Re: [squid-users] cant build squid 3.3.5 with external_acl_helper ldap_group on CentOS 6.4 64bits

From: Ricardo Klein <klein.rfk_at_gmail.com>
Date: Sat, 1 Jun 2013 10:12:42 -0300

For the record, I already mounted shm:
[root_at_theroutertwo ~]# df -h | grep shm
tmpfs 16G 53M 16G 1% /dev/shm
shm 16G 53M 16G 1% /dev/shm

And there is another error:
FATAL: Rock cache_dir at /var/spool/squid/cache1/rock failed to open
db file: (2) No such file or directory
Squid Cache (Version 3.3.5): Terminated abnormally.
CPU Usage: 0.060 seconds = 0.029 user + 0.031 sys
Maximum Resident Size: 71152 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
total space in arena: 5620 KB
Ordinary blocks: 5563 KB 13 blks
Small blocks: 0 KB 0 blks
Holding blocks: 18080 KB 7 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 56 KB
Total in use: 23643 KB 421%
Total free: 56 KB 1%
FATAL: Ipc::Mem::Segment::open failed to
shm_open(/squid-squid-page-pool.shm): (2) No such file or directory

but /var/spool/squid/cache1/rock does exist:
[root_at_theroutertwo ~]# ll /var/spool/squid/cache1/rock
-rw-------. 1 squid squid 5.1G Jun 1 09:47 /var/spool/squid/cache1/rock

--
Att...
Ricardo Felipe Klein
klein.rfk_at_gmail.com
On Sat, Jun 1, 2013 at 10:01 AM, Ricardo Klein <klein.rfk_at_gmail.com> wrote:
> Amos,
>
> sorry for bother you that much, thanks to you now I could build squid
> WITH the ext_ldap_group_acl (the filename was ldap_group in 3.1.x, but
> I already changed that on my squid.conf. I think this may be something
> we use in 3.1.x configuration that is not valid anymore on 3.3.x:
>
> I needed to fix the cache_dir config too, and create 1 cache_dir for
> each worker (I am using 3 to tests), but I get this error:
>
> 2013/06/01 09:52:06 kid1| Creating missing swap directories
> 2013/06/01 09:52:06 kid4| Starting Squid Cache version 3.3.5 for
> x86_64-redhat-linux-gnu...
> 2013/06/01 09:52:06 kid2| Starting Squid Cache version 3.3.5 for
> x86_64-redhat-linux-gnu...
> 2013/06/01 09:52:06 kid7| Starting Squid Cache version 3.3.5 for
> x86_64-redhat-linux-gnu...
> 2013/06/01 09:52:06 kid3| Starting Squid Cache version 3.3.5 for
> x86_64-redhat-linux-gnu...
> 2013/06/01 09:52:06 kid5| Starting Squid Cache version 3.3.5 for
> x86_64-redhat-linux-gnu...
> 2013/06/01 09:52:06 kid6| Starting Squid Cache version 3.3.5 for
> x86_64-redhat-linux-gnu...
> 2013/06/01 09:52:06 kid1| Starting Squid Cache version 3.3.5 for
> x86_64-redhat-linux-gnu...
> 2013/06/01 09:52:06 kid5| commBind: Cannot bind socket FD 13 to [::]:
> (2) No such file or directory
> 2013/06/01 09:52:06 kid2| commBind: Cannot bind socket FD 17 to [::]:
> (2) No such file or directory
> 2013/06/01 09:52:06 kid1| commBind: Cannot bind socket FD 17 to [::]:
> (2) No such file or directory
> 2013/06/01 09:52:06 kid4| commBind: Cannot bind socket FD 13 to [::]:
> (2) No such file or directory
> 2013/06/01 09:52:06 kid6| commBind: Cannot bind socket FD 13 to [::]:
> (2) No such file or directory
> 2013/06/01 09:52:06 kid3| commBind: Cannot bind socket FD 17 to [::]:
> (2) No such file or directory
> 2013/06/01 09:52:06 kid7| commBind: Cannot bind socket FD 8 to [::]:
> (2) No such file or directory
> FATAL: Ipc::Mem::Segment::open failed to
> shm_open(/squid-squid-page-pool.shm): (2) No such file or directory
>
> Squid Cache (Version 3.3.5): Terminated abnormally.
> CPU Usage: 0.024 seconds = 0.019 user + 0.005 sys
> Maximum Resident Size: 32000 KB
> Page faults with physical i/o: 0
> FATAL: Ipc::Mem::Segment::open failed to
> shm_open(/squid-squid-page-pool.shm): (2) No such file or directory
>
> wtf I am doing wrong now? Why I have kid4, kid6... if I set "workers 3" ?
> here is my ./configure (from spec file): http://pastebin.com/wzekBEsq
> and here is my squid.conf: http://pastebin.com/bfBkC2XE
> --
> Att...
>
> Ricardo Felipe Klein
> klein.rfk_at_gmail.com
>
>
> On Sat, Jun 1, 2013 at 9:01 AM, Ricardo Klein <klein.rfk_at_gmail.com> wrote:
>> Amos,
>>
>> great thanks, I will fix this mess I did in the ./configure and try
>> again. If I can build an RPM package for CentOS 6.4 (and it should
>> work in RHEL 6.4 too) there is any interest I put this in somewhere
>> people can download it?
>> --
>> Att...
>>
>> Ricardo Felipe Klein
>> klein.rfk_at_gmail.com
>>
>>
>> On Sat, Jun 1, 2013 at 12:39 AM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
>>> On 1/06/2013 7:40 a.m., Ricardo Klein wrote:
>>>>
>>>> Hi there,
>>>>
>>>> I am trying to build squid on CentOS 6.4 64bits with
>>>> external_acl_helper "ldap_group", but my ./configure log says:
>>>> configure: external acl helper ldap_group ... found but cannot be built
>>>> I have fired a but in the bugtrack, but, if any of you know what is
>>>> wrong, please tell me so I can cancel that bugtracker.
>>>
>>>
>>> The script detecting external-acl-helpers entries has a bug displaying the
>>> wrong message for the error. It will report "found but cannot be built" for
>>> both the found and not-found error cases. In your situation I believe the
>>> helpers as named cannot be found at all due to incorrect ./configure
>>> options.
>>>
>>> Details inline with your options...
>>>
>>>
>>>> Here is my ./configure options:
>>>> ./configure \
>>>> --prefix=/usr \
>>>> --exec-prefix=/usr \
>>>> --bindir=/usr/bin \
>>>> --sbindir=/usr/sbin \
>>>> --sysconfdir=/etc \
>>>> --datadir=/usr/share \
>>>> --includedir=/usr/include \
>>>> --libdir=/usr/lib64 \
>>>> --libexecdir=/usr/libexec \
>>>> --sharedstatedir=/var/lib \
>>>> --mandir=/usr/share/man \
>>>> --infodir=/usr/share/info \
>>>> --enable-internal-dns \
>>>
>>>
>>> internal-dns is enabeld by default. You can omit this.
>>>
>>>
>>>> --disable-strict-error-checking \
>>>> --exec_prefix=/usr \
>>>> --libexecdir=/usr/lib64/squid \
>>>> --localstatedir=/var \
>>>> --datadir=/usr/share/squid \
>>>> --sysconfdir=/etc/squid \
>>>
>>>
>>> You already specified several of the above batch of options (datadir,
>>> sysconfdir, libexecdir) with different values. This may cause unexpected
>>> results when installing.
>>> And "--exec_prefix" does not exist. There is a different "--exec-prefix"
>>> option earlier which will be used ... so more unexpected results when
>>> installing.
>>>
>>>> --with-logdir=$LOCALSTATEDIR/log/squid \
>>>> --with-pidfile=$LOCALSTATEDIR/run/squid.pid \
>>>
>>>
>>>> --disable-dependency-tracking \
>>>> --enable-arp-acl \
>>>
>>> "--enable-arp-acl" does not exit. The replacement --enable-eui is already
>>> enabled  by default, so all you need do is to remove the above option.
>>>
>>>> --enable-follow-x-forwarded-for \
>>>> --enable-auth \
>>>
>>> NP: auth is enabled by default, and when omitted will be auto-enabled by the
>>> below helpers options anyway. You can omit "--enable-auth" entirely.
>>>
>>>>
>>>> --enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,DB,squid_radius_auth
>>>> --enable-ntlm-auth-helpers=smb_lm,no_check,fakeauth \
>>>> --enable-digest-auth-helpers=password,ldap,eDirectory \
>>>> --enable-negotiate-auth-helpers=squid_kerb_auth \
>>>
>>>
>>> The auth build options underwent a major change in the squid-3.2 series.
>>> --enable-X-auth-helpers options no longer exist.
>>> Squid ./configure script is ignoring the above auth helper options and using
>>> the default versions of the new --enable-auth-X options.
>>>
>>> For example your basic auth helpers line should be:
>>> --enable-auth-basic="LDAP,MSNT,NCSA,PAM,SMB,NIS,getpwnam,MSNT-multi-domain,SASL,DB,RADIUS"
>>>
>>>>
>>>> --enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group
>>>
>>>
>>> You are not getting build problems with the auth helpers because the entire
>>> configure --enable-* option name changed and the broken ones above are
>>> ignored in favour of the auto-detected helpers.
>>> The external-acl-helpers option however did not change, so you hit error
>>> messages trying to build the differently named helpers.
>>>
>>> Run "ls -1 helpers/*/" to see all the new helper names. Note that the list
>>> here is case sensitive.
>>>
>>>
>>>> --enable-cache-digests \
>>>> --enable-cachemgr-hostname=localhost \
>>>> --enable-delay-pools \
>>>> --enable-epoll \
>>>> --enable-icap-client \
>>>> --enable-ident-lookups \
>>>> --enable-linux-netfilter \
>>>> --enable-referer-log \
>>>
>>>
>>> --enable-referer-log no longer exists. It is a built-in squid.conf logformat
>>> type instead now.
>>>
>>>> --enable-removal-policies=heap,lru \
>>>> --enable-snmp \
>>>> --enable-ssl \
>>>> --enable-storeio=aufs,diskd,ufs \
>>>
>>>
>>> NP: with 3.2 and later you probably want to build "rock" cache type as well.
>>>
>>>> --enable-useragent-log \
>>>
>>>
>>> --enable-useragent-log no longer exists. It is a built-in squid.conf
>>> logformat type instead now.
>>>
>>>
>>>> --enable-wccpv2 \
>>>> --enable-esi \
>>>> --with-aio \
>>>> --with-default-user=squid \
>>>> --with-filedescriptors=30000 \
>>>> --with-dl \
>>>> --with-openssl \
>>>> --with-pthreads
>>>
>>>
>>> Amos
Received on Sat Jun 01 2013 - 13:12:49 MDT

This archive was generated by hypermail 2.2.0 : Sat Jun 01 2013 - 12:00:07 MDT