Squid - Revision history

Tgurr at 16:17, 23 May 2013

2013-05-23T16:17:53Z

← Older revision		Revision as of 18:17, 23 May 2013
Line 209:		Line 209:
	== Issues & Fixes ==		== Issues & Fixes ==

	=== cache.log: WARNING: All 35/35 ntlmauthenticator processes are busy ===		=== cache.log: WARNING: All xx/xx ntlmauthenticator processes are busy ===
	<pre>		<pre>
	2013/05/23 07:47:01 kid1\| WARNING: All 35/35 ntlmauthenticator processes are busy.		2013/05/23 07:47:01 kid1\| WARNING: All 35/35 ntlmauthenticator processes are busy.

Tgurr at 16:17, 23 May 2013

2013-05-23T16:17:02Z

@@ Line 208: / Line 208: @@
 == Issues & Fixes ==
 === cache.log: WARNING! Your cache is running out of filedescriptors ===
 First you need to raise the allowed system limits, see [[File_descriptor|File descriptor]].

Tgurr at 16:12, 23 May 2013

2013-05-23T16:12:26Z

@@ Line 206: / Line 206: @@
 == Testing ==
 {{Root|snmpwalk -Cc -v1 -c public -m /usr/share/squid/mib.txt localhost:3401 .1.3.6.1.4.1.3495}}
 == Further Reading ==
 * [[MRTG]] - Get nice graphs out of your SNMP data

Tgurr at 15:13, 30 April 2013

2013-04-30T15:13:04Z

← Older revision		Revision as of 17:13, 30 April 2013
Line 28:		Line 28:
	== Configuration ==		== Configuration ==
	{{File\|/etc/squid/squid.conf\|		{{File\|/etc/squid/squid.conf\|
	*TAG: ~~auth_param~~		TAG: external_acl_type
	<pre>		<pre>
	# check logged in users group membership using wbinfo from samba		# check logged in users group membership using wbinfo from samba
	external_acl_type NT_global_group children-max=20 ttl=900 %LOGIN /usr/libexec/squid/ext_wbinfo_group_acl		external_acl_type NT_global_group children-max=20 ttl=900 %LOGIN /usr/libexec/squid/ext_wbinfo_group_acl
			</pre>
			*TAG: auth_param
			<pre>
			# NTLM authentification (automatic authentification against AD)
	auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp		auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
	auth_param ntlm children 20 startup=0 idle=1		auth_param ntlm children 20 startup=0 idle=1
	auth_param ntlm keep_alive on		auth_param ntlm keep_alive on
			# Basic authentification (manual user/password authentification against AD)
	auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic		auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
	auth_param basic children 20 startup=5 idle=1		auth_param basic children 20 startup=5 idle=1

Tgurr at 15:08, 30 April 2013

2013-04-30T15:08:50Z

← Older revision		Revision as of 17:08, 30 April 2013
Line 14:		Line 14:
	<pre>		<pre>
	net-proxy/squid kerberos samba snmp		net-proxy/squid kerberos samba snmp
	~~</pre>~~
	}}

	~~== Packages ==~~
	~~{{Code\|emerge squid -pv\|~~
	~~<pre>~~
	~~[ebuild N ] sys-apps/ed-1.5 90 kB~~
	[ebuild N ] net-proxy/squid-3.1.12 USE="epoll ipv6 kerberos pam samba snmp ssl -caps -ecap -icap-client (-ipf-transparent) (-kqueue) -ldap -logrotate -mysql -nis (-pf-transparent) -postgres -radius -sasl (-selinux) -sqlite -test -tproxy -zero-penalty-hit" 3,279 kB
	</pre>		</pre>
	}}		}}
Line 27:		Line 19:
	== Installation ==		== Installation ==
	{{Root\|emerge squid}}		{{Root\|emerge squid}}

			Allow squid to use samba winbind by changing group ownership of the winbindd_privileged directory to the group squid runs under.

	{{Root\|chown root:squid /var/cache/samba/winbindd_privileged}}		{{Root\|chown root:squid /var/cache/samba/winbindd_privileged}}
Line 36:		Line 30:
	*TAG: auth_param		*TAG: auth_param
	<pre>		<pre>
	# ~~The acl helper queries our ADS via Samba~~		# check logged in users group membership using wbinfo from samba
	external_acl_type NT_global_group children=10 ttl=900 %LOGIN /usr/libexec/squid/~~wbinfo_group.pl~~		external_acl_type NT_global_group children-max=20 ttl=900 %LOGIN /usr/libexec/squid/ext_wbinfo_group_acl
	~~# NTLM authentification~~
	auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp		auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
	auth_param ntlm children 5		auth_param ntlm children 20 startup=0 idle=1
	auth_param ntlm keep_alive on		auth_param ntlm keep_alive on
	~~# Basic authentification~~
	auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic		auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
	auth_param basic children 5		auth_param basic children 20 startup=5 idle=1
	auth_param basic realm Squid proxy-caching web server		auth_param basic realm Squid proxy-caching web server
	auth_param basic credentialsttl 2 hours		auth_param basic credentialsttl 2 hours

Tgurr at 14:15, 27 July 2011

2011-07-27T14:15:43Z

← Older revision		Revision as of 16:15, 27 July 2011
Line 11:		Line 11:

	== USE-Flags ==		== USE-Flags ==
	{{~~Box~~ File\|/etc/portage/package.use\|		{{File\|/etc/portage/package.use\|
	<pre>		<pre>
	net-proxy/squid kerberos samba snmp		net-proxy/squid kerberos samba snmp
Line 18:		Line 18:

	== Packages ==		== Packages ==
	{{~~Box~~ Code\|emerge squid -pv\|		{{Code\|emerge squid -pv\|
	<pre>		<pre>
	[ebuild N ] sys-apps/ed-1.5 90 kB		[ebuild N ] sys-apps/ed-1.5 90 kB
Line 26:		Line 26:

	== Installation ==		== Installation ==
	{{~~Codeline~~\|# emerge squid}}		{{Root\|emerge squid}}

	{{~~Codeline~~\|# chown root:squid /var/cache/samba/winbindd_privileged}}		{{Root\|chown root:squid /var/cache/samba/winbindd_privileged}}

	{{~~Codeline~~\|# chmod 750 /var/cache/samba/winbindd_privileged}}		{{Root\|chmod 750 /var/cache/samba/winbindd_privileged}}

	== Configuration ==		== Configuration ==
	{{~~Box~~ File\|/etc/squid/squid.conf\|		{{File\|/etc/squid/squid.conf\|
	*TAG: auth_param		*TAG: auth_param
	<pre>		<pre>
Line 203:		Line 203:

	== Finalize ==		== Finalize ==
	{{~~Codeline~~\|# /etc/init.d/squid start}}		{{Root\|/etc/init.d/squid start}}

	{{~~Codeline~~\|# rc-update add squid default}}		{{Root\|rc-update add squid default}}

	== Testing ==		== Testing ==
	{{~~Codeline~~\|# snmpwalk -Cc -v1 -c public -m /usr/share/squid/mib.txt localhost:3401 .1.3.6.1.4.1.3495}}		{{Root\|snmpwalk -Cc -v1 -c public -m /usr/share/squid/mib.txt localhost:3401 .1.3.6.1.4.1.3495}}

	== Further Reading ==		== Further Reading ==
	* [[MRTG]] - Get nice graphs out of your SNMP data		* [[MRTG]] - Get nice graphs out of your SNMP data

Tgurr: /* Packages */

2011-05-05T10:29:17Z

Packages

← Older revision		Revision as of 12:29, 5 May 2011
Line 18:		Line 18:

	== Packages ==		== Packages ==
	{{Box Code\|emerge ~~samba~~ -pv\|		{{Box Code\|emerge squid -pv\|
	<pre>		<pre>
	[ebuild N ] sys-apps/ed-1.5 90 kB		[ebuild N ] sys-apps/ed-1.5 90 kB

Tgurr: /* Packages */

2011-05-05T10:29:01Z

Packages

← Older revision		Revision as of 12:29, 5 May 2011
Line 20:		Line 20:
	{{Box Code\|emerge samba -pv\|		{{Box Code\|emerge samba -pv\|
	<pre>		<pre>
	[ebuild N ] net-proxy/squid-3.0.~~4-r1~~ USE="pam samba snmp ssl -icap-client (-ipf-transparent) -ldap -logrotate -nis (-pf-transparent) -radius -sasl (-selinux)" 2,~~361~~ kB		[ebuild N ] sys-apps/ed-1.5 90 kB
			[ebuild N ] net-proxy/squid-3.1.12 USE="epoll ipv6 kerberos pam samba snmp ssl -caps -ecap -icap-client (-ipf-transparent) (-kqueue) -ldap -logrotate -mysql -nis (-pf-transparent) -postgres -radius -sasl (-selinux) -sqlite -test -tproxy -zero-penalty-hit" 3,279 kB
	</pre>		</pre>
	}}		}}

Tgurr: /* USE-Flags */

2011-05-05T10:28:28Z

USE-Flags

← Older revision		Revision as of 12:28, 5 May 2011
Line 13:		Line 13:
	{{Box File\|/etc/portage/package.use\|		{{Box File\|/etc/portage/package.use\|
	<pre>		<pre>
	net-proxy/squid samba snmp		net-proxy/squid kerberos samba snmp
	</pre>		</pre>
	}}		}}

Tgurr: /* Testing */

2008-04-22T15:19:36Z

Testing

← Older revision		Revision as of 17:19, 22 April 2008
Line 207:		Line 207:

	== Testing ==		== Testing ==
	{{Codeline\|# snmpwalk -~~C c~~ -v1 -c public -m /usr/share/squid/mib.txt localhost:3401 .1.3.6.1.4.1.3495}}		{{Codeline\|# snmpwalk -Cc -v1 -c public -m /usr/share/squid/mib.txt localhost:3401 .1.3.6.1.4.1.3495}}

	== Further Reading ==		== Further Reading ==
	* [[MRTG]] - Get nice graphs out of your SNMP data		* [[MRTG]] - Get nice graphs out of your SNMP data