Squid Version 3.5.16

[bkhmelnytskiy]

Добрый день!

Установил CentOS 7, на него поставил Squid 3.5.16. Сделал вроде бы все минимальные настройки которые требуются для запуска service squid, ни возникла следующая проблема:

команда service squid status говорит:


Redirecting to /bin/systemctl status squid.service
● squid.service - Squid Web Proxy Server
Loaded: loaded (/usr/lib/systemd/system/squid.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Thu 2016-04-14 08:41:41 EEST; 32min ago
Docs: man:squid(8)
Process: 23153 ExecStop=/usr/sbin/squidshut.sh (code=exited, status=1/FAILURE)
Process: 23047 ExecStart=/usr/sbin/squid -sYC (code=exited, status=0/SUCCESS)
Process: 23044 ExecStartPre=/usr/bin/chown squid.squid /var/run/squid (code=exited, status=0/SUCCESS)
Process: 23042 ExecStartPre=/usr/bin/mkdir -p /var/run/squid (code=exited, status=0/SUCCESS)
Main PID: 23051

Apr 14 08:41:41 localhost.localdomain squid[23143]: error in opendir (/var/spool/squid/00/37): (13) Permission denied
Apr 14 08:41:41 localhost.localdomain squid[23143]: error in opendir (/var/spool/squid/00/38): (13) Permission denied
Apr 14 08:41:41 localhost.localdomain squid[23143]: ERROR: listen( FD 31, [::] [ job2], 4096): (98) Address already in use
Apr 14 08:41:41 localhost.localdomain squid[23143]: WARNING: ldap_users #Hlpr6 exited
Apr 14 08:41:41 localhost.localdomain squid[23143]: The ldap_users helpers are crashing too rapidly, need help!
Apr 14 08:41:41 localhost.localdomain squid[23049]: Exiting due to repeated, frequent failures
Apr 14 08:41:41 localhost.localdomain squidshut.sh[23153]: Stopping Squid: Squid settings file Falied the check
Apr 14 08:41:41 localhost.localdomain systemd[1]: squid.service: control process exited, code=exited status=1
Apr 14 08:41:41 localhost.localdomain systemd[1]: Unit squid.service entered failed state.
Apr 14 08:41:41 localhost.localdomain systemd[1]: squid.service failed.


как бы нет прав к /var/spool/squid/00/37, но


[root@localhost squid]# ls -al /var/spool/squid/
total 196
drwxr-xr-x. 18 squid squid 4096 Apr 14 08:36 .
drwxr-xr-x. 9 root root 93 Apr 14 08:32 ..
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 00
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 01
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 02
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 03
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 04
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 05
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 06
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 07
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 08
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 09
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 0A
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 0B
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 0C
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 0D
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 0E
drwxr-x---. 258 squid squid 8192 Apr 14 08:36 0F


В чем может быть проблема?

[bkhmelnytskiy]

Apr 14 08:41:41 localhost.localdomain squid[23143]: error in opendir (/var/spool/squid/00/37): (13) Permission denied »

решилось "chmod 775", но другие проблемы остались

[NickM]

Покажите что осталось

[bkhmelnytskiy]

[root@localhost spool]# service squid status
Redirecting to /bin/systemctl status squid.service
● squid.service - Squid Web Proxy Server
Loaded: loaded (/usr/lib/systemd/system/squid.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Thu 2016-04-14 11:58:38 EEST; 9s ago
Docs: man:squid(8)
Process: 10117 ExecStop=/usr/sbin/squidshut.sh (code=exited, status=1/FAILURE)
Process: 10011 ExecStart=/usr/sbin/squid -sYC (code=exited, status=0/SUCCESS)
Process: 10008 ExecStartPre=/usr/bin/chown squid.squid /var/run/squid (code=exited, status=0/SUCCESS)
Process: 10006 ExecStartPre=/usr/bin/mkdir -p /var/run/squid (code=exited, status=0/SUCCESS)
Main PID: 10014

Apr 14 11:58:38 localhost.localdomain squid[10108]: Finished. Wrote 0 entries.
Apr 14 11:58:38 localhost.localdomain squid[10108]: Took 0.00 seconds ( 0.00 entries/sec).
Apr 14 11:58:38 localhost.localdomain squid[10108]: The ldap_users helpers are crashing too rapidly, need help!
Apr 14 11:58:38 localhost.localdomain squid[10012]: Squid Parent: (squid-1) process 10108 exited with status 1
Apr 14 11:58:38 localhost.localdomain squid[10012]: Squid Parent: (squid-1) process 10108 will not be restarted due to repeated, frequent failures
Apr 14 11:58:38 localhost.localdomain squid[10012]: Exiting due to repeated, frequent failures
Apr 14 11:58:38 localhost.localdomain squidshut.sh[10117]: Stopping Squid: Squid settings file Falied the check
Apr 14 11:58:38 localhost.localdomain systemd[1]: squid.service: control process exited, code=exited status=1
Apr 14 11:58:38 localhost.localdomain systemd[1]: Unit squid.service entered failed state.
Apr 14 11:58:38 localhost.localdomain systemd[1]: squid.service failed.

[NickM]

bkhmelnytskiy, конфиг привидите или результат -k check

[bkhmelnytskiy]

результат -k check »

[root@localhost init.d]# squid -k check
[root@localhost init.d]#


Проблема решилась переустановкой squid. Но корень зла я все таки нашел, вот он:

libecap.x86_64 0:1.0.0-3.el7.centos

не понятно каким образом, но при первой установки squid почему-то была установлена старая версия, а для корректной роботы squid на centos 7 нужна вот эта:

libecap-0.2.0-9.el7.x86_64.rpm

которая была успешно установлена автоматически при повторной установке

yum install squid

[bkhmelnytskiy]

В процессе настройки возник еще один вопрос - может быть кто-то настраивал "intercept HTTPS CONNECT messages with SSL-Bump"? Если есть возможность поделится таким опытом - буду очень признателен.