Re: [squid-users] cant build squid 3.3.5 with external_acl_helper ldap_group on CentOS 6.4 64bits

From: Ricardo Klein <klein.rfk_at_gmail.com>
Date: Sat, 1 Jun 2013 10:01:11 -0300

Amos,

sorry for bother you that much, thanks to you now I could build squid
WITH the ext_ldap_group_acl (the filename was ldap_group in 3.1.x, but
I already changed that on my squid.conf. I think this may be something
we use in 3.1.x configuration that is not valid anymore on 3.3.x:

I needed to fix the cache_dir config too, and create 1 cache_dir for
each worker (I am using 3 to tests), but I get this error:

2013/06/01 09:52:06 kid1| Creating missing swap directories
2013/06/01 09:52:06 kid4| Starting Squid Cache version 3.3.5 for
x86_64-redhat-linux-gnu...
2013/06/01 09:52:06 kid2| Starting Squid Cache version 3.3.5 for
x86_64-redhat-linux-gnu...
2013/06/01 09:52:06 kid7| Starting Squid Cache version 3.3.5 for
x86_64-redhat-linux-gnu...
2013/06/01 09:52:06 kid3| Starting Squid Cache version 3.3.5 for
x86_64-redhat-linux-gnu...
2013/06/01 09:52:06 kid5| Starting Squid Cache version 3.3.5 for
x86_64-redhat-linux-gnu...
2013/06/01 09:52:06 kid6| Starting Squid Cache version 3.3.5 for
x86_64-redhat-linux-gnu...
2013/06/01 09:52:06 kid1| Starting Squid Cache version 3.3.5 for
x86_64-redhat-linux-gnu...
2013/06/01 09:52:06 kid5| commBind: Cannot bind socket FD 13 to [::]:
(2) No such file or directory
2013/06/01 09:52:06 kid2| commBind: Cannot bind socket FD 17 to [::]:
(2) No such file or directory
2013/06/01 09:52:06 kid1| commBind: Cannot bind socket FD 17 to [::]:
(2) No such file or directory
2013/06/01 09:52:06 kid4| commBind: Cannot bind socket FD 13 to [::]:
(2) No such file or directory
2013/06/01 09:52:06 kid6| commBind: Cannot bind socket FD 13 to [::]:
(2) No such file or directory
2013/06/01 09:52:06 kid3| commBind: Cannot bind socket FD 17 to [::]:
(2) No such file or directory
2013/06/01 09:52:06 kid7| commBind: Cannot bind socket FD 8 to [::]:
(2) No such file or directory
FATAL: Ipc::Mem::Segment::open failed to
shm_open(/squid-squid-page-pool.shm): (2) No such file or directory

Squid Cache (Version 3.3.5): Terminated abnormally.
CPU Usage: 0.024 seconds = 0.019 user + 0.005 sys
Maximum Resident Size: 32000 KB
Page faults with physical i/o: 0
FATAL: Ipc::Mem::Segment::open failed to
shm_open(/squid-squid-page-pool.shm): (2) No such file or directory

wtf I am doing wrong now? Why I have kid4, kid6... if I set "workers 3" ?
here is my ./configure (from spec file): http://pastebin.com/wzekBEsq
and here is my squid.conf: http://pastebin.com/bfBkC2XE

--
Att...
Ricardo Felipe Klein
klein.rfk_at_gmail.com
On Sat, Jun 1, 2013 at 9:01 AM, Ricardo Klein <klein.rfk_at_gmail.com> wrote:
> Amos,
>
> great thanks, I will fix this mess I did in the ./configure and try
> again. If I can build an RPM package for CentOS 6.4 (and it should
> work in RHEL 6.4 too) there is any interest I put this in somewhere
> people can download it?
> --
> Att...
>
> Ricardo Felipe Klein
> klein.rfk_at_gmail.com
>
>
> On Sat, Jun 1, 2013 at 12:39 AM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
>> On 1/06/2013 7:40 a.m., Ricardo Klein wrote:
>>>
>>> Hi there,
>>>
>>> I am trying to build squid on CentOS 6.4 64bits with
>>> external_acl_helper "ldap_group", but my ./configure log says:
>>> configure: external acl helper ldap_group ... found but cannot be built
>>> I have fired a but in the bugtrack, but, if any of you know what is
>>> wrong, please tell me so I can cancel that bugtracker.
>>
>>
>> The script detecting external-acl-helpers entries has a bug displaying the
>> wrong message for the error. It will report "found but cannot be built" for
>> both the found and not-found error cases. In your situation I believe the
>> helpers as named cannot be found at all due to incorrect ./configure
>> options.
>>
>> Details inline with your options...
>>
>>
>>> Here is my ./configure options:
>>> ./configure \
>>> --prefix=/usr \
>>> --exec-prefix=/usr \
>>> --bindir=/usr/bin \
>>> --sbindir=/usr/sbin \
>>> --sysconfdir=/etc \
>>> --datadir=/usr/share \
>>> --includedir=/usr/include \
>>> --libdir=/usr/lib64 \
>>> --libexecdir=/usr/libexec \
>>> --sharedstatedir=/var/lib \
>>> --mandir=/usr/share/man \
>>> --infodir=/usr/share/info \
>>> --enable-internal-dns \
>>
>>
>> internal-dns is enabeld by default. You can omit this.
>>
>>
>>> --disable-strict-error-checking \
>>> --exec_prefix=/usr \
>>> --libexecdir=/usr/lib64/squid \
>>> --localstatedir=/var \
>>> --datadir=/usr/share/squid \
>>> --sysconfdir=/etc/squid \
>>
>>
>> You already specified several of the above batch of options (datadir,
>> sysconfdir, libexecdir) with different values. This may cause unexpected
>> results when installing.
>> And "--exec_prefix" does not exist. There is a different "--exec-prefix"
>> option earlier which will be used ... so more unexpected results when
>> installing.
>>
>>> --with-logdir=$LOCALSTATEDIR/log/squid \
>>> --with-pidfile=$LOCALSTATEDIR/run/squid.pid \
>>
>>
>>> --disable-dependency-tracking \
>>> --enable-arp-acl \
>>
>> "--enable-arp-acl" does not exit. The replacement --enable-eui is already
>> enabled  by default, so all you need do is to remove the above option.
>>
>>> --enable-follow-x-forwarded-for \
>>> --enable-auth \
>>
>> NP: auth is enabled by default, and when omitted will be auto-enabled by the
>> below helpers options anyway. You can omit "--enable-auth" entirely.
>>
>>>
>>> --enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,DB,squid_radius_auth
>>> --enable-ntlm-auth-helpers=smb_lm,no_check,fakeauth \
>>> --enable-digest-auth-helpers=password,ldap,eDirectory \
>>> --enable-negotiate-auth-helpers=squid_kerb_auth \
>>
>>
>> The auth build options underwent a major change in the squid-3.2 series.
>> --enable-X-auth-helpers options no longer exist.
>> Squid ./configure script is ignoring the above auth helper options and using
>> the default versions of the new --enable-auth-X options.
>>
>> For example your basic auth helpers line should be:
>> --enable-auth-basic="LDAP,MSNT,NCSA,PAM,SMB,NIS,getpwnam,MSNT-multi-domain,SASL,DB,RADIUS"
>>
>>>
>>> --enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group
>>
>>
>> You are not getting build problems with the auth helpers because the entire
>> configure --enable-* option name changed and the broken ones above are
>> ignored in favour of the auto-detected helpers.
>> The external-acl-helpers option however did not change, so you hit error
>> messages trying to build the differently named helpers.
>>
>> Run "ls -1 helpers/*/" to see all the new helper names. Note that the list
>> here is case sensitive.
>>
>>
>>> --enable-cache-digests \
>>> --enable-cachemgr-hostname=localhost \
>>> --enable-delay-pools \
>>> --enable-epoll \
>>> --enable-icap-client \
>>> --enable-ident-lookups \
>>> --enable-linux-netfilter \
>>> --enable-referer-log \
>>
>>
>> --enable-referer-log no longer exists. It is a built-in squid.conf logformat
>> type instead now.
>>
>>> --enable-removal-policies=heap,lru \
>>> --enable-snmp \
>>> --enable-ssl \
>>> --enable-storeio=aufs,diskd,ufs \
>>
>>
>> NP: with 3.2 and later you probably want to build "rock" cache type as well.
>>
>>> --enable-useragent-log \
>>
>>
>> --enable-useragent-log no longer exists. It is a built-in squid.conf
>> logformat type instead now.
>>
>>
>>> --enable-wccpv2 \
>>> --enable-esi \
>>> --with-aio \
>>> --with-default-user=squid \
>>> --with-filedescriptors=30000 \
>>> --with-dl \
>>> --with-openssl \
>>> --with-pthreads
>>
>>
>> Amos
Received on Sat Jun 01 2013 - 13:01:19 MDT

This archive was generated by hypermail 2.2.0 : Sat Jun 01 2013 - 12:00:07 MDT