Package: squid3 Version: 3.1.20-1 Severity: normal Dear Maintainer,
In authorization process /var/log/squid3/cache.log: .... 2012/12/03 15:56:04.032| The request GET http://www.qnx.com/ is DENIED, because it matched 'AUTH' 2012/12/03 15:56:04.063| ZPH: Preserving TOS on miss, TOS=0 2012/12/03 15:56:04.064| The reply for GET http://www.qnx.com/ is ALLOWED, because it matched 'AUTH' 2012/12/03 15:56:04.064| ConnStateData::swanSong: FD 10 -------- 2012/12/03 15:56:29.270| authenticateAuthUserAddIp: user 'john' has been seen at a new IP address (192.168.66.32:48789) 2012/12/03 15:56:29.270| aclMatchExternal: check_ad_group("john inet") = lookup needed 2012/12/03 15:56:29.270| aclMatchExternal: "john inet": entry=@0, age=0 2012/12/03 15:56:29.271| aclMatchExternal: "john inet": queueing a call. 2012/12/03 15:56:29.271| aclMatchExternal: "john inet": return -1. 2012/12/03 15:56:29.271| externalAclLookup: lookup in 'check_ad_group' for 'john inet' Connected OK group filter '(&(objectclass=user)(sAMAccountName=john)(memberof=cn=inet,ou=usergroups,dc=nsk,dc=lanta,dc=ru))', searchbase 'dc=nsk,dc=lanta,dc=ru' 2012/12/03 15:56:29.275| externalAclHandleReply: reply="OK" 2012/12/03 15:56:29.276| external_acl_cache_add: Adding 'john inet' = 1 2012/12/03 15:56:29.276| aclMatchExternal: check_ad_group = 1 2012/12/03 15:56:29.276| The request GET http://www.qnx.com/ is ALLOWED, because it matched 'localnet' 2012/12/03 15:56:29.276| client_side_request.cc(556) clientAccessCheck2: No adapted_http_access configuration. 2012/12/03 15:56:29.277| The request GET http://www.qnx.com/ is ALLOWED, because it matched 'localnet' 2012/12/03 15:56:29.744| ctx: enter level 0: 'http://www.qnx.com/' 2012/12/03 15:56:29.745| hdr cc: unknown cache-directive: near 'post-check=0, pre-check=0' in '0xbfea9114' 2012/12/03 15:56:29.745| hdr cc: unknown cache-directive: near 'pre-check=0' in '0xbfea9114' 2012/12/03 15:56:29.745| ctx: exit level 0 2012/12/03 15:56:29.745| ZPH: Preserving TOS on miss, TOS=0 2012/12/03 15:56:29.746| hdr cc: unknown cache-directive: near 'post-check=0, pre-check=0' in '0xbfea8e44' 2012/12/03 15:56:29.746| hdr cc: unknown cache-directive: near 'pre-check=0' in '0xbfea8e44' 2012/12/03 15:56:32| Starting Squid Cache version 3.1.20 for i486-pc-linux-gnu... /var/log/syslog: .... Dec 3 15:56:29 squid kernel: [11044.464660] squid3[9204]: segfault at c ip b76ad6c6 sp bfea8c20 error 4 in squid3[b74cd000+300000] Dec 3 15:56:29 squid squid[8726]: Squid Parent: child process 9204 exited due to signal 11 with status 0 Dec 3 15:56:32 squid squid[8726]: Squid Parent: child process 9233 started .... -- System Information: Debian Release: wheezy/sid APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing'), (90, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core) Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages squid3 depends on: ii adduser 3.113+nmu3 ii libc6 2.13-37 ii libcap2 1:2.22-1.2 ii libcomerr2 1.42.5-1 ii libdb5.1 5.1.29-5 ii libexpat1 2.1.0-1 ii libgcc1 1:4.7.2-4 ii libgssapi-krb5-2 1.10.1+dfsg-3 ii libk5crypto3 1.10.1+dfsg-3 ii libkrb5-3 1.10.1+dfsg-3 ii libldap-2.4-2 2.4.31-1 ii libltdl7 2.4.2-1.1 ii libpam0g 1.1.3-7.1 ii libsasl2-2 2.1.25.dfsg1-6 ii libstdc++6 4.7.2-4 ii libxml2 2.8.0+dfsg1-6 ii logrotate 3.8.1-4 ii lsb-base 4.1+Debian8 ii netbase 5.0 ii squid3-common 3.1.20-1 squid3 recommends no packages. Versions of packages squid3 suggests: pn resolvconf <none> pn smbclient <none> pn squid-cgi <none> pn squidclient <none> pn ufw <none> -- Configuration Files: /etc/squid3/squid.conf changed: auth_param negotiate program /usr/lib/squid3/squid_kerb_auth -s HTTP/[email protected] auth_param negotiate children 10 auth_param negotiate keep_alive off auth_param basic program /usr/lib/squid3/squid_ldap_auth -R \ -b "dc=nsk,dc=lanta,dc=ru" \ -D [email protected] \ -W /etc/squid3/squid-user \ -f "sAMAccountName=%s" \ -h domain3.nsk.lanta.ru auth_param basic children 10 auth_param basic realm Proxy Authentication auth_param basic credentialsttl 2 hours external_acl_type check_ad_group ttl=1200 %LOGIN /usr/lib/squid3/squid_ldap_group -R -K -d \ -b "dc=nsk,dc=lanta,dc=ru" \ -D [email protected] \ -W /etc/squid3/squid-user \ -f "(&(objectclass=user)(sAMAccountName=%v)(memberof=cn=%a,ou=usergroups,dc=nsk,dc=lanta,dc=ru))" \ -h domain3.nsk.lanta.ru acl AUTH proxy_auth REQUIRED acl inet_access external check_ad_group inet acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 acl localnet src 192.168.0.0/16 # RFC1918 possible internal network acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localhost http_access allow AUTH inet_access localnet http_access deny all http_port 3128 debug_options ALL,2 coredump_dir /var/spool/squid3 refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
