Re: [squid-users] Re: Re: Advices for a squid cluster with kerberos auth
Le Tue, 8 Jun 2010 00:21:11 +0100, Markus Moeller hua...@moeller.plus.com a écrit : Hi Emmanuel, Can you resolve proxy.xx.yy and then resolve the ip-address you get to a name ? Markus I couldn't, so I made some PTR records and now I have a working keytab with the following msktuil command line : msktutil -c -b CN=COMPUTERS -s HTTP/proxy.xx.yy -h proxy.xx.yy -k /etc/squid/SQUID.keytab --computer-name proxy --upn HTTP/proxy.xx.yy --server dc1.xx.yy --verbose NTLM auth works great, but not the Kerberos one, with the following lines in squid.conf : auth_param negotiate program /usr/lib/squid/squid_kerb_auth -d auth_param negotiate children 10 auth_param negotiate keep_alive on Here is what I got in cache.log : 2010/06/08 10:02:20| squid_kerb_auth: parseNegTokenInit failed with rc=102 2010/06/08 10:02:20| squid_kerb_auth: gss_acquire_cred() failed: Unspecified GSS failure. Minor code may provide more information. No principal in keytab matches desired name I suppose there is something missing. But what ? Thanks for your help. -- Emmanuel Lesouef
[squid-users] Squid 3.1 and strange Bad header encountered error
Hi Squid users, I think I need some help to understand a new error with squid. :( I've got several squid boxes, all in 3.0 branch (reverse proxy cache). All is ok. Now, I've tried to upgrade one (and only one boxe) to 3.1 branch (Starting Squid Cache version 3.1.3 for x86_64-pc-linux-gnu...). This a debian package of squid. Several times a day, the new squid 3.1 give me theses errors : 2010/06/07 20:14:15| WARNING: HTTP: Invalid Response: Bad header encountered from http://mypeer_example.com/myimg.gif http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif AKA mypeer_example.com http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif.myimg.gif No errors like thos on all other 3.0 squid boxes. No error or warning on the cache peer farm. :( This user seems to have a similar issue. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582270 Any idea ? Best regards. Squid conf : acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 1025-65535 # unregistered ports acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow all icp_access allow all htcp_access deny all http_port 80 vhost cache_peer XXX.YYY.ZZZ.AAA parent 80 0 no-query originserver no-digest cache_peer_domain XXX.YYY.ZZZ.AAA mypeer_example.com http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif hierarchy_stoplist cgi-bin ? cache_mem 6144 MB cache_dir aufs /data/cache 32768 16 256 maximum_object_size 4096 KB maximum_object_size_in_memory 256 KB cache_log /data/logs/squid/cache.log cache_store_log none access_log none refresh_pattern ^ftp: 144020% 10080 refresh_pattern ^gopher:14400% 1440 refresh_pattern (cgi-bin|\?)0 0% 0 refresh_pattern . 0 20% 4320 pconn_timeout 60 seconds read_timeout 5 minutes request_timeout 5 seconds quick_abort_max 0 KB quick_abort_min 0 KB client_db off half_closed_clients off client_persistent_connections on server_persistent_connections on visible_hostname www.mypeer_example.com http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif unique_hostname squid1.mypeer_example.com http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif via off snmp_port 0 snmp_access deny all icp_port 3130 udp_incoming_address 192.168.0.11 udp_outgoing_address 255.255.255.255 coredump_dir /var/spool/squid3 cache_replacement_policy heap LFUDA memory_replacement_policy heap LFUDA
Re: [squid-users] Squid 3.1.4 log rotate by squid user not permitted
David wrote: Hi, I have just installed Squid 3.1.4 on my CentOS 5.4 machine. I started squid using root and have the following 2 lines in squid.conf. cache_effective_user squid cache_effective_group squid When I switch user from root to squid and issue a squid -k rotate, the following error occurred. squid: ERROR: Could not send signal 10 to process 5997: (1) Operation not permitted Log rotation using squid user works in Squid 3.0 and 2.7. Does anyone know the solution for Squid 3.1? Yes, don't run the -k operations as a non-privileged user. Run it as the same user as the master squid instance (root in this case). Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.4
Re: [squid-users] Squid 3.1 and strange Bad header encountered error
David B. wrote: Hi Squid users, I think I need some help to understand a new error with squid. :( I've got several squid boxes, all in 3.0 branch (reverse proxy cache). All is ok. Now, I've tried to upgrade one (and only one boxe) to 3.1 branch (Starting Squid Cache version 3.1.3 for x86_64-pc-linux-gnu...). This a debian package of squid. Several times a day, the new squid 3.1 give me theses errors : 2010/06/07 20:14:15| WARNING: HTTP: Invalid Response: Bad header encountered from http://mypeer_example.com/myimg.gif http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif AKA mypeer_example.com http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif.myimg.gif No errors like thos on all other 3.0 squid boxes. No error or warning on the cache peer farm. :( This user seems to have a similar issue. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582270 Any idea ? Bug in 3.1.3. Resolved in 3.1.4. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.4
Re: [squid-users] Squid 3.1 and strange Bad header encountered error
Le 08/06/2010 11:12, Amos Jeffries a écrit : David B. wrote: Hi Squid users, I think I need some help to understand a new error with squid. :( I've got several squid boxes, all in 3.0 branch (reverse proxy cache). All is ok. Now, I've tried to upgrade one (and only one boxe) to 3.1 branch (Starting Squid Cache version 3.1.3 for x86_64-pc-linux-gnu...). This a debian package of squid. Several times a day, the new squid 3.1 give me theses errors : 2010/06/07 20:14:15| WARNING: HTTP: Invalid Response: Bad header encountered from http://mypeer_example.com/myimg.gif http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif AKA mypeer_example.com http://image.jeuxvideo.com/pics/forums/bt_forum_profil.gif.myimg.gif No errors like thos on all other 3.0 squid boxes. No error or warning on the cache peer farm. :( This user seems to have a similar issue. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582270 Any idea ? Bug in 3.1.3. Resolved in 3.1.4. Amos Thank you Amos !
[squid-users] Re: Squid 3.1.4 log rotate by squid user not permitted
Amos Jeffries squid3 at treenet.co.nz writes: Yes, don't run the -k operations as a non-privileged user. Run it as the same user as the master squid instance (root in this case). Amos I have a cron job setup that login as squid to run the -k rotate. It is best not to login as root. Is there any way around that?
Re: [squid-users] Re: Squid 3.1.4 log rotate by squid user not permitted
David wrote: Amos Jeffries writes: Yes, don't run the -k operations as a non-privileged user. Run it as the same user as the master squid instance (root in this case). Amos I have a cron job setup that login as squid to run the -k rotate. It is best not to login as root. Is there any way around that? Run the cron job on the squid machine directly in the root crontab. Or permit that command with root privileges via sudo in an otherwise restricted account. Sending the signals which -k sends (HUP, QUIT and KILL in particular) from a low-privileged account to a root account process is less secure than requiring login to send the signal. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.4
[squid-users] Reverse proxy from LAN IP as well as domain
Hi All, I've been happily using squid for almost a year. We'll, tbh haven't really touched it since getting the config working, but now I want to make a change I remember just how many config options there are :/ Currently I've been using squid as a reverse proxy based on incoming domain, with parts like:- cache_peer 127.0.0.3 parent 80 0 no-query originserver name=IIS login=PASS cache_peer_domain IIS my.domain.com But now I want to set based on incoming IP, such as local machines off the network will call 192.168.1.5, but putting an IP instead of the domain name doesn't work. I've tried figuring the config but with no luck:( I think it's a simple one for people that know... Thanks Lyle
Re: [squid-users] Reverse proxy from LAN IP as well as domain
Lyle wrote: Hi All, I've been happily using squid for almost a year. We'll, tbh haven't really touched it since getting the config working, but now I want to make a change I remember just how many config options there are :/ Currently I've been using squid as a reverse proxy based on incoming domain, with parts like:- cache_peer 127.0.0.3 parent 80 0 no-query originserver name=IIS login=PASS cache_peer_domain IIS my.domain.com But now I want to set based on incoming IP, such as local machines off the network will call 192.168.1.5, but putting an IP instead of the domain name doesn't work. I've tried figuring the config but with no luck:( I think it's a simple one for people that know... The wiki example config should be almost what you need: http://wiki.squid-cache.org/ConfigExamples/Reverse/BasicAccelerator It is an equivalent for what you have now, just convert your domain match to a dstdomain ACL and add a src ACL as needed. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.4
[squid-users] unrecognized: 'extension_methods'
I'm using Squid v. 3.1.0.17 on Fedora Core 12. In my search to get OWA running I stumbled on the command: extension_methods RPC_IN_DATA RPC_OUT_DATA I opened up my squid.conf and found the tag extension_methods in the config file so I uncommented it and added the RPC_IN_DATA and RPC_OUT_DATA. I then attempted to restart the service and got the error: 2010/06/08 09:55:14| cache_cf.cc(362) parseOneConfigFile: squid.conf:1949 unrecognized: 'extension_methods' Has this been removed and replaced by something else? Weird that it's in the config file and commented out though... I do see that in the docs for 3.1 that extension_methods seems to be missing from the configuration directives. Is there a replacement?
[squid-users] ctx: enter level
I have 2 proxy servers that I have updated to 3.1.4, and have since been seeing errors in the cache.log with the following: ctx: enter level # '?' # is replaced with a number, appears to have started at zero and increments each time the error occurs. ? is replaced with vary text sometimes it's nothing, sometimes it's the requested page, and sometimes its strange characters like Ø. These servers are both outbound web proxies functioning as children to a hosted Web filters proxy server. I upgraded from 3.1.1, compiled with the same options, and running the same configuration files, the error was not occurring prior to the upgrade. Compiled options: ./configure \ --prefix=/usr/local/squid \ --enable-pthreads \ --enable-ssl \ --with-openssl=/usr/local \ --enable-async-io \ --enable-underscores \ --enable-storeio=ufs,aufs \ --enable-delay-pools \ --disable-ipv6 \ Both systems are running FreeBSD 7.1. Any ideas? Thanks, Dean Weimer Network Administrator Orscheln Management Co
RE: [squid-users] Compile Error on FreeBSD 8.0 with Squid 3.1.2 3.1.3
As of 3.1.4 this compiles fine on FreeBSD 8.0, and 7.1. However, the FreeBSD 7.2 system I have still has this problem with 3.1.4. Thanks, Dean Weimer Network Administrator Orscheln Management Co -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, May 04, 2010 6:04 PM To: Kinkie Cc: Dean Weimer; squid-users@squid-cache.org; Squid Developers Subject: Re: [squid-users] Compile Error on FreeBSD 8.0 with Squid 3.1.2 3.1.3 On Tue, 4 May 2010 17:53:31 +0200, Kinkie gkin...@gmail.com wrote: It's already fixed in trunk. Amos, please import changes in revnos 10428 10431. Only impacts system running bdb-4 but not 1.85 10428 is already in and not related to dbh. Did you mean 10432 which reverts a portion of 10431? Amos Kinkie On Tue, May 4, 2010 at 5:44 PM, Dean Weimer dwei...@orscheln.com wrote: I have run into the following compile error on both squid 3.1.2 and squid 3.1.3 on FreeBSD 8.0 using these options for ./configure \ --prefix=/usr/local/squid \ --enable-pthreads \ --enable-ssl \ --with-openssl=/usr/local \ --enable-async-io \ --enable-underscores \ --enable-storeio=ufs,aufs \ --enable-delay-pools \ --disable-ipv6 Squid 3.1.1 Compiles fine on this system, has anyone else ran into this issue or have any ideas as to the cause. Making all in session gcc -DHAVE_CONFIG_H -I../../.. -I../../../include -I../../../src -I../../../include -I. -I/usr/local/include -Wall -Wpointer-arith -Wwrite-strings -Wmissing-prototypes -Wmissing-declarations - Wcomments -Werror -D_REENTRANT -Wall -g -O2 -MT squid_session.o -MD -MP -MF .deps/squid_session.Tpo -c -o squid_session.o squid_session.c cc1: warnings being treated as errors squid_session.c: In function 'init_db': squid_session.c:62: warning: implicit declaration of function 'dbopen' squid_session.c:62: warning: assignment makes pointer from integer without a cast squid_session.c: In function 'shutdown_db': squid_session.c:71: error: too few arguments to function 'db-close' squid_session.c: In function 'session_active': squid_session.c:81: warning: passing argument 2 of 'db-get' from incompatible pointer type squid_session.c:81: error: too few arguments to function 'db-get' squid_session.c:85: warning: passing argument 2 of 'db-del' from incompatible pointer type squid_session.c:85: error: too few arguments to function 'db-del' squid_session.c: In function 'session_login': squid_session.c:103: warning: passing argument 2 of 'db-put' from incompatible pointer type squid_session.c:103: error: too few arguments to function 'db-put' squid_session.c: In function 'session_logout': squid_session.c:111: warning: passing argument 2 of 'db-del' from incompatible pointer type squid_session.c:111: error: too few arguments to function 'db-del' *** Error code 1 Stop in /usr/local/squid-3.1.3/helpers/external_acl/session. *** Error code 1 Stop in /usr/local/squid-3.1.3/helpers/external_acl. *** Error code 1 Stop in /usr/local/squid-3.1.3/helpers. *** Error code 1 Stop in /usr/local/squid-3.1.3. Thanks, Dean Weimer Network Administrator Orscheln Management Co
RE: [squid-users] public squid proxy
Original Message From: Prashant K.S [mailto:ksprash...@yahoo.com] Sent: Monday, June 07, 2010 7:41 PM To: James Zuelow; squid-users@squid-cache.org Subject: Re: [squid-users] public squid proxy Hi James, Thanks a lot for the suggestions. I will definitely give it a try. I have around 1.25 GDB RAM with Pentium 4 processor. Would that be sufficient? Hmm, barely. You'll need to give your Windows server at least 512MB. Your Squid server will only be servicing your test client, so you can pare that back to a minimum. I wouldn't install a fat distro like SuSE or Ubuntu. Instead, get something like Debian and do a base install (at the end of the install wizard, uncheck ALL of the boxes) and then add just Squid and Samba/winbind. The disk image will be very small and you can run that with 256MB RAM. That leaves 512MB for your XP workstation to run in. That is pretty tight, but I think it's doable. You might have to give the Windows machine more RAM during installation. Just dial it back after the install is done. If you can at all get to 2GB of RAM on your XP box that would be better - 512MB for each of the virtual machines with 1GB left over for XP. Can I use VmWare? Which virtualization do you suggest. Oh, up to you. I like VirtualBox. If you already have a Vmware image for Ubuntu, then perhaps Vmware is the way to go. You can try different solutions and choose the one you like best. One thing to consider is which solution is easiest for you to understand the networking configuration. Networking will be critical for your test, so you'll want to be able to understand the virtual network part of it. I have a Windows XP machine and have a Vmware with Ubuntu for the virtual machine? Would that be fine? Sure, that would be fine as long as the Ubuntu image doesn't need too much memory -- right now memory is your limiting factor. You can create a domain with the virtual domain controller. Then set up your virtual squid server, and point it's NTLM to the virtual domain controller. Then you can test your client against the Squid server. Have fun! James
Re: [squid-users] 403 Forbidden from apache server
sön 2010-06-06 klockan 22:49 -0500 skrev Alan Lehman: Trying to access http://www.kswheat.com/ via Squid 3.1.4 as proxy, I get 403 Forbidden, You don't have permission to access / on this server. The web site loads normally if I bypass Squid. It claims to be running Apache 1.3.41. Try configuring Squid with forwarded_for delete or alternatively depending on Squid version request_header_access X-Forwarded-For deny all Regards Henrik
Re: [squid-users] unrecognized: 'extension_methods'
tis 2010-06-08 klockan 10:09 -0500 skrev Johnson, S: 2010/06/08 09:55:14| cache_cf.cc(362) parseOneConfigFile: squid.conf:1949 unrecognized: 'extension_methods' Has this been removed and replaced by something else? Weird that it's in the config file and commented out though... I do see that in the docs for 3.1 that extension_methods seems to be missing from the configuration directives. Is there a replacement? No longer needed at all. Regards Henrik
Re: [squid-users] ctx: enter level
tis 2010-06-08 klockan 10:35 -0500 skrev Dean Weimer: I have 2 proxy servers that I have updated to 3.1.4, and have since been seeing errors in the cache.log with the following: ctx: enter level # '?' # is replaced with a number, appears to have started at zero and increments each time the error occurs. ? is replaced with vary text sometimes it's nothing, sometimes it's the requested page, and sometimes its strange characters like Ø. What is the next message? Regards Henrik
RE: [squid-users] Compile Error on FreeBSD 8.0 with Squid 3.1.2 3.1.3
tis 2010-06-08 klockan 11:13 -0500 skrev Dean Weimer: As of 3.1.4 this compiles fine on FreeBSD 8.0, and 7.1. However, the FreeBSD 7.2 system I have still has this problem with 3.1.4. Odd. What error do you get? Regards Henrik
[squid-users] Re: Re: Re: Advices for a squid cluster with kerberos auth
Hi Emmanuel, You did not use -s GSS_C_NO_NAME as I mentioned in my first mail did you ? Regards Markus Emmanuel Lesouef e.leso...@crbn.fr wrote in message news:20100608100923.7ee7e...@nienor.local... Le Tue, 8 Jun 2010 00:21:11 +0100, Markus Moeller hua...@moeller.plus.com a écrit : Hi Emmanuel, Can you resolve proxy.xx.yy and then resolve the ip-address you get to a name ? Markus I couldn't, so I made some PTR records and now I have a working keytab with the following msktuil command line : msktutil -c -b CN=COMPUTERS -s HTTP/proxy.xx.yy -h proxy.xx.yy -k /etc/squid/SQUID.keytab --computer-name proxy --upn HTTP/proxy.xx.yy --server dc1.xx.yy --verbose NTLM auth works great, but not the Kerberos one, with the following lines in squid.conf : auth_param negotiate program /usr/lib/squid/squid_kerb_auth -d auth_param negotiate children 10 auth_param negotiate keep_alive on Here is what I got in cache.log : 2010/06/08 10:02:20| squid_kerb_auth: parseNegTokenInit failed with rc=102 2010/06/08 10:02:20| squid_kerb_auth: gss_acquire_cred() failed: Unspecified GSS failure. Minor code may provide more information. No principal in keytab matches desired name I suppose there is something missing. But what ? Thanks for your help. -- Emmanuel Lesouef
RE: [squid-users] ctx: enter level
Most of the time another one of them, in the case below its seems to have lost
the connection to the parent proxy, here's the full log since the last
reconfigure done earlier today simply to add a host to a bypass filter list.
2010/06/08 11:01:36| Ready to serve requests.
2010/06/08 12:50:15| ctx: enter level 620: 'lost'
2010/06/08 12:50:15| ctx: enter level 621: 'lost'
2010/06/08 12:50:15| ctx: enter level 622: 'lost'
2010/06/08 12:50:15| ctx: enter level 623: 'lost'
2010/06/08 12:50:15| ctx: enter level 624: 'lost'
2010/06/08 12:50:15| ctx: enter level 625: 'lost'
2010/06/08 12:50:15| ctx: enter level 626: 'lost'
2010/06/08 12:50:15| ctx: enter level 627: 'lost'
2010/06/08 12:50:15| ctx: enter level 628: 'lost'
2010/06/08 12:50:15| ctx: enter level 629: 'lost'
2010/06/08 12:50:15| ctx: enter level 630: 'lost'
2010/06/08 12:50:15| ctx: enter level 631: 'lost'
2010/06/08 12:50:15| ctx: enter level 632: 'lost'
2010/06/08 12:50:15| ctx: enter level 633: 'lost'
2010/06/08 12:50:15| ctx: enter level 634: 'lost'
2010/06/08 12:50:15| ctx: enter level 635: 'lost'
2010/06/08 12:50:15| ctx: enter level 636: 'lost'
2010/06/08 12:50:15| ctx: enter level 637: 'lost'
2010/06/08 12:50:15| ctx: enter level 638: 'lost'
2010/06/08 12:50:15| ctx: enter level 639: 'lost'
2010/06/08 12:50:15| TCP connection to snip/8081 failed
Here's an entry from our other server, this one has a lower load in request
rate, but has a similar load in bandwidth.
2010/06/08 10:19:51| ctx: enter level 102:
'http://cdn.cloudfiles.mosso.com/c71692/templates/coveritlive/images/sound.gif'
2010/06/08 10:19:51| ctx: enter level 103: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 104: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 105: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 106: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 107: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 108: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 109: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 110: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 111: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 112: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 113: 'Ø8^Q^A^H'
2010/06/08 10:19:51| ctx: enter level 114:
'http://tag.admeld.com/match?admeld_adprovider_id=310external_user_id=a8c5a9a8-5e05-11df-b422-00163e03bb53cb=mdmn2credirect=http://ib.adnxs.com/pxj?bidder=12cb=yno94eaction=setuid('a8c5a9a8-5e05-11df-b422-00163e03bb53');redir=http://tap.rubiconproject.com/oz/feeds/triggit/tokens?token=a8c5a9a8-5e05-11df-b422-00163e03bb53expires=180'
I probably should add that both of these proxy servers running 3.1.4 are
parents to a single 3.1.1 proxy server. Both server running 3.1.4 have no disk
cache, System status shows memory consumption and other stats all within
normal ranges.
Thanks,
Dean Weimer
Network Administrator
Orscheln Management Co
-Original Message-
From: Henrik Nordström [mailto:hen...@henriknordstrom.net]
Sent: Tuesday, June 08, 2010 1:00 PM
To: Dean Weimer
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] ctx: enter level
tis 2010-06-08 klockan 10:35 -0500 skrev Dean Weimer:
I have 2 proxy servers that I have updated to 3.1.4, and have since been
seeing errors in the cache.log with the following:
ctx: enter level # '?'
# is replaced with a number, appears to have started at zero and
increments each time the error occurs.
? is replaced with vary text sometimes it's nothing, sometimes it's the
requested page, and sometimes its strange characters like Ø.
What is the next message?
Regards
Henrik
RE: [squid-users] Digest authentication change from previous version?
I could not reproduce the behavior (calling the auth helper on each request) on a vanilla install. Also tested 5 different versions and didn't reproduce it. Must be some odd configuration I have, I'll just wipe it and rebuild. Thanks! David -Original Message- From: Henrik Nordström [mailto:hen...@henriknordstrom.net] Sent: Sunday, June 06, 2010 12:28 PM To: David Parks Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Digest authentication change from previous version? sön 2010-06-06 klockan 09:35 -0600 skrev David Parks: But since there's a change from what I originally found and now I want to validate that this is indeed the _expected behavior_? Anyone familiar with such a change? It's not intentional. Regards Henrik
RE: [squid-users] ctx: enter level
tis 2010-06-08 klockan 13:55 -0500 skrev Dean Weimer: Most of the time another one of them, in the case below its seems to have lost the connection to the parent proxy, here's the full log since the last reconfigure done earlier today simply to add a host to a bypass filter list. 2010/06/08 11:01:36| Ready to serve requests. [..] 2010/06/08 12:50:15| ctx: enter level 635: 'lost' 2010/06/08 12:50:15| ctx: enter level 636: 'lost' 2010/06/08 12:50:15| ctx: enter level 637: 'lost' 2010/06/08 12:50:15| ctx: enter level 638: 'lost' 2010/06/08 12:50:15| ctx: enter level 639: 'lost' 2010/06/08 12:50:15| TCP connection to snip/8081 failed Please file a bug report. Looks like the ctx debugging trace have gone wrong somewhere, not unwinding properly. http://bugs.squid-cache.org/ The ctx is a internal tool to try to provide correct context to debug messages. It's pretty safe to ignore this issue until it's fixed. But may eventually cause some instabilities due to invalid memory reference in the printout. Regards Henrik
RE: [squid-users] Compile Error on FreeBSD 8.0 with Squid 3.1.2 3.1.3
-Original Message- From: Henrik Nordström [mailto:hen...@henriknordstrom.net] Sent: Tuesday, June 08, 2010 1:01 PM To: Dean Weimer Cc: squid-users@squid-cache.org; Squid Developers Subject: RE: [squid-users] Compile Error on FreeBSD 8.0 with Squid 3.1.2 3.1.3 tis 2010-06-08 klockan 11:13 -0500 skrev Dean Weimer: As of 3.1.4 this compiles fine on FreeBSD 8.0, and 7.1. However, the FreeBSD 7.2 system I have still has this problem with 3.1.4. Odd. What error do you get? Regards Henrik Compile options: ./configure \ --prefix=/usr/local/squid \ --enable-pthreads \ --enable-ssl \ --with-openssl=/usr/local \ --enable-async-io \ --enable-underscores \ --enable-storeio=ufs,aufs \ --enable-delay-pools \ --disable-ipv6 End of output form make: Making all in session gcc -DHAVE_CONFIG_H -I../../.. -I../../../include -I../../../src -I../../../include -I. -I/usr/local/include -Wall -Wpointer-arith -Wwrite-strings -Wmissing-prototypes -Wmissing-declarations -Wcomments -Werror -D_REENTRANT -Wall -g -O2 -MT squid_session.o -MD -MP -MF .deps/squid_session.Tpo -c -o squid_session.o squid_session.c cc1: warnings being treated as errors squid_session.c: In function 'init_db': squid_session.c:61: warning: implicit declaration of function 'dbopen' squid_session.c:61: warning: assignment makes pointer from integer without a cast squid_session.c: In function 'shutdown_db': squid_session.c:70: error: too few arguments to function 'db-close' squid_session.c: In function 'session_active': squid_session.c:80: warning: passing argument 2 of 'db-get' from incompatible pointer type squid_session.c:80: error: too few arguments to function 'db-get' squid_session.c:84: warning: passing argument 2 of 'db-del' from incompatible pointer type squid_session.c:84: error: too few arguments to function 'db-del' squid_session.c: In function 'session_login': squid_session.c:102: warning: passing argument 2 of 'db-put' from incompatible pointer type squid_session.c:102: error: too few arguments to function 'db-put' squid_session.c: In function 'session_logout': squid_session.c:110: warning: passing argument 2 of 'db-del' from incompatible pointer type squid_session.c:110: error: too few arguments to function 'db-del' *** Error code 1 Stop in /usr/local/squid-3.1.4/helpers/external_acl/session. *** Error code 1 Stop in /usr/local/squid-3.1.4/helpers/external_acl. *** Error code 1 Stop in /usr/local/squid-3.1.4/helpers. *** Error code 1 Stop in /usr/local/squid-3.1.4. Thanks, Dean Weimer Network Administrator Orscheln Management Co
RE: [squid-users] ctx: enter level
-Original Message- From: Henrik Nordström [mailto:hen...@henriknordstrom.net] Sent: Tuesday, June 08, 2010 2:12 PM To: Dean Weimer Cc: squid-users@squid-cache.org Subject: RE: [squid-users] ctx: enter level tis 2010-06-08 klockan 13:55 -0500 skrev Dean Weimer: Most of the time another one of them, in the case below its seems to have lost the connection to the parent proxy, here's the full log since the last reconfigure done earlier today simply to add a host to a bypass filter list. 2010/06/08 11:01:36| Ready to serve requests. [..] 2010/06/08 12:50:15| ctx: enter level 635: 'lost' 2010/06/08 12:50:15| ctx: enter level 636: 'lost' 2010/06/08 12:50:15| ctx: enter level 637: 'lost' 2010/06/08 12:50:15| ctx: enter level 638: 'lost' 2010/06/08 12:50:15| ctx: enter level 639: 'lost' 2010/06/08 12:50:15| TCP connection to snip/8081 failed Please file a bug report. Looks like the ctx debugging trace have gone wrong somewhere, not unwinding properly. http://bugs.squid-cache.org/ The ctx is a internal tool to try to provide correct context to debug messages. It's pretty safe to ignore this issue until it's fixed. But may eventually cause some instabilities due to invalid memory reference in the printout. Regards Henrik Filed, http://bugs.squid-cache.org/show_bug.cgi?id=2945 Thanks, Dean Weimer Network Administrator Orscheln Management Co
