31-1
ii  libltdl7          2.4.2-1.1
ii  libpam0g          1.1.3-7.1
ii  libsasl2-2        2.1.25.dfsg1-6
ii  libstdc++6        4.7.2-4
ii  libxml2           2.8.0+dfsg1-6
ii  logrotate         3.8.1-4
ii  lsb-base          4.1+Debian8
ii  netbase           5.0
ii  squid3-common     3.1.20-1

squid3 recommends no packages.

Versions of packages squid3 suggests:
pn  resolvconf   <none>
pn  smbclient    <none>
pn  squid-cgi    <none>
pn  squidclient  <none>
pn  ufw          <none>

-- Configuration Files:
/etc/squid3/squid.conf changed:
auth_param negotiate program /usr/lib/squid3/squid_kerb_auth -s 
HTTP/squid.nsk.lanta...@nsk.lanta.ru
auth_param negotiate children 10
auth_param negotiate keep_alive off
auth_param basic program /usr/lib/squid3/squid_ldap_auth -R \
        -b "dc=nsk,dc=lanta,dc=ru" \
        -D sq...@nsk.lanta.ru \
        -W /etc/squid3/squid-user \
        -f "sAMAccountName=%s" \
        -h domain3.nsk.lanta.ru
auth_param basic children 10
auth_param basic realm Proxy Authentication
auth_param basic credentialsttl 2 hours
external_acl_type check_ad_group ttl=1200 %LOGIN 
/usr/lib/squid3/squid_ldap_group -R -K -d \
        -b "dc=nsk,dc=lanta,dc=ru" \
        -D sq...@nsk.lanta.ru \
        -W /etc/squid3/squid-user \
        -f 
"(&(objectclass=user)(sAMAccountName=%v)(memberof=cn=%a,ou=usergroups,dc=nsk,dc=lanta,dc=ru))"
 \
        -h domain3.nsk.lanta.ru
acl AUTH proxy_auth REQUIRED
acl inet_access external check_ad_group inet
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow AUTH inet_access localnet
http_access deny all
http_port 3128
debug_options ALL,2
coredump_dir /var/spool/squid3
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320


-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to