Re: /bzr/squid3/trunk/ r10425: Interim merge from autoconf-refactor feature-branch.

2010-04-25 Thread Kinkie
On Mon, Apr 26, 2010 at 2:11 AM, Amos Jeffries  wrote:
> Some questions:
>
> Your $2 change to SQUID_LOOK_FOR_MODULES. What that to fix the duplicate
> module bug?

No, that was to fix some cases where I'm recycling the
$enable_{feature} variable to hold the list of modules. If it fixes
the duplicate module bug case, then all the better :)

> Is is actually safe/good to default-enable the mem-gen-trace?

I should have reused the previous defaults. If I haven't, it's an error of mine.

-- 
/kinkie


Build failed in Hudson: 3.HEAD-i386-OpenBSD-4.5 #328

2010-04-25 Thread noc
See 

Changes:

[Francesco Chemolli ] Interim merge from 
autoconf-refactor feature-branch.

[Francesco Chemolli ] Merged from trunk

[Francesco Chemolli ] Merged from trunk

[Francesco Chemolli ] Refactored 
--enable-external-acl-helpers

[Francesco Chemolli ] Fixed buglet in the interaction 
between tproxy and netfilter options.

[Francesco Chemolli ] Reworked authentication-related 
configure options.

[Francesco Chemolli ] Improved --enable-linux-netfilter 
handling (now defaults to "auto")
Default-disabled IPF support.

[Francesco Chemolli ] Improved --enable-pf-transparent  
handling (now defaults to "auto")
Improved --enable-ipf-transparent handling (now defaults to "auto")
Modified "maximus" testsuite to follow new defaults.

[Francesco Chemolli ] Improved handling of PF-based 
transparent proxy option. Now defaults to "auto"

[Francesco Chemolli ] Reworked and streamlined IO loop 
methods setting.
Refactored some options.

[Francesco Chemolli ] Refactored SSL options

[Francesco Chemolli ] Merged from trunk

[Francesco Chemolli ] Fixed regression in EUI option 
handling.
Partly refactored SSL option handling.

[Francesco Chemolli ] Fixed some text-wrappings and 
indentations.
Reworked default option handling for some configure switches
Refactored EUI and HTCP options handling

[Francesco Chemolli ] changed mempools option handling
simplified default value handling for some options

[Francesco Chemolli ] Simplified default handling for 
some options

[Francesco Chemolli ] Refactored --enable-mem-gen-trace 
and --enable-zph-qos

[Francesco Chemolli ] Merged from trunk

[Francesco Chemolli ] Merged from trunk

[Francesco Chemolli ] Refafctored 
--enable-x-accelerator-vary option handling.

[Francesco Chemolli ] refactrored --enable-cpu-profiling

[Francesco Chemolli ] Merged from trunk

[Francesco Chemolli ] Merged from trunk

[Amos Jeffries ] Prevent assertion on startup with 
--enable-replacement-policies

Option without specific policies listed was asserting on a double-add
for the LRU module.

This just makes duplicate additions a no-op and non-fatal.
No attempt at a cleanup yet.

TODO: sync the repl_modules.cc code with the other dynamic modules init.

--
[...truncated 12692 lines...]
checking for machine/byte_swap.h... (cached) no
checking for malloc.h... (cached) yes
checking for map... (cached) yes
checking for math.h... (cached) yes
checking for memory.h... (cached) yes
checking for mount.h... (cached) no
checking for netdb.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for netinet/in_systm.h... (cached) yes
checking for netinet/ip_fil_compat.h... (cached) no
checking for openssl/err.h... (cached) yes
checking for openssl/md5.h... (cached) yes
checking for openssl/ssl.h... (cached) yes
checking for openssl/x509v3.h... (cached) yes
checking for netinet/tcp.h... (cached) yes
checking for openssl/engine.h... (cached) yes
checking for ostream... (cached) yes
checking for paths.h... (cached) yes
checking for poll.h... (cached) yes
checking for pwd.h... (cached) yes
checking for shadow.h... (cached) no
checking for regex.h... (cached) yes
checking for sched.h... (cached) yes
checking for security/pam_appl.h... (cached) no
checking for signal.h... (cached) yes
checking for sstream... (cached) yes
checking for stdarg.h... (cached) yes
checking for stddef.h... (cached) yes
checking for stdexcept... (cached) yes
checking for stdio.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for string... (cached) yes
checking for string.h... (cached) yes
checking for strings.h... (cached) yes
checking for sys/bitypes.h... (cached) no
checking for sys/bswap.h... (cached) no
checking for sys/endian.h... (cached) yes
checking for sys/file.h... (cached) yes
checking for sys/ioctl.h... (cached) yes
checking for sys/param.h... (cached) yes
checking for sys/prctl.h... (cached) no
checking for sys/md5.h... (cached) no
checking for sys/msg.h... (cached) yes
checking for sys/resource.h... (cached) yes
checking for sys/select.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for sys/stat.h... (cached) yes
checking for sys/statvfs.h... (cached) yes
checking for syscall.h... (cached) no
checking for sys/syscall.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for sys/types.h... (cached) yes
checking for sys/un.h... (cached) yes
checking for sys/vfs.h... (cached) no
checking for sys/wait.h... (cached) yes
checking for syslog.h... (cached) yes
checking for time.h... (cached) yes
checking for unistd.h... (cached) yes
checking for utime.h... (cached) yes
checking for varargs.h... (cached) yes
checking for byteswap.h... (cached) no
checking for glib.h... (cached) no
checking for stdint.h... (cached) yes
checking for inttypes.h... (cached) yes
checking for grp.h... (cached) yes
checking for db.h... (cached) yes
checking for db_185.h... (cached) no
ch

Re: /bzr/squid3/trunk/ r10425: Interim merge from autoconf-refactor feature-branch.

2010-04-25 Thread Amos Jeffries
Some questions:

Your $2 change to SQUID_LOOK_FOR_MODULES. What that to fix the duplicate
module bug?

Is is actually safe/good to default-enable the mem-gen-trace?


Amos


Build failed in Hudson: 3.HEAD-amd64-FreeBSD-7.2 #332

2010-04-25 Thread noc
See 

Changes:

[Francesco Chemolli ] Interim merge from 
autoconf-refactor feature-branch.

[Amos Jeffries ] Prevent assertion on startup with 
--enable-replacement-policies

Option without specific policies listed was asserting on a double-add
for the LRU module.

This just makes duplicate additions a no-op and non-fatal.
No attempt at a cleanup yet.

TODO: sync the repl_modules.cc code with the other dynamic modules init.

--
[...truncated 11054 lines...]
checking for machine/byte_swap.h... (cached) no
checking for malloc.h... (cached) no
checking for map... (cached) yes
checking for math.h... (cached) yes
checking for memory.h... (cached) yes
checking for mount.h... (cached) no
checking for netdb.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for netinet/in_systm.h... (cached) yes
checking for netinet/ip_fil_compat.h... (cached) no
checking for openssl/err.h... (cached) yes
checking for openssl/md5.h... (cached) yes
checking for openssl/ssl.h... (cached) yes
checking for openssl/x509v3.h... (cached) yes
checking for netinet/tcp.h... (cached) yes
checking for openssl/engine.h... (cached) yes
checking for ostream... (cached) yes
checking for paths.h... (cached) yes
checking for poll.h... (cached) yes
checking for pwd.h... (cached) yes
checking for shadow.h... (cached) no
checking for regex.h... (cached) yes
checking for sched.h... (cached) yes
checking for security/pam_appl.h... (cached) yes
checking for signal.h... (cached) yes
checking for sstream... (cached) yes
checking for stdarg.h... (cached) yes
checking for stddef.h... (cached) yes
checking for stdexcept... (cached) yes
checking for stdio.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for string... (cached) yes
checking for string.h... (cached) yes
checking for strings.h... (cached) yes
checking for sys/bitypes.h... (cached) no
checking for sys/bswap.h... (cached) no
checking for sys/endian.h... (cached) yes
checking for sys/file.h... (cached) yes
checking for sys/ioctl.h... (cached) yes
checking for sys/param.h... (cached) yes
checking for sys/prctl.h... (cached) no
checking for sys/md5.h... (cached) yes
checking for sys/msg.h... (cached) yes
checking for sys/resource.h... (cached) yes
checking for sys/select.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for sys/stat.h... (cached) yes
checking for sys/statvfs.h... (cached) yes
checking for syscall.h... (cached) no
checking for sys/syscall.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for sys/types.h... (cached) yes
checking for sys/un.h... (cached) yes
checking for sys/vfs.h... (cached) no
checking for sys/wait.h... (cached) yes
checking for syslog.h... (cached) yes
checking for time.h... (cached) yes
checking for unistd.h... (cached) yes
checking for utime.h... (cached) yes
checking for varargs.h... (cached) no
checking for byteswap.h... (cached) no
checking for glib.h... (cached) no
checking for stdint.h... (cached) yes
checking for inttypes.h... (cached) yes
checking for grp.h... (cached) yes
checking for db.h... (cached) yes
checking for db_185.h... (cached) no
checking for linux/netfilter_ipv4.h... (cached) no
checking for net/if.h... (cached) yes
checking for netinet/if_ether.h... (cached) yes
checking for netinet/icmp6.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for netinet/ip.h... (cached) yes
checking for netinet/ip6.h... (cached) yes
checking for netinet/ip_compat.h... (cached) yes
checking for netinet/ip_fil_compat.h... (cached) no
checking for netinet/ip_fil.h... (cached) yes
checking for netinet/ip_icmp.h... (cached) yes
checking for netinet/ipl.h... (cached) yes
checking for netinet/ip_nat.h... (cached) yes
checking for net/pf/pfvar.h... (cached) no
checking for net/pfvar.h... (cached) yes
checking for sys/mount.h... (cached) yes
checking for resolv.h... (cached) yes
checking for an ANSI C-conforming const... (cached) yes
checking whether byte ordering is bigendian... (cached) no
checking whether struct tm is in sys/time.h or time.h... (cached) time.h
checking for struct tm.tm_gmtoff... (cached) yes
checking for struct mallinfo... (cached) no
checking for struct mallinfo.mxfast... (cached) no
checking for struct rusage... (cached) yes
checking for struct iphdr.ip_hl... (cached) yes
checking size of void *... (cached) 8
checking for int8_t... (cached) yes
checking size of int8_t... (cached) 1
checking for char... (cached) yes
checking size of char... (cached) 1
checking for u_int8_t... (cached) yes
checking size of u_int8_t... (cached) 1
checking for uint8_t... (cached) yes
checking size of uint8_t... (cached) 1
checking for int16_t... (cached) yes
checking size of int16_t... (cached) 2
checking for short... (cached) yes
checking size of short... (cached) 2
checking for int... (cached) yes
checking size of int... (cached) 4
checking for u_int16_t... (cached) yes
chec

Build failed in Hudson: 3.HEAD-i386-FreeBSD-6.4 #249

2010-04-25 Thread noc
See 

Changes:

[Francesco Chemolli ] Interim merge from 
autoconf-refactor feature-branch.

[Amos Jeffries ] Prevent assertion on startup with 
--enable-replacement-policies

Option without specific policies listed was asserting on a double-add
for the LRU module.

This just makes duplicate additions a no-op and non-fatal.
No attempt at a cleanup yet.

TODO: sync the repl_modules.cc code with the other dynamic modules init.

--
[...truncated 14038 lines...]
checking for machine/byte_swap.h... (cached) no
checking for malloc.h... (cached) no
checking for map... (cached) yes
checking for math.h... (cached) yes
checking for memory.h... (cached) yes
checking for mount.h... (cached) no
checking for netdb.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for netinet/in_systm.h... (cached) yes
checking for netinet/ip_fil_compat.h... (cached) no
checking for openssl/err.h... (cached) yes
checking for openssl/md5.h... (cached) yes
checking for openssl/ssl.h... (cached) yes
checking for openssl/x509v3.h... (cached) yes
checking for netinet/tcp.h... (cached) yes
checking for openssl/engine.h... (cached) yes
checking for ostream... (cached) yes
checking for paths.h... (cached) yes
checking for poll.h... (cached) yes
checking for pwd.h... (cached) yes
checking for shadow.h... (cached) no
checking for regex.h... (cached) yes
checking for sched.h... (cached) yes
checking for security/pam_appl.h... (cached) yes
checking for signal.h... (cached) yes
checking for sstream... (cached) yes
checking for stdarg.h... (cached) yes
checking for stddef.h... (cached) yes
checking for stdexcept... (cached) yes
checking for stdio.h... (cached) yes
checking for stdlib.h... (cached) yes
checking for string... (cached) yes
checking for string.h... (cached) yes
checking for strings.h... (cached) yes
checking for sys/bitypes.h... (cached) no
checking for sys/bswap.h... (cached) no
checking for sys/endian.h... (cached) yes
checking for sys/file.h... (cached) yes
checking for sys/ioctl.h... (cached) yes
checking for sys/param.h... (cached) yes
checking for sys/prctl.h... (cached) no
checking for sys/md5.h... (cached) yes
checking for sys/msg.h... (cached) yes
checking for sys/resource.h... (cached) yes
checking for sys/select.h... (cached) yes
checking for sys/socket.h... (cached) yes
checking for sys/stat.h... (cached) yes
checking for sys/statvfs.h... (cached) yes
checking for syscall.h... (cached) no
checking for sys/syscall.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for sys/types.h... (cached) yes
checking for sys/un.h... (cached) yes
checking for sys/vfs.h... (cached) no
checking for sys/wait.h... (cached) yes
checking for syslog.h... (cached) yes
checking for time.h... (cached) yes
checking for unistd.h... (cached) yes
checking for utime.h... (cached) yes
checking for varargs.h... (cached) no
checking for byteswap.h... (cached) no
checking for glib.h... (cached) no
checking for stdint.h... (cached) yes
checking for inttypes.h... (cached) yes
checking for grp.h... (cached) yes
checking for db.h... (cached) yes
checking for db_185.h... (cached) no
checking for linux/netfilter_ipv4.h... (cached) no
checking for net/if.h... (cached) yes
checking for netinet/if_ether.h... (cached) yes
checking for netinet/icmp6.h... (cached) yes
checking for netinet/in.h... (cached) yes
checking for netinet/ip.h... (cached) yes
checking for netinet/ip6.h... (cached) yes
checking for netinet/ip_compat.h... (cached) yes
checking for netinet/ip_fil_compat.h... (cached) no
checking for netinet/ip_fil.h... (cached) yes
checking for netinet/ip_icmp.h... (cached) yes
checking for netinet/ipl.h... (cached) yes
checking for netinet/ip_nat.h... (cached) yes
checking for net/pf/pfvar.h... (cached) no
checking for net/pfvar.h... (cached) yes
checking for sys/mount.h... (cached) yes
checking for resolv.h... (cached) yes
checking for an ANSI C-conforming const... (cached) yes
checking whether byte ordering is bigendian... (cached) no
checking whether struct tm is in sys/time.h or time.h... (cached) time.h
checking for struct tm.tm_gmtoff... (cached) yes
checking for struct mallinfo... (cached) no
checking for struct mallinfo.mxfast... (cached) no
checking for struct rusage... (cached) yes
checking for struct iphdr.ip_hl... (cached) yes
checking size of void *... (cached) 4
checking for int8_t... (cached) yes
checking size of int8_t... (cached) 1
checking for char... (cached) yes
checking size of char... (cached) 1
checking for u_int8_t... (cached) yes
checking size of u_int8_t... (cached) 1
checking for uint8_t... (cached) yes
checking size of uint8_t... (cached) 1
checking for int16_t... (cached) yes
checking size of int16_t... (cached) 2
checking for short... (cached) yes
checking size of short... (cached) 2
checking for int... (cached) yes
checking size of int... (cached) 4
checking for u_int16_t... (cached) yes
check

Re: RFC: how to handle OS-specific configure options?

2010-04-25 Thread Kinkie
>> It's probably time for another interim merge.
> +1

That's two votes. Merging.

-- 
/kinkie


Re: squid 3.1 ICAP problem

2010-04-25 Thread Henrik Nordstrom
fre 2010-04-23 klockan 16:43 +0100 skrev Dan Searle:
> 16:36:29.552442 IP localhost.1344 > localhost.50566: P 1:195(194) ack 72 
> win 512 
> 0x:  4500 00f6 7ac7 4000 4006 c138 7f00 0001  e.@.@..8
> 0x0010:  7f00 0001 0540 c586 bdca fa3d bd99 b529  .@.=...)
> 0x0020:  8018 0200 feea  0101 080a 03b8 80fb  
> 0x0030:  03b8 80fb 3230 3020 4f4b 0d0a 4461 7465  200.OK..Date


THat's not a correct ICAP response status line.. Should be

ICAP/1.0 200 OK

Just as for HTTP ICAP responses always start with the ICAP protocol
identifier & version.

RFC3507 4.3.3  Response Headers, first paragraph.

Regards
Henrik



Re: RFC: how to handle OS-specific configure options?

2010-04-25 Thread Henrik Nordstrom
fre 2010-04-23 klockan 16:41 +0200 skrev Kinkie:

> 
> It's probably time for another interim merge.

+1





squid 3.1 ICAP problem

2010-04-25 Thread Dan Searle

Hi,

Symptoms: Squid 3.1 fails to interoperate correctly with an ICAP server 
and gives the error "ICAP protocol error." in the browser.


Config:
---snip---
icap_enable on
icap_service service_req reqmod_precache 0 icap://localhost:1344/reqmod
icap_class class_req service_req
icap_access class_req allow all
---snip---

Detail:
I'm writing an ICAP server from scratch and as far as I can see from 
RFC3507 and errata, there is nothing wrong with this transaction shown 
below in tcpdump -X format:


16:36:29.552198 IP localhost.50566 > localhost.1344: P 1:72(71) ack 1 
win 513 

   0x:  4500 007b 341c 4000 4006 085f 7f00 0001  e.@.@.._
   0x0010:  7f00 0001 c586 0540 bd99 b4e2 bdca fa3d  ...@...=
   0x0020:  8018 0201 fe6f  0101 080a 03b8 80fb  .o..
   0x0030:  03b8 80fb 4f50 5449 4f4e 5320 6963 6170  OPTIONS.icap
   0x0040:  3a2f 2f6c 6f63 616c 686f 7374 3a31 3334  ://localhost:134
   0x0050:  342f 7265 716d 6f64 2049 4341 502f 312e  4/reqmod.ICAP/1.
   0x0060:  300d 0a48 6f73 743a 206c 6f63 616c 686f  0..Host:.localho
   0x0070:  7374 3a31 3334 340d 0a0d 0a  st:1344
16:36:29.552205 IP localhost.1344 > localhost.50566: . ack 72 win 512 


   0x:  4500 0034 7ac6 4000 4006 c1fb 7f00 0001  e.@.@...
   0x0010:  7f00 0001 0540 c586 bdca fa3d bd99 b529  .@.=...)
   0x0020:  8010 0200 77c1  0101 080a 03b8 80fb  w...
   0x0030:  03b8 80fb
16:36:29.552442 IP localhost.1344 > localhost.50566: P 1:195(194) ack 72 
win 512 

   0x:  4500 00f6 7ac7 4000 4006 c138 7f00 0001  e.@.@..8
   0x0010:  7f00 0001 0540 c586 bdca fa3d bd99 b529  .@.=...)
   0x0020:  8018 0200 feea  0101 080a 03b8 80fb  
   0x0030:  03b8 80fb 3230 3020 4f4b 0d0a 4461 7465  200.OK..Date
   0x0040:  3a20 4672 692c 2032 3320 4170 7220 3230  :.Fri,.23.Apr.20
   0x0050:  3130 2031 363a 3336 3a32 3920 2b30 3130  10.16:36:29.+010
   0x0060:  300d 0a53 6572 7665 723a 2043 656e 736f  0..Server:.Censo
   0x0070:  724e 6574 2f35 2e30 0d0a 4d65 7468 6f64  rNet/5.0..Method
   0x0080:  733a 2052 4551 4d4f 440d 0a53 6572 7669  s:.REQMOD..Servi
   0x0090:  6365 3a20 4365 6e73 6f72 4e65 7420 4943  ce:.CensorNet.IC
   0x00a0:  4150 2052 4551 4d4f 440d 0a49 5354 6167  AP.REQMOD..ISTag
   0x00b0:  3a20 2230 220d 0a45 6e63 6170 7375 6c61  :."0"..Encapsula
   0x00c0:  7465 643a 206e 756c 6c2d 626f 6479 3d30  ted:.null-body=0
   0x00d0:  0d0a 4d61 782d 436f 6e6e 6563 7469 6f6e  ..Max-Connection
   0x00e0:  733a 2031 3030 0d0a 416c 6c6f 773a 2032  s:.100..Allow:.2
   0x00f0:  3034 0d0a 0d0a   04


What is my ICAP server doing wrong that squid is complaining about? I.e. 
what is the cause of the protocol error?


Regards, Dan...

--
Dan Searle

CensorNet Ltd - professional & affordable Web & E-mail filtering
email: dan.sea...@censornet.com web: www.censornet.com
tel: 0845 230 9590 / fax: 0845 230 9591 / support: 0845 230 9592
snail: Vallon House, Vantage Court Office Park, Winterbourne,
  Bristol, BS16 1GW, UK.

CensorNet Ltd is a registered company in England & Wales No. 05518629
VAT registration number 901-2048-78
Any views expressed in this email communication are those of the
individual sender, except where the sender specifically states them to
be the views of a member of Censornet Ltd.  Censornet Ltd. does not
represent, warrant or guarantee that the integrity of this
communication has been maintained nor that the communication is free
of errors or interference. 




Scanned for viruses, spam and offensive content by CensorNet MailSafe

Try CensorNet free for 14 days. Provide Internet access on your terms.
Visit www.censornet.com for more information.



Introduction

2010-04-25 Thread IISc Bangalore
Dear Squid Developers,


 We are a part of the Network Information Technology Support and
Services at Indian Institute of Science, Bangalore, India. We use the
squid as a proxy for the campus.  We also implemented campus wide
authentication in the proxy using LDAP auth and would like to work on
the authentication part.  We appreciate your efforts and would love to
learn more in the development of this wonderful proxy.

Thanking You,

Regards,
Nethelp Team,
IISc