We use squidGuard for our redirector. We are writing a we interface to
configure that, but we also have a script that restarts squid. Just make the
script owned by nobody.nobody and umask to 777. If you have to login to
the web interface and don't allow other users access to your squid machine,
this should be fairly safe. Also make the web pages available to your
internal network only.
Roberto Inzerillo wrote:
> Thank you for the hint but ...
> ... that's not exactly what I was searching for.
>
> I don't want to install a third party software. I want to make my own. Ok,
> I'll try out webmin, I will learn from it, I see it's OpenSource :-) I wonder
> why it's not GPL :-(
> I want to make my own script that just makes these changes to the ACLs and
> lets Squid reconfigure.
>
> The admins they will use this interface don't need to make any other kind of
> maintainance. Their background knowledge is M$ and what I will do is just to
> give them the chance to adapt the way of working of Squid to their needs
> using a simple web based interface. Their needs now are just to periodically add
> or delete some web sites they will give access to the net using Squid (Squid
> will help them anyway a lot because they make use of a slow adsl connection
> shared among many hosts), nothing else.
> Webmin seems to be a very complete package but does a lot more then what I
> need here. I prefer not to share too many tools on the net when not needed.
>
> Still remains the question: how do I let Squid reconfigure using some kind
> of cgi?
>
> I'm sure I'm underconsidering some permission related limit. But I'm not
> that cgi guru to know where to point my attention to and which document to read.
>
> Any hint will be appreciated (this one about webmin was too :-)
>
> Roberto
>
> p.s. in the meanwhile I begin reading webmin-0.91.tar.gz files ...
>
> > When the question is "Is there a web interface to do <blank>?" the right
> > answer is almost always "Webmin". This is no exception.
> >
> > Roberto Inzerillo wrote:
> >
> > > Hi all,
> > > I'm new to this lst, so pardon if the topic was already debated. I
> > still
> > > don't find something related.
> > >
> > > I would like to let squid restart (or at least reconfigure) using a web
> > > interface (apache + php or any other cgi language). This in order to let
> > squid
> > > read new ACLs without neading manual admin intervent.
> > >
> > > I do have admin access to the machine where squid runs.
> > > I tried something using php but it seems that I have some privilege
> > problems
> > > (obviously) in order to start, stop or restart daemons with exec() :-(
> > >
> > > Could someone give me some hints on the right approach?
> > >
> > > thank you all,
> > > Roberto
> >
> > --
> > Joe Cooper <joe@swelltech.com>
> > http://www.swelltech.com
> > Web Caching Appliances and Support
> >
>
> --
> GMX - Die Kommunikationsplattform im Internet.
> http://www.gmx.net
-- Michael Young System Administration / NC-Programming Dept. Burr Oak Tool & Gauge Co., Inc. Mailto:youngmw@burroak.com Ph:(616)651-9393 ext. 419 Fax:(616)651-4324Received on Sat Mar 02 2002 - 07:13:36 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:40 MST