Package: squid Version: 2.7.STABLE3-4.1 Severity: important User: [email protected] UserTags: debian-edu
I discovered thus bug when preparing the new Debian Edu release. Our bug report is <URL: http://bugs.skolelinux.org/show_bug.cgi?id=1419 >. The problem is simple. When doing a PXE installation of Debian Edu via a Squid proxy, some packages fail to download and the installation fail with a message from apt/aptitude about "Hash Sum mismatch". This is a fatal problem for us, as we plan to use Squid as a way to speed up PXE installations in Schools. I search a bit around, and discovered that this might be caused by a bug in the handling of If-Modified-Since in Squid, see <URL: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499379 > for a similar bug in squid3. That issue is reported upstream at <URL: http://bugs.squid-cache.org/show_bug.cgi?id=2624 >, and a patch for version 3.0 which do not apply to version 2.7 in Lenny. I investigated this problem a bit, and when apt get the bad packages with the wrong MD5 sum, squid see to have handed out only the first 2896 bytes of the package. On the next request, when I tried 'apt-get install' to install the package, it handed out the entire package. I did two test installation of main-server over PXE, and tasksel failed when doing the second installation because libcap2 had the wrong MD5 sum, the package is really 11096 bytes, but only 2896 bytes were downloaded to /var/cache/apt/packages/partial/. These are the squid log entries related to this bug: tjener:~# grep libcap2 /var/log/squid/* /var/log/squid/access.log:1263676731.588 51 192.168.1.63 TCP_MISS/200 11500 GET http://ftp.skolelinux.org/debian/pool/main/libc/libcap2/libcap2_2.11-2_i386.deb - DIRECT/158.36.191.142 application/x-debian-package /var/log/squid/access.log:1263678413.781 0 192.168.1.63 TCP_HIT/200 11509 GET http://ftp.skolelinux.org/debian/pool/main/libc/libcap2/libcap2_2.11-2_i386.deb - NONE/- application/x-debian-package /var/log/squid/access.log:1263679110.101 0 192.168.1.63 TCP_HIT/200 11509 GET http://ftp.skolelinux.org/debian/pool/main/libc/libcap2/libcap2_2.11-2_i386.deb - NONE/- application/x-debian-package /var/log/squid/store.log:1263676731.587 SWAPOUT 00 0000023A 64DF9CFCCDDCF52C27C336FCD4958513 200 1263676731 1217087223 -1 application/x-debian-package 11096/11096 GET http://ftp.skolelinux.org/debian/pool/main/libc/libcap2/libcap2_2.11-2_i386.deb tjener:~# Please help me find and fix this bug. I got a complete test setup with virtual machines available and can test if you tell me what to try out. -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core) Locale: LANG=nb_NO.UTF-8, LC_CTYPE=nb_NO.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages squid depends on: ii adduser 3.110 add and remove users and groups ii debconf [debcon 1.5.24 Debian configuration management sy ii libc6 2.7-18 GNU C Library: Shared libraries ii libcomerr2 1.41.3-1 common error description library ii libdb4.6 4.6.21-11 Berkeley v4.6 Database Libraries [ ii libkrb53 1.6.dfsg.4~beta1-5lenny2 MIT Kerberos runtime libraries ii libldap-2.4-2 2.4.11-1+lenny1 OpenLDAP libraries ii libpam0g 1.0.1-5+lenny1 Pluggable Authentication Modules l ii logrotate 3.7.1-5 Log rotation utility ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip ii netbase 4.34 Basic TCP/IP networking system ii squid-common 2.7.STABLE3-4.1 Internet object cache (WWW proxy c squid recommends no packages. Versions of packages squid suggests: pn logcheck-database <none> (no description available) ii resolvconf 1.42 name server information handler ii smbclient 2:3.2.5-4lenny7 a LanManager-like simple client fo pn squid-cgi <none> (no description available) pn squidclient <none> (no description available) pn winbind <none> (no description available) -- debconf information: squid/fix_cachedir_perms: false squid/fix_lines: true -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
