[squid-users] (13) Permission denied
Dear squid users, I'm new in this list, I'm QRT. I have this problem: When I try to access http://www.xtec.es:8800/usuaris/correuweb/ using squid 2.5 stable11 I receive this error page ERROR The requested URL could not be retrieved -= =3D --- While trying to retrieve the URL: = http://www.xtec.es:8800/usuaris/correuweb/=3D20 The following error was encountered a.. Connection Failed The system returned: (13) Permission denied The remote host or network may be down. Please try the request again Your cache administrator is root. -= --- Generated Wed, 09 Nov 2005 08:31:47 GMT by localhost.localdomain = squid/2.5.STABLE11) If I try to connect to other websites in port 80 it work fine, but the = other ports have the same error i.e. webmin:1, etc.. What can I put in squid.conf file to solve this? Thankyou QRT
Re: [squid-users] Urgent Samba / Squid NTLM Auth Problems
Dear sir I did all of your recommanded from document step by step I succeeded to joined to the domain and active directory , i can see the domain users and groups kinit command works properly, net ads testjoin Join is OK net ads join administrator Joined 'squid-server' to realm 'TEST.COM' But ntlm_auth does not work properly, I have following error when i run it : ntlm_auth --username=administrator password: ** NT_STATUS_CANT_ACCESS_DOMAIN_INFO: NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da) when i run the squid and set the the machine as proxy,the squid authenticate but does not accept the user When i browes some web pages, bring the dialog box, contain user and password and domian, but does not accept, We have following error in my logs Winbind : [2005/10/30 14:02:11, 0] nsswitch/winbindd_util.c:get_trust_pw(1033) get_trust_pw: could not fetch trust account password for my domain TEST.COM Can anybody help me, How can i solve this problem, Regards Abbas Salehi - Original Message - From: Dave Raven [EMAIL PROTECTED] To: 'Serassio Guido' [EMAIL PROTECTED]; 'Ian Barnes' [EMAIL PROTECTED]; squid-users@squid-cache.org Sent: Tuesday, November 08, 2005 6:49 PM Subject: RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems Hi all, I'm currently working on this problem with Ian. It seems like ntlm_auth is handling the requests fine - [EMAIL PROTECTED] /usr/local/bin # ./ntlm_auth --username=ianb --configfile=/usr/local/etc/smb.conf password: NT_STATUS_OK: Success (0x0) It also works through squid when using wget [2005/11/08 17:15:09, 3] utils/ntlm_auth.c:check_plaintext_auth(292) NT_STATUS_OK: Success (0x0) Note that it says check_plaintext_auth though, when using a browser (e.g. IE) we see the following messages [2005/11/08 15:16:36, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[IANB] domain=[MASTERMIND] workstation=[IANB] len1=24 len2=24 [2005/11/08 15:16:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] Why is it using a different method? It seems like the problem only occurs when it doesn't use check_plaintext_auth. Is there anything we can do to learn more? Thanks for all the help so far Dave
Re: [squid-users] (13) Permission denied
Hi Joaquim, If I try to connect to other websites in port 80 it work fine, but the = other ports have the same error i.e. webmin:1, etc.. What can I put in squid.conf file to solve this? Find the ACLs defining the allowed ports for requests: acl Safe_ports port 80 acl Safe_ports port 21 .. Add your required ports in the same manner and reload squid. Regards, Peter -- Peter Albrecht, Novell Training Services, [EMAIL PROTECTED]
Re: [squid-users] (13) Permission denied
8800 and 1 is not in the list of safe ports. you have to edit the acl of the safe ports. Joaquim Roca wrote: Dear squid users, I'm new in this list, I'm QRT. I have this problem: When I try to access http://www.xtec.es:8800/usuaris/correuweb/ using squid 2.5 stable11 I receive this error page ERROR The requested URL could not be retrieved -= =3D --- While trying to retrieve the URL: = http://www.xtec.es:8800/usuaris/correuweb/=3D20 The following error was encountered a.. Connection Failed The system returned: (13) Permission denied The remote host or network may be down. Please try the request again Your cache administrator is root. -= --- Generated Wed, 09 Nov 2005 08:31:47 GMT by localhost.localdomain = squid/2.5.STABLE11) If I try to connect to other websites in port 80 it work fine, but the = other ports have the same error i.e. webmin:1, etc.. What can I put in squid.conf file to solve this? Thankyou QRT
RE: [squid-users] (13) Permission denied
hello, you should add the following to your squid.conf : acl Safe_ports port 8800 # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL_ports You could find example like this with other port (eg. 443) in your original squid.conf config. -Message d'origine- De : Joaquim Roca [mailto:[EMAIL PROTECTED] Envoyé : mercredi 9 novembre 2005 11:09 À : squid-users@squid-cache.org Objet : [squid-users] (13) Permission denied Dear squid users, I'm new in this list, I'm QRT. I have this problem: When I try to access http://www.xtec.es:8800/usuaris/correuweb/ using squid 2.5 stable11 I receive this error page ERROR The requested URL could not be retrieved -= =3D --- While trying to retrieve the URL: = http://www.xtec.es:8800/usuaris/correuweb/=3D20 The following error was encountered a.. Connection Failed The system returned: (13) Permission denied The remote host or network may be down. Please try the request again Your cache administrator is root. -= --- Generated Wed, 09 Nov 2005 08:31:47 GMT by localhost.localdomain = squid/2.5.STABLE11) If I try to connect to other websites in port 80 it work fine, but the = other ports have the same error i.e. webmin:1, etc.. What can I put in squid.conf file to solve this? Thankyou QRT
[squid-users] Block skype
Hi all, any ideas how to block skype? I also using dansguardian content filtering. Appently (I read) it is difficult to block skype.. kindly help?? regards Daniel
RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems
Hi Abbas, Unfortunately we're still experimenting with ntlm_auth ourselves - it would probably be best to ask the samba user group your question. I suspect your smb.conf may not be setup correctly... Does anyone have any idea's on our problem below? Sorry to nag - we're willing to try anything Thanks Dave -Original Message- From: Abbas Salehi [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 12:22 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Urgent Samba / Squid NTLM Auth Problems Dear sir I did all of your recommanded from document step by step I succeeded to joined to the domain and active directory , i can see the domain users and groups kinit command works properly, net ads testjoin Join is OK net ads join administrator Joined 'squid-server' to realm 'TEST.COM' But ntlm_auth does not work properly, I have following error when i run it : ntlm_auth --username=administrator password: ** NT_STATUS_CANT_ACCESS_DOMAIN_INFO: NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da) when i run the squid and set the the machine as proxy,the squid authenticate but does not accept the user When i browes some web pages, bring the dialog box, contain user and password and domian, but does not accept, We have following error in my logs Winbind : [2005/10/30 14:02:11, 0] nsswitch/winbindd_util.c:get_trust_pw(1033) get_trust_pw: could not fetch trust account password for my domain TEST.COM Can anybody help me, How can i solve this problem, Regards Abbas Salehi - Original Message - From: Dave Raven [EMAIL PROTECTED] To: 'Serassio Guido' [EMAIL PROTECTED]; 'Ian Barnes' [EMAIL PROTECTED]; squid-users@squid-cache.org Sent: Tuesday, November 08, 2005 6:49 PM Subject: RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems Hi all, I'm currently working on this problem with Ian. It seems like ntlm_auth is handling the requests fine - [EMAIL PROTECTED] /usr/local/bin # ./ntlm_auth --username=ianb --configfile=/usr/local/etc/smb.conf password: NT_STATUS_OK: Success (0x0) It also works through squid when using wget [2005/11/08 17:15:09, 3] utils/ntlm_auth.c:check_plaintext_auth(292) NT_STATUS_OK: Success (0x0) Note that it says check_plaintext_auth though, when using a browser (e.g. IE) we see the following messages [2005/11/08 15:16:36, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[IANB] domain=[MASTERMIND] workstation=[IANB] len1=24 len2=24 [2005/11/08 15:16:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] Why is it using a different method? It seems like the problem only occurs when it doesn't use check_plaintext_auth. Is there anything we can do to learn more? Thanks for all the help so far Dave
RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems
Hi Abbas, Unfortunately we're still experimenting with ntlm_auth ourselves - it would probably be best to ask the samba user group your question. I suspect your smb.conf may not be setup correctly... Does anyone have any idea's on our problem below? Sorry to nag - we're willing to try anything Thanks Dave -Original Message- From: Abbas Salehi [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 12:22 PM To: Dave Raven Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Urgent Samba / Squid NTLM Auth Problems Dear sir I did all of your recommanded from document step by step I succeeded to joined to the domain and active directory , i can see the domain users and groups kinit command works properly, net ads testjoin Join is OK net ads join administrator Joined 'squid-server' to realm 'TEST.COM' But ntlm_auth does not work properly, I have following error when i run it : ntlm_auth --username=administrator password: ** NT_STATUS_CANT_ACCESS_DOMAIN_INFO: NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da) when i run the squid and set the the machine as proxy,the squid authenticate but does not accept the user When i browes some web pages, bring the dialog box, contain user and password and domian, but does not accept, We have following error in my logs Winbind : [2005/10/30 14:02:11, 0] nsswitch/winbindd_util.c:get_trust_pw(1033) get_trust_pw: could not fetch trust account password for my domain TEST.COM Can anybody help me, How can i solve this problem, Regards Abbas Salehi - Original Message - From: Dave Raven [EMAIL PROTECTED] To: 'Serassio Guido' [EMAIL PROTECTED]; 'Ian Barnes' [EMAIL PROTECTED]; squid-users@squid-cache.org Sent: Tuesday, November 08, 2005 6:49 PM Subject: RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems Hi all, I'm currently working on this problem with Ian. It seems like ntlm_auth is handling the requests fine - [EMAIL PROTECTED] /usr/local/bin # ./ntlm_auth --username=ianb --configfile=/usr/local/etc/smb.conf password: NT_STATUS_OK: Success (0x0) It also works through squid when using wget [2005/11/08 17:15:09, 3] utils/ntlm_auth.c:check_plaintext_auth(292) NT_STATUS_OK: Success (0x0) Note that it says check_plaintext_auth though, when using a browser (e.g. IE) we see the following messages [2005/11/08 15:16:36, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[IANB] domain=[MASTERMIND] workstation=[IANB] len1=24 len2=24 [2005/11/08 15:16:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] Why is it using a different method? It seems like the problem only occurs when it doesn't use check_plaintext_auth. Is there anything we can do to learn more? Thanks for all the help so far Dave
Re: [squid-users] (13) Permission denied
there are a line in squid.conf with: acl Safe_ports port 1025-65535 # unregistered ports I think that include all ports upper 1025 in a safe_ports acl and there are http_acces line: http_access deny !Safe_ports I try to delete http_access deny !Safe_ports and the problem persist. QRT - Original Message - From: Administrateur [EMAIL PROTECTED] To: Joaquim Roca [EMAIL PROTECTED] Sent: Wednesday, November 09, 2005 11:24 AM Subject: RE: [squid-users] (13) Permission denied hello, you should add the following to your squid.conf : acl Safe_ports port 8800 # Deny requests to unknown ports http_access deny !Safe_ports You could find example like this with other port (eg. 443) in your original squid.conf config. -Message d'origine- De : Joaquim Roca [mailto:[EMAIL PROTECTED] Envoyé : mercredi 9 novembre 2005 11:09 À : squid-users@squid-cache.org Objet : [squid-users] (13) Permission denied Dear squid users, I'm new in this list, I'm QRT. I have this problem: When I try to access http://www.xtec.es:8800/usuaris/correuweb/ using squid 2.5 stable11 I receive this error page ERROR The requested URL could not be retrieved -= =3D --- While trying to retrieve the URL: = http://www.xtec.es:8800/usuaris/correuweb/=3D20 The following error was encountered a.. Connection Failed The system returned: (13) Permission denied The remote host or network may be down. Please try the request again Your cache administrator is root. -= --- Generated Wed, 09 Nov 2005 08:31:47 GMT by localhost.localdomain = squid/2.5.STABLE11) If I try to connect to other websites in port 80 it work fine, but the = other ports have the same error i.e. webmin:1, etc.. What can I put in squid.conf file to solve this? Thankyou QRT
RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems
Okay I have an update with more progress - it seems the problem is only to do with ntlmssp. If I only have a basic authenticator - which looks like the following, it works perfectly: auth_param basic program /usr/optec/ntlm_auth.sh basic auth_param basic children 10 auth_param basic realm server.opteqint.net Cache NTLM Authentication auth_param basic credentialsttl 2 hours (ntlm_auth.sh runs the ntlm_auth squid-2.5-basic helper) I see the following debug messages: [2005/11/09 13:20:43, 3] utils/ntlm_auth.c:check_plaintext_auth(292) NT_STATUS_OK: Success (0x0) However, when I use ntlmssp in the squid config, shown below, it does not work: auth_param ntlm program /usr/optec/ntlm_auth.sh ntlmssp auth_param ntlm children 10 auth_param ntlm use_ntlm_negotiate yes I see the following debug messages: [2005/11/09 13:22:37, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[ianb] domain=[MASTERMIND] workstation=[LUCY] len1=24 len2=24 [2005/11/09 13:22:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] If I type ian instead of ianb, I see an error saying the user does not exist. This must mean that somehow the wrong password is being passed in the wrong way - even though it is typed right. For anyone who hasn't read the rest of this thread please note: this only happens with the security option on the AD server set to ONLY allow NTLMv2/LMv2 and not anything else. If we turn that off it works perfectly... As I understand it the password doesn't come to squid in plaintext when its using ntlmssp, and I believe that there is some kind of handling problem with that now? If I type in the password on the command line with the ntlm_auth program, it is able to validate it just fine using NTLMv2 - enforcing my belief that something is wrong here... Any suggestions AT ALL would be appreciated... Thanks Dave
RE: [squid-users] Urgent Samba / Squid NTLM Auth Problems
Okay I have an update with more progress - it seems the problem is only to do with ntlmssp. If I only have a basic authenticator - which looks like the following, it works perfectly: auth_param basic program /usr/optec/ntlm_auth.sh basic auth_param basic children 10 auth_param basic realm server.opteqint.net Cache NTLM Authentication auth_param basic credentialsttl 2 hours (ntlm_auth.sh runs the ntlm_auth squid-2.5-basic helper) I see the following debug messages: [2005/11/09 13:20:43, 3] utils/ntlm_auth.c:check_plaintext_auth(292) NT_STATUS_OK: Success (0x0) However, when I use ntlmssp in the squid config, shown below, it does not work: auth_param ntlm program /usr/optec/ntlm_auth.sh ntlmssp auth_param ntlm children 10 auth_param ntlm use_ntlm_negotiate yes I see the following debug messages: [2005/11/09 13:22:37, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[ianb] domain=[MASTERMIND] workstation=[LUCY] len1=24 len2=24 [2005/11/09 13:22:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] If I type ian instead of ianb, I see an error saying the user does not exist. This must mean that somehow the wrong password is being passed in the wrong way - even though it is typed right. For anyone who hasn't read the rest of this thread please note: this only happens with the security option on the AD server set to ONLY allow NTLMv2/LMv2 and not anything else. If we turn that off it works perfectly... As I understand it the password doesn't come to squid in plaintext when its using ntlmssp, and I believe that there is some kind of handling problem with that now? If I type in the password on the command line with the ntlm_auth program, it is able to validate it just fine using NTLMv2 - enforcing my belief that something is wrong here... Any suggestions AT ALL would be appreciated... Thanks Dave
[squid-users] Binding IP address to username
Hello Everyone, I would like to know how I can bind an IP address to a username in squid. So let's say I have a user called user1 and a machine on IP 1.2.3.4. I would like squid to log any requests that come from 1.2.3.4 as if the user user1 logged in. Thanks, Pieter De Wit �This e-mail is sent on the Terms and Conditions that can be accessed by Clicking on this link http://www.vodacom.net/legal/email.aspx
[squid-users] Getting error Too few basicauthenticator processes are running
Hi, I am trying to configure squid version squid-2.5.STABLE12 as follows : [EMAIL PROTECTED] squid-2.5.STABLE12]# /usr/local/squid/sbin/squid -NCd1 I am getting following error 2005/11/09 18:03:40| Accepting HTTP connections at 0.0.0.0, port 3128, FD 15. 2005/11/09 18:03:40| WCCP Disabled. 2005/11/09 18:03:40| Ready to serve requests. 2005/11/09 18:03:41| WARNING: basicauthenticator #1 (FD 6) exited 2005/11/09 18:03:41| WARNING: basicauthenticator #2 (FD 7) exited 2005/11/09 18:03:41| WARNING: basicauthenticator #3 (FD 8) exited 2005/11/09 18:03:41| Too few basicauthenticator processes are running FATAL: The basicauthenticator helpers are crashing too rapidly, need help! Aborted I have configured squid with minimum options as follows: [EMAIL PROTECTED] squid-2.5.STABLE12]# ./configure --enable-basic-auth-helpers=LDAP,NCSA,PAM,SMB,SASL,MSNT . Please help me to solve the problem. I want to use basic authentication. Thanks for support. __ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure 2005/11/02 10:07:19| Validated 31666 Entries 2005/11/02 10:07:19| store_swap_size = 400260k 2005/11/02 10:07:20| WARNING: Disk space over limit: 399480 KB 102400 KB 2005/11/02 10:07:20| storeLateRelease: released 2 objects 2005/11/02 10:07:31| WARNING: Disk space over limit: 384820 KB 102400 KB 2005/11/02 10:07:39| WARNING: 1 swapin MD5 mismatches 2005/11/02 10:07:42| WARNING: Disk space over limit: 377240 KB 102400 KB 2005/11/02 10:07:53| WARNING: Disk space over limit: 369680 KB 102400 KB 2005/11/02 10:08:04| WARNING: Disk space over limit: 351148 KB 102400 KB 2005/11/02 10:08:15| WARNING: Disk space over limit: 340112 KB 102400 KB 2005/11/02 10:08:26| WARNING: Disk space over limit: 320184 KB 102400 KB 2005/11/02 10:08:37| WARNING: Disk space over limit: 309412 KB 102400 KB 2005/11/02 10:08:41| clientProcessHit: Vary object loop! 2005/11/02 10:08:48| WARNING: Disk space over limit: 295500 KB 102400 KB 2005/11/02 10:08:59| WARNING: Disk space over limit: 287596 KB 102400 KB 2005/11/02 10:09:10| WARNING: Disk space over limit: 277460 KB 102400 KB 2005/11/02 10:09:11| WARNING: 10 swapin MD5 mismatches 2005/11/02 10:09:21| WARNING: Disk space over limit: 267808 KB 102400 KB 2005/11/02 10:09:32| WARNING: Disk space over limit: 256848 KB 102400 KB ... I already tried to : - Stop Squid, delete swap.state, restart squid - Stop Squid,
AW: [squid-users] Squid unreachable every hour and 6 minutes.
While squid is unreachable maybe the system writes a core file to the disk? Please search for core files: Login as root cd / find . -name core -print The find command may run some minutes depending of the size of your disks. Furthermore you should find out why WARNING: Disk space over limit. Werner Rost -Ursprüngliche Nachricht- Von: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 9. November 2005 13:45 An: squid-users@squid-cache.org Betreff: RE: [squid-users] Squid unreachable every hour and 6 minutes. Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure 2005/11/02 10:07:19| Validated 31666 Entries 2005/11/02 10:07:19| store_swap_size = 400260k 2005/11/02 10:07:20| WARNING: Disk space over limit: 399480 KB 102400 KB 2005/11/02 10:07:20| storeLateRelease: released 2 objects 2005/11/02 10:07:31| WARNING: Disk space over limit: 384820 KB 102400 KB 2005/11/02 10:07:39| WARNING: 1 swapin MD5 mismatches 2005/11/02 10:07:42| WARNING: Disk space over limit: 377240 KB 102400 KB 2005/11/02 10:07:53| WARNING: Disk space over limit: 369680 KB 102400 KB 2005/11/02 10:08:04| WARNING: Disk space over limit: 351148 KB 102400 KB 2005/11/02 10:08:15| WARNING: Disk space over limit: 340112 KB 102400 KB 2005/11/02 10:08:26| WARNING: Disk space over limit: 320184 KB 102400 KB 2005/11/02 10:08:37| WARNING: Disk space over limit: 309412 KB 102400 KB 2005/11/02 10:08:41| clientProcessHit: Vary object loop! 2005/11/02 10:08:48| WARNING: Disk space over limit: 295500 KB 102400 KB 2005/11/02 10:08:59| WARNING: Disk space over
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Are there any .core files for squid? find / -name squid.core -print It seems like your cache is crashing for some unknown reason - are you not killing it every few hours somehow? Its highly unlikely that squid is dying after EXACTLY 66 minutes. Also try using the latest version... -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 02:45 PM To: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure 2005/11/02 10:07:19| Validated 31666 Entries 2005/11/02 10:07:19| store_swap_size = 400260k 2005/11/02 10:07:20| WARNING: Disk space over limit: 399480 KB 102400 KB 2005/11/02 10:07:20| storeLateRelease: released 2 objects 2005/11/02 10:07:31| WARNING: Disk space over limit: 384820 KB 102400 KB 2005/11/02 10:07:39| WARNING: 1 swapin MD5 mismatches 2005/11/02 10:07:42| WARNING: Disk space over limit: 377240 KB 102400 KB 2005/11/02 10:07:53| WARNING: Disk space over limit: 369680 KB 102400 KB 2005/11/02 10:08:04| WARNING: Disk space over limit: 351148 KB 102400 KB 2005/11/02 10:08:15| WARNING: Disk space over limit: 340112 KB 102400 KB 2005/11/02 10:08:26| WARNING: Disk space over limit: 320184 KB 102400 KB 2005/11/02 10:08:37| WARNING: Disk space over limit: 309412 KB 102400 KB 2005/11/02 10:08:41| clientProcessHit: Vary object loop! 2005/11/02 10:08:48| WARNING: Disk space over limit: 295500 KB 102400 KB
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Are there any .core files for squid? find / -name squid.core -print It seems like your cache is crashing for some unknown reason - are you not killing it every few hours somehow? Its highly unlikely that squid is dying after EXACTLY 66 minutes. Also try using the latest version... -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 02:45 PM To: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure 2005/11/02 10:07:19| Validated 31666 Entries 2005/11/02 10:07:19| store_swap_size = 400260k 2005/11/02 10:07:20| WARNING: Disk space over limit: 399480 KB 102400 KB 2005/11/02 10:07:20| storeLateRelease: released 2 objects 2005/11/02 10:07:31| WARNING: Disk space over limit: 384820 KB 102400 KB 2005/11/02 10:07:39| WARNING: 1 swapin MD5 mismatches 2005/11/02 10:07:42| WARNING: Disk space over limit: 377240 KB 102400 KB 2005/11/02 10:07:53| WARNING: Disk space over limit: 369680 KB 102400 KB 2005/11/02 10:08:04| WARNING: Disk space over limit: 351148 KB 102400 KB 2005/11/02 10:08:15| WARNING: Disk space over limit: 340112 KB 102400 KB 2005/11/02 10:08:26| WARNING: Disk space over limit: 320184 KB 102400 KB 2005/11/02 10:08:37| WARNING: Disk space over limit: 309412 KB 102400 KB 2005/11/02 10:08:41| clientProcessHit: Vary object loop! 2005/11/02 10:08:48| WARNING: Disk space over limit: 295500 KB 102400 KB
Re: [squid-users] transparent proxy with authentication
Are there anyone out there who has configured squid to perform this kind of cacheing before? i.e. squid on wccp with cisco router while providing http authentication to end-users. If there is none and I wish doing so, would it really be possible? kahyi Original Message From: Chin Kah Yi [EMAIL PROTECTED] To: Henrik Nordstrom [EMAIL PROTECTED], Squid Users squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 8/11/2005 21:53 Thanks for the comment. I was away for a while. You have mentioned that such authentication method is somewhat proprietary since it is not following standard. If I only need to cache http (port 80) and none other ports, this authentication method should still be sufficiently good. right? Kah Yi Original Message From: Henrik Nordstrom [EMAIL PROTECTED] To: Chin Kah Yi [EMAIL PROTECTED] CC: Squid Users squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 29/10/2005 02:22 On Fri, 28 Oct 2005, Chin Kah Yi wrote: I see. Do you think the design where cookies were used to keep track of per-user authentication details at client browser is a feasible and good design? It is a hack. And fails badly for all other applications than browsing as it is not a standard authentication method so none of the methods of specifying the proxy account in other applications works. Regards Henrik
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Hello, Thanks for support. I suppose WARNING: Disk space over limit come from the fact that squid restart by itself and so corrupt is cache. But I don't know why every time it use more space than I allow it. proxy1:~# cd / proxy1:/# find . -name core -print ./dev/core ./lib/modules/2.4.26-1-686-smp/kernel/net/core ./lib/modules/2.4.26-1-386/kernel/net/core ./proc/sys/net/core proxy1:/# Thnaks. L.G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 13:57 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: AW: [squid-users] Squid unreachable every hour and 6 minutes. While squid is unreachable maybe the system writes a core file to the disk? Please search for core files: Login as root cd / find . -name core -print The find command may run some minutes depending of the size of your disks. Furthermore you should find out why WARNING: Disk space over limit. Werner Rost -Ursprüngliche Nachricht- Von: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 9. November 2005 13:45 An: squid-users@squid-cache.org Betreff: RE: [squid-users] Squid unreachable every hour and 6 minutes. Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure 2005/11/02 10:07:19| Validated 31666 Entries 2005/11/02 10:07:19| store_swap_size = 400260k 2005/11/02 10:07:20| WARNING: Disk space over limit: 399480 KB 102400 KB 2005/11/02 10:07:20| storeLateRelease: released 2 objects 2005/11/02 10:07:31| WARNING: Disk space over limit: 384820 KB 102400 KB 2005/11/02 10:07:39| WARNING: 1 swapin MD5 mismatches 2005/11/02 10:07:42|
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G. From: Mike Cudmore [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:10 To: Gix, Lilian (CI/OSR) * Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Lilian I may have missed earlier entries in this thread so apologies if I ask you to repeat any info. 1) How do you know squid is unreachable at these times ? 2) try pinging the host squid is running on for a period that covers the time that the squid is unreachable. Does the host become unreachable as well? 3) What does cache.log say for these periods ? I have more thoughts depending on the answers to these Regards Mike Gix, Lilian (CI/OSR) * [EMAIL PROTECTED] 09/11/05 12:44:30 Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure 2005/11/02 10:07:19| Validated 31666 Entries 2005/11/02 10:07:19| store_swap_size = 400260k 2005/11/02 10:07:20| WARNING: Disk space over limit: 399480 KB 102400 KB 2005/11/02 10:07:20| storeLateRelease: released 2 objects 2005/11/02 10:07:31| WARNING: Disk space over limit: 384820 KB 102400 KB 2005/11/02 10:07:39| WARNING: 1 swapin MD5 mismatches 2005/11/02 10:07:42| WARNING: Disk space over limit: 377240 KB 102400 KB 2005/11/02 10:07:53| WARNING: Disk space over limit: 369680 KB 102400 KB 2005/11/02 10:08:04| WARNING: Disk space over limit: 351148 KB
AW: [squid-users] Squid unreachable every hour and 6 minutes.
Thanks for support. I suppose WARNING: Disk space over limit come from the fact that squid restart by itself and so corrupt is cache. But I don't know why every time it use more space than I allow it. I think this warning says that one of your disks is full. Check your disk space with df -k. proxy1:~# cd / proxy1:/# find . -name core -print ./dev/core ./lib/modules/2.4.26-1-686-smp/kernel/net/core ./lib/modules/2.4.26-1-386/kernel/net/core ./proc/sys/net/core proxy1:/# These are directories, you have no core files. Werner Rost
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Here are results: proxy1:/# find / -name squid.core -print proxy1:/# proxy1:/# df -k Filesystem 1K-blocks Used Available Use% Mounted on /dev/cciss/c0d0p2 10083964 1606012 7965708 17% / tmpfs 516744 0516744 0% /dev/shm /dev/cciss/c0d0p191747 15993 70859 19% /boot /dev/cciss/c0d0p6 10079868156200 9411632 2% /cache /dev/cciss/c0d0p5 14011356 4575072 8724532 35% /cache_log Again, thanks. L.G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:40 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: AW: [squid-users] Squid unreachable every hour and 6 minutes. Thanks for support. I suppose WARNING: Disk space over limit come from the fact that squid restart by itself and so corrupt is cache. But I don't know why every time it use more space than I allow it. I think this warning says that one of your disks is full. Check your disk space with df -k. proxy1:~# cd / proxy1:/# find . -name core -print ./dev/core ./lib/modules/2.4.26-1-686-smp/kernel/net/core ./lib/modules/2.4.26-1-386/kernel/net/core ./proc/sys/net/core proxy1:/# These are directories, you have no core files. Werner Rost
AW: [squid-users] Squid unreachable every hour and 6 minutes.
Please observe the disk space with df -k in the time when squid is unreachable. Does some value in the column Use% grow over 70 % ? Werner Here are results: proxy1:/# find / -name squid.core -print proxy1:/# proxy1:/# df -k Filesystem 1K-blocks Used Available Use% Mounted on /dev/cciss/c0d0p2 10083964 1606012 7965708 17% / tmpfs 516744 0516744 0% /dev/shm /dev/cciss/c0d0p191747 15993 70859 19% /boot /dev/cciss/c0d0p6 10079868156200 9411632 2% /cache /dev/cciss/c0d0p5 14011356 4575072 8724532 35% /cache_log Again, thanks. L.G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:40 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: AW: [squid-users] Squid unreachable every hour and 6 minutes. Thanks for support. I suppose WARNING: Disk space over limit come from the fact that squid restart by itself and so corrupt is cache. But I don't know why every time it use more space than I allow it. I think this warning says that one of your disks is full. Check your disk space with df -k. proxy1:~# cd / proxy1:/# find . -name core -print ./dev/core ./lib/modules/2.4.26-1-686-smp/kernel/net/core ./lib/modules/2.4.26-1-386/kernel/net/core ./proc/sys/net/core proxy1:/# These are directories, you have no core files. Werner Rost
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir potentially... Remove everything and run squid -z to recreate it -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 03:32 PM To: Mike Cudmore Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G. From: Mike Cudmore [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:10 To: Gix, Lilian (CI/OSR) * Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Lilian I may have missed earlier entries in this thread so apologies if I ask you to repeat any info. 1) How do you know squid is unreachable at these times ? 2) try pinging the host squid is running on for a period that covers the time that the squid is unreachable. Does the host become unreachable as well? 3) What does cache.log say for these periods ? I have more thoughts depending on the answers to these Regards Mike Gix, Lilian (CI/OSR) * [EMAIL PROTECTED] 09/11/05 12:44:30 Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir potentially... Remove everything and run squid -z to recreate it -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 03:32 PM To: Mike Cudmore Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G. From: Mike Cudmore [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:10 To: Gix, Lilian (CI/OSR) * Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Lilian I may have missed earlier entries in this thread so apologies if I ask you to repeat any info. 1) How do you know squid is unreachable at these times ? 2) try pinging the host squid is running on for a period that covers the time that the squid is unreachable. Does the host become unreachable as well? 3) What does cache.log say for these periods ? I have more thoughts depending on the answers to these Regards Mike Gix, Lilian (CI/OSR) * [EMAIL PROTECTED] 09/11/05 12:44:30 Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries. 2005/11/02 10:07:19| 0 With invalid flags. 2005/11/02 10:07:19| 35086 Objects loaded. 2005/11/02 10:07:19| 0 Objects expired. 2005/11/02 10:07:19| 6194 Objects cancelled. 2005/11/02 10:07:19| 3443 Duplicate URLs purged. 2005/11/02 10:07:19| 70406 Swapfile clashes avoided. 2005/11/02 10:07:19| Took 14.5 seconds (2411.4 objects/sec). 2005/11/02 10:07:19| Beginning Validation Procedure 2005/11/02 10:07:19| Completed Validation Procedure
RE: [squid-users] Squid unreachable every hour and 6 minutes.
I already tried to : - Stop Squid, delete swap.state, restart squid - Stop Squid, format my cache parition, squid -z, start squid - change cache_dir ufs /cache 5000 16 256 to cache_dir ufs /cache 100 16 256, squid -k restart. - reboot completely the server But nothing worked. -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:58 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir potentially... Remove everything and run squid -z to recreate it -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 03:32 PM To: Mike Cudmore Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G. From: Mike Cudmore [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:10 To: Gix, Lilian (CI/OSR) * Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Lilian I may have missed earlier entries in this thread so apologies if I ask you to repeat any info. 1) How do you know squid is unreachable at these times ? 2) try pinging the host squid is running on for a period that covers the time that the squid is unreachable. Does the host become unreachable as well? 3) What does cache.log say for these periods ? I have more thoughts depending on the answers to these Regards Mike Gix, Lilian (CI/OSR) * [EMAIL PROTECTED] 09/11/05 12:44:30 Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11. 2005/11/02 10:07:15| Accepting ICP messages at 0.0.0.0, port 3130, FD 12. 2005/11/02 10:07:15| HTCP Disabled. 2005/11/02 10:07:15| WCCP Disabled. 2005/11/02 10:07:15| Configuring Parent 10.4.13.184/8080/0 2005/11/02 10:07:15| Ready to serve requests. 2005/11/02 10:07:15| Configuring Parent virus1.com/8080/0 2005/11/02 10:07:15| Configuring Parent virus2.com/8080/0 2005/11/02 10:07:15| Store rebuilding is 1.9% complete 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 031F 2005/11/02 10:07:16| WARNING: newer swaplog entry for dirno 0, fileno 0371 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E4 2005/11/02 10:07:19| WARNING: newer swaplog entry for dirno 0, fileno 39E8 2005/11/02 10:07:19| Done reading /cache swaplog (215057 entries) 2005/11/02 10:07:19| Finished rebuilding storage from disk. 2005/11/02 10:07:19|111709 Entries scanned 2005/11/02 10:07:19| 0 Invalid entries.
RE: [squid-users] Squid unreachable every hour and 6 minutes.
Here is what I have during the problem : proxy1:/# df -k Filesystem 1K-blocks Used Available Use% Mounted on /dev/cciss/c0d0p2 10083964 1606024 7965696 17% / tmpfs 516744 0516744 0% /dev/shm /dev/cciss/c0d0p191747 15993 70859 19% /boot /dev/cciss/c0d0p6 10079868158536 9409296 2% /cache /dev/cciss/c0d0p5 14011356 4586500 8713104 35% /cache_log Nothing wrong I can notice. L.G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:58 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: AW: [squid-users] Squid unreachable every hour and 6 minutes. Please observe the disk space with df -k in the time when squid is unreachable. Does some value in the column Use% grow over 70 % ? Werner Here are results: proxy1:/# find / -name squid.core -print proxy1:/# proxy1:/# df -k Filesystem 1K-blocks Used Available Use% Mounted on /dev/cciss/c0d0p2 10083964 1606012 7965708 17% / tmpfs 516744 0516744 0% /dev/shm /dev/cciss/c0d0p191747 15993 70859 19% /boot /dev/cciss/c0d0p6 10079868156200 9411632 2% /cache /dev/cciss/c0d0p5 14011356 4575072 8724532 35% /cache_log Again, thanks. L.G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:40 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: AW: [squid-users] Squid unreachable every hour and 6 minutes. Thanks for support. I suppose WARNING: Disk space over limit come from the fact that squid restart by itself and so corrupt is cache. But I don't know why every time it use more space than I allow it. I think this warning says that one of your disks is full. Check your disk space with df -k. proxy1:~# cd / proxy1:/# find . -name core -print ./dev/core ./lib/modules/2.4.26-1-686-smp/kernel/net/core ./lib/modules/2.4.26-1-386/kernel/net/core ./proc/sys/net/core proxy1:/# These are directories, you have no core files. Werner Rost
AW: [squid-users] Squid unreachable every hour and 6 minutes.
Please repeat that again. (1) stop squid (2) find out wht are the cache directories squid uses, for example # grep cache_dir squid.conf cache_dir ufs /data1/squid_cache 6000 32 512 cache_dir ufs /data2/squid_cache 1 32 512 # In this example /data1/squid_cache and /data2/squid_cache are the cache dirs. (3) Clean all cache dirs - in this example: cd /data1/squid_cache rm -f * cd /data2/squid_cache rm -f * (3) create the cache structures again: squid -z (4) Start squid. What happens? Is squid running? ps -ef | grep squid What does cache.log say since starting of squid? Is squid reachable? (5) What happens after 1 hour an 6 minutes? Werner Rost -Ursprüngliche Nachricht- Von: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 9. November 2005 15:10 An: Dave Raven; squid-users@squid-cache.org Betreff: RE: [squid-users] Squid unreachable every hour and 6 minutes. I already tried to : - Stop Squid, delete swap.state, restart squid - Stop Squid, format my cache parition, squid -z, start squid - change cache_dir ufs /cache 5000 16 256 to cache_dir ufs /cache 100 16 256, squid -k restart. - reboot completely the server But nothing worked. -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:58 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir potentially... Remove everything and run squid -z to recreate it -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 03:32 PM To: Mike Cudmore Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G. From: Mike Cudmore [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:10 To: Gix, Lilian (CI/OSR) * Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Lilian I may have missed earlier entries in this thread so apologies if I ask you to repeat any info. 1) How do you know squid is unreachable at these times ? 2) try pinging the host squid is running on for a period that covers the time that the squid is unreachable. Does the host become unreachable as well? 3) What does cache.log say for these periods ? I have more thoughts depending on the answers to these Regards Mike Gix, Lilian (CI/OSR) * [EMAIL PROTECTED] 09/11/05 12:44:30 Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li nux-gnu... 2005/11/02 10:07:05| Process ID 1430 2005/11/02 10:07:05| With 4096 file descriptors available 2005/11/02 10:07:05| DNS Socket created at 0.0.0.0, port 32772, FD 5 2005/11/02 10:07:05| Adding nameserver 193.108.217.70 from /etc/resolv.conf 2005/11/02 10:07:05| User-Agent logging is disabled. 2005/11/02 10:07:05| Referer logging is disabled. 2005/11/02 10:07:05| Unlinkd pipe opened on FD 10 2005/11/02 10:07:05| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/02 10:07:05| Target number of buckets: 393 2005/11/02 10:07:05| Using 8192 Store buckets 2005/11/02 10:07:05| Max Mem size: 102400 KB 2005/11/02 10:07:05| Max Swap size: 102400 KB 2005/11/02 10:07:05| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2005/11/02 10:07:05| Store logging disabled 2005/11/02 10:07:05| Rebuilding storage in /cache (DIRTY) 2005/11/02 10:07:05| Using Least Load store dir selection 2005/11/02 10:07:05| Set Current Directory to /cache_log/ 2005/11/02 10:07:05| Loaded Icons. 2005/11/02 10:07:15| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11.
[squid-users] FreeBSD GUI?
Dear List, Is there any possibility to run FreeBSD (new,stable version) with GUI support? if yes, what option should I choose during the installation? any help much appreciated. Thank you in advance Kumara
Re: AW: [squid-users] Squid unreachable every hour and 6 minutes.
The disk space is over limit error is not saying the disk is full. The cache has reached the limit that's been set in the squid.conf file. It could be causing squid to die, but how likely is it that this would be the cause, if squid dies 6 minutes after every hour? My suggestion is to check and see what cron jobs are running: cat /etc/crontab or (as root): crontab -l and then crontab -l any other users that might be running cron jobs If there's a timely pattern to the connectivity issue, the root of the problem probably has something to do with a schedule for something. Cron would be a good place to start. On the disk space is over limit issue... You really shouldn't have to tend to this. Squid should use whatever replacement policy was specified at compile time (forget which one is default if none is specified) To remove old/unused cache objects in an effort to free up space. However, if squid is trying to do this, and is actively handling proxy requests at the same time, squid could be running out of resources. What specs do you have on this machine? CPU/Ram/etc. Tim Rainier Information Services, Kalsec, INC [EMAIL PROTECTED] [EMAIL PROTECTED] 11/09/2005 09:45 AM To [EMAIL PROTECTED], [EMAIL PROTECTED], squid-users@squid-cache.org cc Subject AW: [squid-users] Squid unreachable every hour and 6 minutes. Please repeat that again. (1) stop squid (2) find out wht are the cache directories squid uses, for example # grep cache_dir squid.conf cache_dir ufs /data1/squid_cache 6000 32 512 cache_dir ufs /data2/squid_cache 1 32 512 # In this example /data1/squid_cache and /data2/squid_cache are the cache dirs. (3) Clean all cache dirs - in this example: cd /data1/squid_cache rm -f * cd /data2/squid_cache rm -f * (3) create the cache structures again: squid -z (4) Start squid. What happens? Is squid running? ps -ef | grep squid What does cache.log say since starting of squid? Is squid reachable? (5) What happens after 1 hour an 6 minutes? Werner Rost -Ursprüngliche Nachricht- Von: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 9. November 2005 15:10 An: Dave Raven; squid-users@squid-cache.org Betreff: RE: [squid-users] Squid unreachable every hour and 6 minutes. I already tried to : - Stop Squid, delete swap.state, restart squid - Stop Squid, format my cache parition, squid -z, start squid - change cache_dir ufs /cache 5000 16 256 to cache_dir ufs /cache 100 16 256, squid -k restart. - reboot completely the server But nothing worked. -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:58 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir potentially... Remove everything and run squid -z to recreate it -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 03:32 PM To: Mike Cudmore Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G. From: Mike Cudmore [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:10 To: Gix, Lilian (CI/OSR) * Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Lilian I may have missed earlier entries in this thread so apologies if I ask you to repeat any info. 1) How do you know squid is unreachable at these times ? 2) try pinging the host squid is running on for a period that covers the time that the squid is unreachable. Does the host become unreachable as well? 3) What does cache.log say for these periods ? I have more thoughts depending on the answers to these Regards Mike Gix, Lilian (CI/OSR) * [EMAIL PROTECTED] 09/11/05 12:44:30 Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a
RE: [squid-users] Squid unreachable every hour and 6 minutes.
did you check that nothing in cron start every hour ? try : #crontab -l -Message d'origine- De : Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Envoyé : mercredi 9 novembre 2005 16:01 À : [EMAIL PROTECTED] Cc : squid-users@squid-cache.org Objet : RE: [squid-users] Squid unreachable every hour and 6 minutes. It's nearly what I already tried. (1) Ok (2) I had : cache_dir ufs /cache 5000 16 256 (3) mke2fs -j -c /dev/cciss/c0d0p6 (/dev/cciss/c0d0p6 is my Cache partition) (3) ok (4) /etc/init.d squid start. The effect was exactly the same : squid stop every hour. So I tried : (2) changed : cache_dir ufs /cache 100 16 256 (4) squid -k reconfigure Same result. Then a last sing I did : (1) Stop Squid (3) cd /cache rm cache.swap (4) Start Squid And again ... Same result. But as the server is in production, I wll try tonight to delete folder as you propose, Thanks. L.G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 15:46 To: Gix, Lilian (CI/OSR) *; [EMAIL PROTECTED]; squid-users@squid-cache.org Subject: AW: [squid-users] Squid unreachable every hour and 6 minutes. Please repeat that again. (1) stop squid (2) find out wht are the cache directories squid uses, for example # grep cache_dir squid.conf cache_dir ufs /data1/squid_cache 6000 32 512 cache_dir ufs /data2/squid_cache 1 32 512 # In this example /data1/squid_cache and /data2/squid_cache are the cache dirs. (3) Clean all cache dirs - in this example: cd /data1/squid_cache rm -f * cd /data2/squid_cache rm -f * (3) create the cache structures again: squid -z (4) Start squid. What happens? Is squid running? ps -ef | grep squid What does cache.log say since starting of squid? Is squid reachable? (5) What happens after 1 hour an 6 minutes? Werner Rost -Ursprüngliche Nachricht- Von: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 9. November 2005 15:10 An: Dave Raven; squid-users@squid-cache.org Betreff: RE: [squid-users] Squid unreachable every hour and 6 minutes. I already tried to : - Stop Squid, delete swap.state, restart squid - Stop Squid, format my cache parition, squid -z, start squid - change cache_dir ufs /cache 5000 16 256 to cache_dir ufs /cache 100 16 256, squid -k restart. - reboot completely the server But nothing worked. -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:58 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir potentially... Remove everything and run squid -z to recreate it -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 03:32 PM To: Mike Cudmore Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G. From: Mike Cudmore [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:10 To: Gix, Lilian (CI/OSR) * Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Lilian I may have missed earlier entries in this thread so apologies if I ask you to repeat any info. 1) How do you know squid is unreachable at these times ? 2) try pinging the host squid is running on for a period that covers the time that the squid is unreachable. Does the host become unreachable as well? 3) What does cache.log say for these periods ? I have more thoughts depending on the answers to these Regards Mike Gix, Lilian (CI/OSR) * [EMAIL PROTECTED] 09/11/05 12:44:30 Hello, Realy no body have an idea ? :( L.G. -Original Message- From: Gix, Lilian (CI/OSR) * Sent: Mittwoch, 2. November 2005 10:26 To: squid-users@squid-cache.org Subject: [squid-users] Squid unreachable every hour and 6 minutes. Hello, I have a problem with my squid : every hour and 6 minutes, it is unreachable for few second. Here is a part of Cache.log : 2005/11/02 09:44:45| Detected REVIVED Parent: virus2.com/8080/0 2005/11/02 10:07:05| Starting Squid Cache version 2.5.STABLE6 for i386-debian-li
Re: [squid-users] Squid unreachable every hour and 6 minutes.
Hi Lilian, The effect was exactly the same : squid stop every hour. Are you sure that no cron job is running which terminates squid? Could you please check * /etc/crontab * /etc/cron.hourly/ and do a crontab -l as root? If there is anything running, please check what exactly that job is doing. Maybe that's the reason. Regards, Peter -- Peter Albrecht, Novell Training Services, [EMAIL PROTECTED]
RE: [squid-users] FreeBSD GUI?
see http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install-post.html#DEFAULT-DESKTOP especially section : 2.9.12 Configure X Server -Message d'origine- De : Kumara Jayaweera [mailto:[EMAIL PROTECTED] Envoyé : mercredi 9 novembre 2005 16:31 A : squid-users@squid-cache.org Objet : [squid-users] FreeBSD GUI? Dear List, Is there any possibility to run FreeBSD (new,stable version) with GUI support? if yes, what option should I choose during the installation? any help much appreciated. Thank you in advance Kumara
Re: [squid-users] FreeBSD GUI?
* On 09/11/05 18:31 +0300, Kumara Jayaweera wrote: Dear List, Is there any possibility to run FreeBSD (new,stable version) with GUI support? if yes, what option should I choose during the installation? any help much appreciated. Thank you in advance Kumara FreeBSD GUI costs USD 1,000 and a brain the size of a mountain. Ask why it is so at [EMAIL PROTECTED] -Wash http://www.netmeister.org/news/learn2quote.html -- +==+ |\ _,,,---,,_ | Odhiambo Washington[EMAIL PROTECTED] Zzz /,`.-'`'-. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +==+ Law of the Perversity of Nature: You cannot successfully determine beforehand which side of the bread to butter.
Re: [squid-users] transparent proxy with authentication
On Wed, 9 Nov 2005, Chin Kah Yi wrote: Are there anyone out there who has configured squid to perform this kind of cacheing before? i.e. squid on wccp with cisco router while providing http authentication to end-users. No. If there is none and I wish doing so, would it really be possible? It is possible, but some programming is required a) To extend Squid to be able to filter out the needed cookie (within Squid) b) To design the authentication system maintaining the login and issuing cookies. (outside Squid) Regards Henrik
[squid-users] Long Query String results in Invalid response
I am running 2.5.STABLE12. When my user's do searches on a couple of websites that have long Query Strings, they receive Invalid Response. If you truncate the query string the query works just fine. If you do the same query, without using the proxy, they work just fine. I have also placed this website in the no_cache group, so we are not caching any information for this website. Any help I can get would greatly be appreciated. Thanks in advance. Shawn
[squid-users] RE: The redirector helpers are crashing too rapidly, need help!
Look in squidGuard.log for the reason SG is crashing. Fix that, and squid will stay up too. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mark Adams Sent: Wednesday, November 09, 2005 11:52 AM To: squidguard@squidguard.org Subject: The redirector helpers are crashing too rapidly, need help! I am trying to implement squidGuard (1.2.0 Sleepycat Software: Berkeley DB 4.1.25: (September 17, 2004)) on a server under Squid Cache version 2.5.STABLE9 for i586-mandrake-linux. I will paste in config files below for your reference. My problem is that when I configure squid to start squidGuard, then restart the squid service, squid does not run at all. Normal startup, no squidGuard: # ps auwx|grep squid root 6219 0.0 0.1 5264 1492 ?Ss 08:38 0:00 squid -D squid 6221 0.0 0.5 8360 5228 ?S08:38 0:00 (squid) -D squid 6224 0.0 0.0 1256 264 ?Ss 08:38 0:00 (unlinkd) root 6262 0.0 0.0 1760 600 pts/0R+ 08:58 0:00 grep squid Startup with squidGuard active (redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf -C all): # ps auwx|grep squid root 6314 0.0 0.1 5264 1492 ?Ss 09:00 0:00 squid -D squid 6360 43.0 0.0 00 ?Rs 09:00 0:01 [squidGuard] squid 6361 0.6 0.1 6044 1580 ?Rs 09:00 0:00 (squidGuard) -c /etc/squid/squidGuard.conf -C all squid 6363 0.3 0.1 5512 1468 ?Rs 09:00 0:00 (squidGuard) -c /etc/squid/squidGuard.conf -C all squid 6364 7.3 0.1 6440 1996 ?Ds 09:00 0:00 (squidGuard) -c /etc/squid/squidGuard.conf -C all squid 6368 7.0 0.1 6440 1996 ?Rs 09:00 0:00 (squidGuard) -c /etc/squid/squidGuard.conf -C all squid 6369 0.3 0.1 4840 1360 ?Rs 09:00 0:00 (squidGuard) -c /etc/squid/squidGuard.conf -C all root 6372 0.0 0.0 1760 596 pts/0R+ 09:00 0:00 grep squid Then after about 30 seconds: # ps auwx|grep squid root 6406 0.0 0.0 1760 604 pts/0S+ 09:01 0:00 grep squid And of course, the proxy is unreachable. ===Here is the log under failure: # tail -100 /var/log/squid/cache.log 2005/11/09 09:00:30| Unlinkd pipe opened on FD 20 2005/11/09 09:00:30| Swap maxSize 102400 KB, estimated 7876 objects 2005/11/09 09:00:30| Target number of buckets: 393 2005/11/09 09:00:30| Using 8192 Store buckets 2005/11/09 09:00:30| Max Mem size: 8192 KB 2005/11/09 09:00:30| Max Swap size: 102400 KB 2005/11/09 09:00:30| Rebuilding storage in /var/spool/squid (CLEAN) 2005/11/09 09:00:30| Using Least Load store dir selection 2005/11/09 09:00:30| Set Current Directory to /var/spool/squid 2005/11/09 09:00:30| Loaded Icons. 2005/11/09 09:00:30| Accepting HTTP connections at 0.0.0.0, port 8080, FD 22. 2005/11/09 09:00:30| Accepting HTTP connections at 0.0.0.0, port 3128, FD 23. 2005/11/09 09:00:30| Accepting ICP messages at 0.0.0.0, port 3130, FD 24. 2005/11/09 09:00:30| Accepting HTCP messages on port 4827, FD 25. 2005/11/09 09:00:30| Accepting SNMP messages on port 3401, FD 26. 2005/11/09 09:00:30| WCCP Disabled. 2005/11/09 09:00:30| Ready to serve requests. 2005/11/09 09:00:30| Done reading /var/spool/squid swaplog (1227 entries) 2005/11/09 09:00:30| Finished rebuilding storage from disk. 2005/11/09 09:00:30| 1227 Entries scanned 2005/11/09 09:00:30| 0 Invalid entries. 2005/11/09 09:00:30| 0 With invalid flags. 2005/11/09 09:00:30| 1227 Objects loaded. 2005/11/09 09:00:30| 0 Objects expired. 2005/11/09 09:00:30| 0 Objects cancelled. 2005/11/09 09:00:30| 0 Duplicate URLs purged. 2005/11/09 09:00:30| 0 Swapfile clashes avoided. 2005/11/09 09:00:30| Took 0.3 seconds (4206.2 objects/sec). 2005/11/09 09:00:30| Beginning Validation Procedure 2005/11/09 09:00:30| Completed Validation Procedure 2005/11/09 09:00:30| Validated 1227 Entries 2005/11/09 09:00:30| store_swap_size = 14792k 2005/11/09 09:00:31| WARNING: redirector #1 (FD 7) exited 2005/11/09 09:00:32| storeLateRelease: released 0 objects 2005/11/09 09:00:32| WARNING: redirector #2 (FD 8) exited 2005/11/09 09:00:32| WARNING: redirector #3 (FD 9) exited 2005/11/09 09:00:32| WARNING: redirector #8 (FD 14) exited 2005/11/09 09:00:33| WARNING: redirector #5 (FD 11) exited 2005/11/09 09:00:33| Too few redirector processes are running 2005/11/09 09:00:33| storeDirWriteCleanLogs: Starting... 2005/11/09 09:00:33| Finished. Wrote 1227 entries. 2005/11/09 09:00:33| Took 0.0 seconds (1088731.1 entries/sec). FATAL: The redirector helpers are crashing too rapidly, need help! SquidGuard.conf (expurgated of all #comments): hosts_file /etc/hosts auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours refresh_pattern
RE: [squid-users] Long Query String results in Invalid response
Attached is a sample query string and error response. GET /articles/asearch.html?which_index=bothmeta-dc=10func=simple_searchfi eld-Name=stowecollection-label=black+history+monthcollection-label=wom ens+history+monthcollection-label=asian+pacific+american+heritage+month collection-label=hispanic+heritage+monthcollection-label=american+indi an+heritagecollection-text=Black+Historycollection-text=Women%27s+Hist orycollection-text=Asian+Pacific+American+Heritagecollection-text=Hisp anic+Heritagecollection-text=American+Indian+Heritageupdate-version=Fe b.+2000update-version=June+2000update-version=Sept.+2000update-versio n=Jan.+2001update-version=Apr.+2001update-version=July+2001update-ver sion=Oct.+2001update-version=Jan.+2002update-version=Apr.+2002update- version=July+2002update-version=Oct.+2002update-version=Jan.+2003upda te-version=Apr.+2003update-version=Aug.+2003update-version=Dec.+2003u pdate-version=Apr.+2004update-version=July+2004update-version=Feb.+200 5update-version=Sept.+2005subj_name= HTTP/1.0 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Referer: http://www.anb.org/subscriber-home.html Accept-Language: en-us Proxy-Connection: Keep-Alive User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) Host: www.anb.org Cookie: anb=carvlib:aNbcUGjoLMuAk:1131560733 The following error was encountered: Invalid Response -Original Message- From: Sears, Shawn [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 09, 2005 1:15 PM To: squid-users@squid-cache.org Subject: [squid-users] Long Query String results in Invalid response I am running 2.5.STABLE12. When my user's do searches on a couple of websites that have long Query Strings, they receive Invalid Response. If you truncate the query string the query works just fine. If you do the same query, without using the proxy, they work just fine. I have also placed this website in the no_cache group, so we are not caching any information for this website. Any help I can get would greatly be appreciated. Thanks in advance. Shawn
[squid-users] RE: Urgent Samba / Squid NTLM Auth Problems
Dave Raven wrote: Okay I have an update with more progress - it seems the problem is only to do with ntlmssp. If I only have a basic authenticator - which looks like the following, it works perfectly: However, when I use ntlmssp in the squid config, shown below, it does not work: auth_param ntlm program /usr/optec/ntlm_auth.sh ntlmssp auth_param ntlm children 10 auth_param ntlm use_ntlm_negotiate yes I see the following debug messages: [2005/11/09 13:22:37, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[ianb] domain=[MASTERMIND] workstation=[LUCY] len1=24 len2=24 [2005/11/09 13:22:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] If I type ian instead of ianb, I see an error saying the user does not exist. This must mean that somehow the wrong password is being passed in the wrong way - even though it is typed right. For anyone who hasn't read the rest of this thread please note: this only happens with the security option on the AD server set to ONLY allow NTLMv2/LMv2 and not anything else. If we turn that off it works perfectly... It looks like this might be a Samba issue - Ian had stated that if only NTLMv2 is allowed, then Samba can't even join the domain. I would suggest taking this to the Samba list. Adam
RE: [squid-users] Getting error Too few basicauthenticator processes are running
-Original Message- From: ads squid [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 09, 2005 3:42 AM To: squid-users@squid-cache.org Subject: [squid-users] Getting error Too few basicauthenticator processes are running Hi, I am trying to configure squid version squid-2.5.STABLE12 as follows : [EMAIL PROTECTED] squid-2.5.STABLE12]# /usr/local/squid/sbin/squid -NCd1 I am getting following error 2005/11/09 18:03:40| Accepting HTTP connections at 0.0.0.0, port 3128, FD 15. 2005/11/09 18:03:40| WCCP Disabled. 2005/11/09 18:03:40| Ready to serve requests. 2005/11/09 18:03:41| WARNING: basicauthenticator #1 (FD 6) exited 2005/11/09 18:03:41| WARNING: basicauthenticator #2 (FD 7) exited 2005/11/09 18:03:41| WARNING: basicauthenticator #3 (FD 8) exited 2005/11/09 18:03:41| Too few basicauthenticator processes are running FATAL: The basicauthenticator helpers are crashing too rapidly, need help! Aborted I have configured squid with minimum options as follows: [EMAIL PROTECTED] squid-2.5.STABLE12]# ./configure --enable-basic-auth-helpers=LDAP,NCSA,PAM,SMB,SASL,MSNT . Please help me to solve the problem. I want to use basic authentication. Thanks for support. What does your auth_param line look like? Chris
[squid-users] Re: Urgent Samba / Squid NTLM Auth Problems
Abbas Salehi wrote: I succeeded to joined to the domain and active directory , i can see the domain users and groups net ads testjoin Join is OK net ads join administrator Joined 'squid-server' to realm 'TEST.COM' But ntlm_auth does not work properly, I have following error when i run it : ntlm_auth --username=administrator password: ** NT_STATUS_CANT_ACCESS_DOMAIN_INFO: NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da) Since you seem to be using Samba 3.x, make sure you are using the ntlm_auth helper that comes with Samba, not the helper that comes with Squid (which is for Samba 2.x only). Adam
[squid-users] Re: Binding IP address to username
Pieter De Wit wrote: I would like to know how I can bind an IP address to a username in squid. So let's say I have a user called user1 and a machine on IP 1.2.3.4. I would like squid to log any requests that come from 1.2.3.4 as if the user user1 logged in. So you want Squid to accept requests from a certain IP, but log them as if a certain user had authenticated instead? Squid can't do this. Adam
RE: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems
Hi Adam, We are currently talking to samba, but we are able to join the domain. Where we sit right now is that if we use -basic instead of -ntlmssp it works fine. I've narrowed it down to the password that's the problem - its obtaining the user, domain and workstation just fine. All the command line tools work perfectly - only when using auth_param ntlm * does it fail... As far as I have been able to understand it, there is either a problem with the way squid is passing the reply to the ntlm challenge to the helper, or a problem with the helper... At the moment I'll take any options that are possible... -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Adam Aube Sent: 09 November 2005 09:12 PM To: squid-users@squid-cache.org Subject: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems Dave Raven wrote: Okay I have an update with more progress - it seems the problem is only to do with ntlmssp. If I only have a basic authenticator - which looks like the following, it works perfectly: However, when I use ntlmssp in the squid config, shown below, it does not work: auth_param ntlm program /usr/optec/ntlm_auth.sh ntlmssp auth_param ntlm children 10 auth_param ntlm use_ntlm_negotiate yes I see the following debug messages: [2005/11/09 13:22:37, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[ianb] domain=[MASTERMIND] workstation=[LUCY] len1=24 len2=24 [2005/11/09 13:22:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] If I type ian instead of ianb, I see an error saying the user does not exist. This must mean that somehow the wrong password is being passed in the wrong way - even though it is typed right. For anyone who hasn't read the rest of this thread please note: this only happens with the security option on the AD server set to ONLY allow NTLMv2/LMv2 and not anything else. If we turn that off it works perfectly... It looks like this might be a Samba issue - Ian had stated that if only NTLMv2 is allowed, then Samba can't even join the domain. I would suggest taking this to the Samba list. Adam
RE: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems
Hi Adam, We are currently talking to samba, but we are able to join the domain. Where we sit right now is that if we use -basic instead of -ntlmssp it works fine. I've narrowed it down to the password that's the problem - its obtaining the user, domain and workstation just fine. All the command line tools work perfectly - only when using auth_param ntlm * does it fail... As far as I have been able to understand it, there is either a problem with the way squid is passing the reply to the ntlm challenge to the helper, or a problem with the helper... At the moment I'll take any options that are possible... -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Adam Aube Sent: 09 November 2005 09:12 PM To: squid-users@squid-cache.org Subject: [squid-users] RE: Urgent Samba / Squid NTLM Auth Problems Dave Raven wrote: Okay I have an update with more progress - it seems the problem is only to do with ntlmssp. If I only have a basic authenticator - which looks like the following, it works perfectly: However, when I use ntlmssp in the squid config, shown below, it does not work: auth_param ntlm program /usr/optec/ntlm_auth.sh ntlmssp auth_param ntlm children 10 auth_param ntlm use_ntlm_negotiate yes I see the following debug messages: [2005/11/09 13:22:37, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[ianb] domain=[MASTERMIND] workstation=[LUCY] len1=24 len2=24 [2005/11/09 13:22:37, 3] utils/ntlm_auth.c:winbind_pw_check(427) Login for user [EMAIL PROTECTED] failed due to [Wrong Password] If I type ian instead of ianb, I see an error saying the user does not exist. This must mean that somehow the wrong password is being passed in the wrong way - even though it is typed right. For anyone who hasn't read the rest of this thread please note: this only happens with the security option on the AD server set to ONLY allow NTLMv2/LMv2 and not anything else. If we turn that off it works perfectly... It looks like this might be a Samba issue - Ian had stated that if only NTLMv2 is allowed, then Samba can't even join the domain. I would suggest taking this to the Samba list. Adam
[squid-users] RE: RE: Urgent Samba / Squid NTLM Auth Problems
Dave Raven wrote: We are currently talking to samba, but we are able to join the domain. Where we sit right now is that if we use -basic instead of -ntlmssp it works fine. I've narrowed it down to the password that's the problem - its obtaining the user, domain and workstation just fine. All the command line tools work perfectly - only when using auth_param ntlm * does it fail... As far as I have been able to understand it, there is either a problem with the way squid is passing the reply to the ntlm challenge to the helper, or a problem with the helper... You can test plaintext and challenge/response authentication from the command line using wbinfo: wbinfo -a username%password You should get success for both plaintext and challenge/response. If not, then you know the problem is with Samba, rather than Squid or ntlm_auth. Adam
[squid-users] squid_ldap_auth and Windows 2003 AD
We have a few production squid proxy servers running various STABLE versions of squid 2.5 and are encountering some issues as we upgrade our Domain controllers from windows 2000 to windows 2003. The proxy servers query the LDAP directory for user access control. Ideally, we would like all proxy servers to use a base dn that allows them to search the entire domain (dn=domain,dn=lan), when querying Windows 2000 domain controllers this works perfectly. However, when we point these proxy servers to Windows 2003 domain controllers for LDAP queries squid_ldap_auth fails. I have found that if I specify an ou for the base dn it works fine (ou=site1,dn=domain,dn=lan). So, it seems that Windows 2003 domain controllers have added security that stops searches beginning from the base of the domain and searches must start within an ou. Has anyone encountered this? Are there any fixes that anyone is aware of? Any help is greatly appreciated. Thanks, Colin
Re: [squid-users] squid_ldap_auth and Windows 2003 AD
Hi, At 22.25 09/11/2005, Colin Farley wrote: So, it seems that Windows 2003 domain controllers have added security that stops searches beginning from the base of the domain and searches must start within an ou. Has anyone encountered this? Are there any fixes that anyone is aware of? Any help is greatly appreciated. Correct, look here: http://support.microsoft.com/default.aspx?scid=326690 Regards Guido - Guido Serassio Acme Consulting S.r.l. - Microsoft Certified Partner Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY Tel. : +39.011.9530135 Fax. : +39.011.9781115 Email: [EMAIL PROTECTED] WWW: http://www.acmeconsulting.it/
RE: AW: [squid-users] Squid unreachable every hour and 6 minutes.
Hello, Thanks for your help : proxy1:~# crontab -l 0 0 * * * /etc/webmin/webalizer/webalizer.pl /cache_log/access.log proxy1:~# more /etc/crontab SHELL=/bin/sh PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin # m h dom mon dow user command 17 ** * * rootrun-parts --report /etc/cron.hourly 1 0 * * * roottest -x /usr/sbin/anacron || run-parts --report /etc/cron.daily 47 6* * 7 roottest -x /usr/sbin/anacron || run-parts --report /etc/cron.weekly 52 61 * * roottest -x /usr/sbin/anacron || run-parts --report /etc/cron.monthly proxy1:~# ls /etc/cron.hourly/ proxy1:~# The server is a compaq DL580 (2*Xeon700Mhz, 1G of Ram, Raid 5: 32G), working on Debian L.G. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 16:53 To: squid-users@squid-cache.org Subject: Re: AW: [squid-users] Squid unreachable every hour and 6 minutes. The disk space is over limit error is not saying the disk is full. The cache has reached the limit that's been set in the squid.conf file. It could be causing squid to die, but how likely is it that this would be the cause, if squid dies 6 minutes after every hour? My suggestion is to check and see what cron jobs are running: cat /etc/crontab or (as root): crontab -l and then crontab -l any other users that might be running cron jobs If there's a timely pattern to the connectivity issue, the root of the problem probably has something to do with a schedule for something. Cron would be a good place to start. On the disk space is over limit issue... You really shouldn't have to tend to this. Squid should use whatever replacement policy was specified at compile time (forget which one is default if none is specified) To remove old/unused cache objects in an effort to free up space. However, if squid is trying to do this, and is actively handling proxy requests at the same time, squid could be running out of resources. What specs do you have on this machine? CPU/Ram/etc. Tim Rainier Information Services, Kalsec, INC [EMAIL PROTECTED] [EMAIL PROTECTED] 11/09/2005 09:45 AM To [EMAIL PROTECTED], [EMAIL PROTECTED], squid-users@squid-cache.org cc Subject AW: [squid-users] Squid unreachable every hour and 6 minutes. Please repeat that again. (1) stop squid (2) find out wht are the cache directories squid uses, for example # grep cache_dir squid.conf cache_dir ufs /data1/squid_cache 6000 32 512 cache_dir ufs /data2/squid_cache 1 32 512 # In this example /data1/squid_cache and /data2/squid_cache are the cache dirs. (3) Clean all cache dirs - in this example: cd /data1/squid_cache rm -f * cd /data2/squid_cache rm -f * (3) create the cache structures again: squid -z (4) Start squid. What happens? Is squid running? ps -ef | grep squid What does cache.log say since starting of squid? Is squid reachable? (5) What happens after 1 hour an 6 minutes? Werner Rost -Ursprüngliche Nachricht- Von: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 9. November 2005 15:10 An: Dave Raven; squid-users@squid-cache.org Betreff: RE: [squid-users] Squid unreachable every hour and 6 minutes. I already tried to : - Stop Squid, delete swap.state, restart squid - Stop Squid, format my cache parition, squid -z, start squid - change cache_dir ufs /cache 5000 16 256 to cache_dir ufs /cache 100 16 256, squid -k restart. - reboot completely the server But nothing worked. -Original Message- From: Dave Raven [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 9. November 2005 14:58 To: Gix, Lilian (CI/OSR) *; squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Try use my method posted earlier to search for code files. The fact that your log suddenly shows squid restarting means it died unexpectedly. If there is a core file it'll be squids problem - if not its probably something else causing the problem. Also, you should try clean out your cache_dir potentially... Remove everything and run squid -z to recreate it -Original Message- From: Gix, Lilian (CI/OSR) * [mailto:[EMAIL PROTECTED] Sent: 09 November 2005 03:32 PM To: Mike Cudmore Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid unreachable every hour and 6 minutes. Great, thanks for your answer and questions : 1- I have a message form my browser (IE, Firefox) witch says the proxy is unreachable. My MSN, yahoo messengers loose their access. 2- Ping like all other services still work perfectly. (SSH, Apache, Ping,...) 3- Cache.log part is on the previous mail. You can see that there is nothing special between 09:44:45 and 10:07:05 (when squid come back) Thanks for help. L.G.
