Re: [squid-users] Heavy load squid with high CPU utilization...

2011-03-24 Thread david

On Tue, 22 Mar 2011, George Herbert wrote:


On Tue, Mar 22, 2011 at 7:27 PM, Marcus Kool
marcus.k...@urlfilterdb.com wrote:

Dejan,

Squid is known to be CPU bound under heavy load and the
Quad core running at 1.6 GHz in not the fastest.
A 3.2 GHz dual core will give you double speed.


Second this.  CPU speed - perf wasn't quite linear when I was testing
that but was certainly highly improved with 2.4 and 2.6 and 3.0 GHz
CPUs.


although I will point out that just clock speed is not everything. I did a 
bunch of tests last week with different cpu speeds and found that 
different generations of chips were very different, to the point where a 
2.3GHz core (in a 2x4-core opteron system) gave me approximatly double the 
performance of a 2.6GHz core (in a 2x2-core opteron system) or a 3GHz core 
(in a 1x1-core opteron system)


David Lang


[squid-users] Slow performance when enable NTLM auth

2011-03-24 Thread Francisco José Márquez Gómez

Hi friends,

I'm suffering a speed problem when I use NTLM for auth users. If I use 
basic auth, all work fine and webpages load almost instantaneous, but 
when I enable NTLM, same webpages can took 10-30seconds to load it


I've found some similar cases, but nobody know a solution:
-
http://www.linuxforums.org/forum/servers/165500-squid-very-slow-using-ntlm.html
http://readlist.com/lists/squid-cache.org/squid-users/7/35240.html

I've used this guide for setup my server:
-
http://wiki.squid-cache.org/ConfigExamples/Authenticate/NtlmCentOS5

My unique changes over squid.conf are this:
--

cache_effective_group wbpriv

auth_param ntlm program /usr/bin/ntlm_auth 
--helper-protocol=squid-2.5-ntlmssp

auth_param ntlm children 50
auth_param ntlm keep_alive on

# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

acl chglan src 10.31.32.0/24

acl ntlm proxy_auth REQUIRED
http_access allow chglan ntlm
-

and as say the previous mentioned guide, I launch authconfig for setup 
winbind and samba.


Somebody can help me?? Is mandatory for me can remove the stupid 
authentication popup wich show all browser for proxy authentication.
Prior to squid, we were using MS ISA server and now, users are 
constantly crying because his browsers shows authentication popups each 
time they open it...


Regards,
F.J

---
More info:



HW:

VMware ESX virtual machine with:
- 1 vProcesor (2Ghz reserved)
- 4GB of RAM
- 10GB of HD
- vNIC Gigabit

SO:
-
Red Hat Enterprise Linux 5.6 x86_64
Linux proxy.domain 2.6.18-238.5.1.el5 #1 SMP Mon Feb 21 05:52:39 EST 
2011 x86_64 x86_64 x86_64 GNU/Linux


Squid:
-
Squid Cache: Version 2.6.STABLE21
configure options:  '--build=x86_64-redhat-linux-gnu' 
'--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' 
'--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' 
'--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' 
'--includedir=/usr/include' '--libdir=/usr/lib64' 
'--libexecdir=/usr/libexec' '--sharedstatedir=/usr/com' 
'--mandir=/usr/share/man' '--infodir=/usr/share/info' 
'--exec_prefix=/usr' '--bindir=/usr/sbin' 
'--libexecdir=/usr/lib64/squid' '--localstatedir=/var' 
'--datadir=/usr/share' '--sysconfdir=/etc/squid' '--enable-arp-acl' 
'--enable-epoll' '--enable-snmp' '--enable-removal-policies=heap,lru' 
'--enable-storeio=aufs,coss,diskd,null,ufs' '--enable-ssl' 
'--with-openssl=/usr/kerberos' '--enable-delay-pools' 
'--enable-linux-netfilter' '--with-pthreads' 
'--enable-ntlm-auth-helpers=SMB,fakeauth' 
'--enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group' 
'--enable-auth=basic,digest,ntlm,negotiate' 
'--enable-negotiate-auth-helpers=squid_kerb_auth' 
'--enable-digest-auth-helpers=password' '--with-winbind-auth-challenge' 
'--enable-useragent-log' '--enable-referer-log' 
'--disable-dependency-tracking' '--enable-cachemgr-hostname=localhost' 
'--enable-underscores' 
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL' 
'--enable-cache-digests' '--enable-ident-lookups' 
'--enable-follow-x-forwarded-for' '--enable-wccpv2' '--enable-fd-config' 
'--with-maxfd=16384' 'build_alias=x86_64-redhat-linux-gnu' 
'host_alias=x86_64-redhat-linux-gnu' 
'target_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-D_FORTIFY_SOURCE=2 -fPIE 
-Os -g -pipe -fsigned-char' 'LDFLAGS=-pie'


package info:

Name   : squid
Arch   : x86_64
Epoch  : 7
Version: 2.6.STABLE21
Release: 6.el5
Size   : 3.7 M
Repo   : installed


Samba:

Name   : samba3x
Arch   : x86_64
Version: 3.5.4
Release: 0.70.el5_6.1
Size   : 5.9 M
Repo   : rhel-x86_64-server-5 (not installed)

Name   : samba3x-common
Arch   : x86_64
Version: 3.5.4
Release: 0.70.el5_6.1
Size   : 49 M
Repo   : installed

Name   : samba3x-winbind
Arch   : x86_64
Version: 3.5.4
Release: 0.70.el5_6.1
Size   : 12 M
Repo   : installed



mgr:info output (is not real scenario, currently only few user are using 
it, so the load is very low, but even so, the performance is very poor):

---
squidclient -p 3128 mgr:info
HTTP/1.0 200 OK
Server: squid/2.6.STABLE21
Date: Thu, 24 Mar 2011 09:42:22 GMT
Content-Type: text/plain
Expires: Thu, 24 Mar 2011 09:42:22 GMT
Last-Modified: Thu, 24 Mar 2011 09:42:22 GMT
X-Cache: MISS from proxy.domain
X-Cache-Lookup: MISS from proxy.domain:3128
Via: 1.0 fresneda.chg:3128 (squid/2.6.STABLE21)
Proxy-Connection: close

Squid Object Cache: Version 2.6.STABLE21
Start Time: Thu, 24 Mar 2011 

Re: [squid-users] Heavy load squid with high CPU utilization...

2011-03-24 Thread Marcello Romani

Il 22/03/2011 20.30, Dejan Zivanic ha scritto:

acl kroz-adsl url_regex -i /etc/adsl


I'm no squid expert, but url_regex are known to be quit cpu-hungry. How 
many entries does /etc/adsl have ?
Probably moving regex matching to an external daemon would allow to make 
better use of the cpu resources.


HTH

Marcello


[squid-users] R: [squid-users] Re: Configuring SQUID in Windows to authenticate with Active Directory

2011-03-24 Thread Guido Serassio
Hi,

You are using wrong auth_param negotiate options: 

 auth_param negotiate realm Internet-Access
 auth_param negotiate credentialsttl 5 minute

Regards
 

Guido Serassio
Acme Consulting S.r.l.
Microsoft Gold Certified Partner
VMware Professional Partner
Via Lucia Savarino, 110098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135   Fax. : +39.011.9781115
Email: guido.seras...@acmeconsulting.it
WWW: http://www.acmeconsulting.it


 -Messaggio originale-
 Da: Lakshman Liyanage [mailto:one.laksh...@gmail.com]
 Inviato: mercoledì 23 marzo 2011 7.36
 A: squid-users@squid-cache.org
 Oggetto: Fwd: [squid-users] Re: Configuring SQUID in Windows to
 authenticate with Active Directory
 
 -- Forwarded message --
 From: Lakshman Liyanage one.laksh...@gmail.com
 Date: Wed, Mar 23, 2011 at 4:34 PM
 Subject: Re: [squid-users] Re: Configuring SQUID in Windows to
 authenticate with Active Directory
 To: Markus Moeller hua...@moeller.plus.com, squid-users@squid-cache.org
 
 
 Thank You Marcus for reply.
 
 The reason I asked about squid_kerb_auth is  that someone on the list
 (Rafal Zawierta) mentioned that he/she got it to work in Windows
 2008R2 (AD).
 
 Anyway, I tried what you suggested. Now I do not get a logon window in
 the browser for me to enter credentials - instead it throws me Cache
 Access Denied  message.
 
 As I mentioned earlier I am a newbie - so excuse me if I am missing
 obvious.  I have the following lines in my squid.conf:
 
 auth_param negotiate program c:/squid/libexec/mswin_negotiate_auth.exe
 auth_param negotiate children 5
 auth_param negotiate realm Internet-Access
 auth_param negotiate credentialsttl 5 minute
 
 acl password proxy_auth REQUIRED
 http_access allow password
 # http_accesss allow localhost
 
 What am I missing in my .conf?
 
 Many thanks
 
 Lakshman
 On Wed, Mar 23, 2011 at 9:47 AM, Markus Moeller hua...@moeller.plus.com
 wrote:
 
  Look ay Amos's reply.  Three is no squid_kerb_auth on Windows.  You must
 use mswin_negotiate_auth
 
  Markus
 
  Liyanage, Lakshman lakshman.liyan...@jcu.edu.au wrote in message
 news:1997817097853D4CB2B2AD655359FD28051173BF65@SG1RD3XVS171.red003.local.
 ..
 
  Hi All,
 
  Just hoping thise Windows guys will help me with my query below -
 where/how would I find squid_kerb_auth helper  for 2.7?
 
  Thanks
 
  Lakshman
 
  
  From: Liyanage, Lakshman
  Sent: Wednesday, 16 March 2011 10:08 AM
  To: squid-users@squid-cache.org
  Subject: FW: Configuring SQUID in Windows to authenticate with Active
 Directory
 
  Hello All,
 
  I am trying configure SQUID 2.7 in Windows 2008 R2 (Sometime ago, then
 I had to postpone the project for a while) and I posted my cry for help
 here -  for which Rafal responded (see below).
 
  However, I can not see squid_kerb_auth helper  in my SQUID
 installation. Ho do I get this?
 
  Thanks and Regards
 
  L.
  ---
  From: Rafal Zawierta [zawie...@gmail.com]
  Sent: Saturday, 12 February 2011 8:10 PM
  To: Liyanage, Lakshman
  Subject: Re: [squid-users] Configuring SQUID in Windows to authenticate
 with Active Directory
  Hello, try squid_kerb_auth instead ldap. For me it works with AD
 2008R2.
  Regards
  R
 
 
  
  From: Liyanage, Lakshman [lakshman.liyan...@jcu.edu.au]
  Sent: Saturday, 12 February 2011 1:41 PM
  To: squid-users@squid-cache.org
  Subject: [squid-users] Configuring SQUID in Windows to authenticate
 with Active Directory
 
  Hello All,
  I am new to SQUID and hence require some help.
  I have SQUID 2.7 Stable8 installed on a Windows Server 2008 R2. I am
 now trying to configure it to use MS Active Directory. I have the
 following lines  in the .conf file:
  -
  auth_param basic program c:/squid/libexec/squid_ldap_auth -R -b dc=ad-
 mycompany,dc=domain,dc=com -D cn=admin,cn=Users,dc=ad-
 mycompany,dc=domain,dc=com -w password -f sAMAccountName=%s -h
 myipnumber
  auth_param basic children 5
  auth_param basic realm My_Company
  auth_param basic credentialsttl 5 minute
  --
  When I try to start SQUID, Windows throws Error 1067: The process
 terminated unexpectedly at me.  I have a web server/service running on
 port 80 and 443.
  What am I missing here?
  Many many thanks for your help
 
  Lakshman
 
 


Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-24 Thread Francesco

  Site looks okay from here.
  http://redbot.org/?descend=Trueuri=http://itinerari.mondodelgusto.it/

  Of course, there is no page content. Just a flash media object and a
  stat counter.
  So there could be something broken in the site code where the HTTP
  tools can't identify.

Hi Amos,
thank you for your reply!

But, there is a way to tell Squid to let view this, and others, website?
Users complaint that, at home, they can surf this and others site!

Thank you again!!!

Francesco, from Italy




Re: [squid-users] 3.2.0.5 powerpc-apple-darwin9.8.0 - authenticateStateData' was not declared in this scope

2011-03-24 Thread jeffrey j donovan

On Mar 23, 2011, at 11:55 PM, Amos Jeffries wrote:

 On 24/03/11 15:52, jeffrey j donovan wrote:
 Greetings
 things were going so smooth until it hit the build for authentication. 
 system running powerpc-apple-darwin9.8.0 osx 10.5.8
 
 ./configure  --enable-disk-io --enable-storeio  --enable-icmp --enable-ssl 
 --enable-ipfw-transparent --enable-auth --enable-auth-basic 
 --with-filedescriptors=1024
 autostuff libtool stuff
 .
 Making all in auth
 awk -f ../../src/mk-string-arrays.awk  ./AuthType.h  AuthType.cc || (rm -f 
 AuthType.cc ; exit 1)
 /bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  
 -I../.. -I../../include -I../../lib -I../../src -I../../include   
 -I../../libltdl -I.   -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
 -Werror -pipe -D_REENTRANT -g -O2 -MT AuthType.lo -MD -MP -MF 
 .deps/AuthType.Tpo -c -o AuthType.lo AuthType.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT AuthType.lo 
 -MD -MP -MF .deps/AuthType.Tpo -c AuthType.cc  -fno-common -DPIC -o 
 .libs/AuthType.o
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT AuthType.lo 
 -MD -MP -MF .deps/AuthType.Tpo -c AuthType.cc -o AuthType.o/dev/null 21
 mv -f .deps/AuthType.Tpo .deps/AuthType.Plo
 /bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  
 -I../.. -I../../include -I../../lib -I../../src -I../../include   
 -I../../libltdl -I.   -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
 -Werror -pipe -D_REENTRANT -g -O2 -MT Config.lo -MD -MP -MF .deps/Config.Tpo 
 -c -o Config.lo Config.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Config.lo 
 -MD -MP -MF .deps/Config.Tpo -c Config.cc  -fno-common -DPIC -o 
 .libs/Config.o
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Config.lo 
 -MD -MP -MF .deps/Config.Tpo -c Config.cc -o Config.o/dev/null 21
 mv -f .deps/Config.Tpo .deps/Config.Plo
 /bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  
 -I../.. -I../../include -I../../lib -I../../src -I../../include   
 -I../../libltdl -I.   -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
 -Werror -pipe -D_REENTRANT -g -O2 -MT Gadgets.lo -MD -MP -MF 
 .deps/Gadgets.Tpo -c -o Gadgets.lo Gadgets.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Gadgets.lo 
 -MD -MP -MF .deps/Gadgets.Tpo -c Gadgets.cc  -fno-common -DPIC -o 
 .libs/Gadgets.o
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Gadgets.lo 
 -MD -MP -MF .deps/Gadgets.Tpo -c Gadgets.cc -o Gadgets.o/dev/null 21
 mv -f .deps/Gadgets.Tpo .deps/Gadgets.Plo
 /bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  
 -I../.. -I../../include -I../../lib -I../../src -I../../include   
 -I../../libltdl -I.   -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
 -Werror -pipe -D_REENTRANT -g -O2 -MT Scheme.lo -MD -MP -MF .deps/Scheme.Tpo 
 -c -o Scheme.lo Scheme.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Scheme.lo 
 -MD -MP -MF .deps/Scheme.Tpo -c Scheme.cc  -fno-common -DPIC -o 
 .libs/Scheme.o
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Scheme.lo 
 -MD -MP -MF .deps/Scheme.Tpo -c Scheme.cc -o Scheme.o/dev/null 21
 mv -f .deps/Scheme.Tpo .deps/Scheme.Plo
 /bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  
 -I../.. -I../../include -I../../lib -I../../src -I../../include   
 -I../../libltdl -I.   -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
 -Werror -pipe -D_REENTRANT -g -O2 -MT State.lo -MD -MP -MF .deps/State.Tpo 
 -c -o State.lo State.cc
 libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
 -I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
 -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT State.lo 
 -MD -MP -MF 

Re: [squid-users] Slow performance when enable NTLM auth

2011-03-24 Thread Amos Jeffries

On 24/03/11 22:56, Francisco José Márquez Gómez wrote:

Hi friends,

I'm suffering a speed problem when I use NTLM for auth users. If I use
basic auth, all work fine and webpages load almost instantaneous, but
when I enable NTLM, same webpages can took 10-30seconds to load it



NTLM is designed to take 2x the HTTP traffic just to authenticate.
With older Squid such as yours the connections are often closed very 
fast and every re-open has to re-authenticate from scratch.
 Turning persistent connections ON can reduce the load a bit. This is 
not perfect in older squid, just a reduction.



I've found some similar cases, but nobody know a solution:
-

http://www.linuxforums.org/forum/servers/165500-squid-very-slow-using-ntlm.html

http://readlist.com/lists/squid-cache.org/squid-users/7/35240.html



Those read like people noticing the 2x traffic waste.



I've used this guide for setup my server:
-
http://wiki.squid-cache.org/ConfigExamples/Authenticate/NtlmCentOS5

My unique changes over squid.conf are this:
--

cache_effective_group wbpriv


Setting cache_effective_group causes problems with winbind.

 In order for Squid and winbind to operate well together this directive 
must be not-set.


I see that this is a RHEL package. RHEL patch the cache_effective_group 
setting to always have a value. Which prevents your OS security from 
assigning a proxy group for web access AND a winbind_priv group for 
winbind access.

 SOLUTION: self-build a squid without that RHEL patch.

Then on the command line add the Squid low-privilege user to the winbind 
privileges group. Details are here:

http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm#winbind_privileged_pipe_permissions

(mind the wrap)



auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 50
auth_param ntlm keep_alive on

# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

acl chglan src 10.31.32.0/24

acl ntlm proxy_auth REQUIRED
http_access allow chglan ntlm
-



That config looks fine.


and as say the previous mentioned guide, I launch authconfig for setup
winbind and samba.

Somebody can help me?? Is mandatory for me can remove the stupid
authentication popup wich show all browser for proxy authentication.


Removing the popup is not possible. As you have seen even NTLM can do 
popups. This is because the popup is a browser feature to fetch 
credentials when it cannot find any working local ones.
 Single sign-on works for any auth method. It only requires that the 
browser have access to the credentials.


That said the popups are seen with NTLM due to:
 1) the browser cannot retrieve NTLM login credentials from the system.
 2) the credentials the system gave the browser cannot be validated by 
Squid.

 3) some older squid had bugs which would reject good credentials (rare)

winbind privilege problems is a likely reason for (2). That wiki page I 
referenced has a section on testing the setup. Try all that to see if 
you can confirm the problem cause.


incorrect client system configuration is the reason for (1).

(3) is relatively rare. But could be noticed particularly if many 
requests were opened simultaneously. Since it bites on double-auth while 
squid is waiting for an auth response.




Prior to squid, we were using MS ISA server and now, users are
constantly crying because his browsers shows authentication popups each
time they open it...


This behaviour (*one* popup on a new browser session) indicates that the 
users OS is not giving their browser their current machine login to use 
for accessing the proxy. (1) above.



FWIW;
 Microsoft wrote both NTLM specs and ISA proxy. Other software is still 
trying to catch up and cope with their designs. We mostly have the 
browser behaviour as a known thing. There are still issues with things 
that non-browser Microsoft software do when talking to proxies.


To have a closely comparable Squid vs ISA experience you will need 
Squid-3.1.10 or later.



HTH
Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.11
  Beta testers wanted for 3.2.0.5


Re: [squid-users] 3.2.0.5 powerpc-apple-darwin9.8.0 - authenticateStateData' was not declared in this scope

2011-03-24 Thread Amos Jeffries

On 25/03/11 02:12, jeffrey j donovan wrote:


On Mar 23, 2011, at 11:55 PM, Amos Jeffries wrote:


On 24/03/11 15:52, jeffrey j donovan wrote:

Greetings
things were going so smooth until it hit the build for authentication. system 
running powerpc-apple-darwin9.8.0 osx 10.5.8

./configure  --enable-disk-io --enable-storeio  --enable-icmp --enable-ssl 
--enable-ipfw-transparent --enable-auth --enable-auth-basic 
--with-filedescriptors=1024
autostuff libtool stuff
.
Making all in auth
awk -f ../../src/mk-string-arrays.awk   ./AuthType.h   AuthType.cc || (rm -f 
AuthType.cc ; exit 1)
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT AuthType.lo -MD -MP -MF .deps/AuthType.Tpo -c -o AuthType.lo AuthType.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT AuthType.lo 
-MD -MP -MF .deps/AuthType.Tpo -c AuthType.cc  -fno-common -DPIC -o 
.libs/AuthType.o
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src 
-I../../include -I../../libltdl -I. -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
-Werror -pipe -D_REENTRANT -g -O2 -MT AuthType.lo -MD -MP -MF .deps/AuthType.Tpo -c 
AuthType.cc -o AuthType.o/dev/null 21
mv -f .deps/AuthType.Tpo .deps/AuthType.Plo
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT Config.lo -MD -MP -MF .deps/Config.Tpo -c -o Config.lo Config.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Config.lo -MD 
-MP -MF .deps/Config.Tpo -c Config.cc  -fno-common -DPIC -o .libs/Config.o
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src 
-I../../include -I../../libltdl -I. -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
-Werror -pipe -D_REENTRANT -g -O2 -MT Config.lo -MD -MP -MF .deps/Config.Tpo -c Config.cc 
-o Config.o/dev/null 21
mv -f .deps/Config.Tpo .deps/Config.Plo
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT Gadgets.lo -MD -MP -MF .deps/Gadgets.Tpo -c -o Gadgets.lo Gadgets.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Gadgets.lo -MD 
-MP -MF .deps/Gadgets.Tpo -c Gadgets.cc  -fno-common -DPIC -o .libs/Gadgets.o
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src 
-I../../include -I../../libltdl -I. -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
-Werror -pipe -D_REENTRANT -g -O2 -MT Gadgets.lo -MD -MP -MF .deps/Gadgets.Tpo -c 
Gadgets.cc -o Gadgets.o/dev/null 21
mv -f .deps/Gadgets.Tpo .deps/Gadgets.Plo
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT Scheme.lo -MD -MP -MF .deps/Scheme.Tpo -c -o Scheme.lo Scheme.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Scheme.lo -MD 
-MP -MF .deps/Scheme.Tpo -c Scheme.cc  -fno-common -DPIC -o .libs/Scheme.o
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src 
-I../../include -I../../libltdl -I. -Wall -Wpointer-arith -Wwrite-strings -Wcomments 
-Werror -pipe -D_REENTRANT -g -O2 -MT Scheme.lo -MD -MP -MF .deps/Scheme.Tpo -c Scheme.cc 
-o Scheme.o/dev/null 21
mv -f .deps/Scheme.Tpo .deps/Scheme.Plo
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT State.lo -MD -MP -MF .deps/State.Tpo -c -o State.lo State.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT State.lo -MD 
-MP -MF .deps/State.Tpo -c State.cc  -fno-common -DPIC 

Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-24 Thread Amos Jeffries

On 24/03/11 23:44, Francesco wrote:



  Site looks okay from here.
  http://redbot.org/?descend=Trueuri=http://itinerari.mondodelgusto.it/

  Of course, there is no page content. Just a flash media object and a
  stat counter.
  So there could be something broken in the site code where the HTTP
  tools can't identify.


Hi Amos,
thank you for your reply!

But, there is a way to tell Squid to let view this, and others, website?
Users complaint that, at home, they can surf this and others site!


Depends on why they can;t get to it...

 * do they get an HTTP error message from squid loading the base page 
HTML object?

 * does the flash object get pulled in okay?
  - we can look at these and see what is broken if either is a bad 
transfer.


 * does the page content displayed by the flash object not show up or 
otherwise display badly?

  - nothing we can do about this. It is a website bad-code problem.

Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.11
  Beta testers wanted for 3.2.0.5


Re: [squid-users] Squid 3.1.x do not open certain sites

2011-03-24 Thread Francesco
   * do they get an HTTP error message from squid loading the base page
 HTML object?
   * does the flash object get pulled in okay?
- we can look at these and see what is broken if either is a bad
 transfer.

Hi Amos, and thank you again!

The answer is generated by squid and it is: Zero sized reply, when
accessing itinerari.mondodlegusto.it

See you!
Francesco



Re: [squid-users] 3.2.0.5 powerpc-apple-darwin9.8.0 - authenticateStateData' was not declared in this scope

2011-03-24 Thread jeffrey j donovan

On Mar 24, 2011, at 9:53 AM, Amos Jeffries wrote:

 Does the built include/autoconf.h file define USE_AUTH to 1 ?

squid-3.2.0.5 root# cat include/autoconf.h | grep USE_AUTH
#define USE_AUTH 1

same error when i switched to Intel box running 10.6  i686-apple-darwin10.4.2
I ran simple ./configure with no options then make, I did not specify any 
options.

Making all in auth
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT Config.lo -MD -MP -MF .deps/Config.Tpo -c -o Config.lo Config.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Config.lo -MD 
-MP -MF .deps/Config.Tpo -c Config.cc  -fno-common -DPIC -o .libs/Config.o
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Config.lo -MD 
-MP -MF .deps/Config.Tpo -c Config.cc -o Config.o /dev/null 21
mv -f .deps/Config.Tpo .deps/Config.Plo
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT Gadgets.lo -MD -MP -MF .deps/Gadgets.Tpo -c -o Gadgets.lo Gadgets.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Gadgets.lo -MD 
-MP -MF .deps/Gadgets.Tpo -c Gadgets.cc  -fno-common -DPIC -o .libs/Gadgets.o
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Gadgets.lo -MD 
-MP -MF .deps/Gadgets.Tpo -c Gadgets.cc -o Gadgets.o /dev/null 21
mv -f .deps/Gadgets.Tpo .deps/Gadgets.Plo
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT Scheme.lo -MD -MP -MF .deps/Scheme.Tpo -c -o Scheme.lo Scheme.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Scheme.lo -MD 
-MP -MF .deps/Scheme.Tpo -c Scheme.cc  -fno-common -DPIC -o .libs/Scheme.o
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT Scheme.lo -MD 
-MP -MF .deps/Scheme.Tpo -c Scheme.cc -o Scheme.o /dev/null 21
mv -f .deps/Scheme.Tpo .deps/Scheme.Plo
/bin/sh ../../libtool --tag=CXX   --mode=compile g++ -DHAVE_CONFIG_H  -I../.. 
-I../../include -I../../lib -I../../src -I../../include   -I../../libltdl -I.   
-Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g 
-O2 -MT State.lo -MD -MP -MF .deps/State.Tpo -c -o State.lo State.cc
libtool: compile:  g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib 
-I../../src -I../../include -I../../libltdl -I. -Wall -Wpointer-arith 
-Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT State.lo -MD 
-MP -MF .deps/State.Tpo -c State.cc  -fno-common -DPIC -o .libs/State.o
State.cc:4: error: expected constructor, destructor, or type conversion before 
'(' token
State.cc:7: error: variable or field 'authenticateStateFree' declared void
State.cc:7: error: 'authenticateStateData' was not declared in this scope
State.cc:7: error: 'r' was not declared in this scope
make[3]: *** [State.lo] Error 1
make[2]: *** [all-recursive] Error 1
make[1]: *** [all] Error 2
make: *** [all-recursive] Error 1

[squid-users] Store rebuilding is 100% complete?

2011-03-24 Thread Dayo Adewunmi

Hi

My squid crashed when I was playing around with the delay pools. Now 
when I start it up again, my cache.log is full of these 100% store 
rebuilds that go on and on until the disk is full. I've tried 
logrotation, but it's not helping.


cache.log: http://pastebin.com/63e6hw68http://pastebin.com/63e6hw68

2.6.18-1ubuntu3 on Ubuntu 8.04

Thanks

Dayo