Help needed for access privelages with SQUID 1.1.22
Steve Burger
as I worked through what I had done the solution became obvious, I've
left all of that in the message in case it is of interest to anyone.
My problem now is that I can get the basic configuration to work but the
configuration created by the installation gives me
an access error. I'd love to hear from anyone who has got it work on SCO
Openserver 5.0.2 or 5.0.4
Regards Steve
========================================================================================
I am trying to use Squid 1.1.22 and Apache 1.3.0 off the Skunk ware 98
cd as a replacement for Netscape Proxy Server and Internet Faststart
Server (my distributor tells me that Netscape Proxy Server is no longer
available). I am trying this on two machines OS5.0.4 and 5.0.2 (my
client is not prepared to upgrade to 5.0.5 at this time).
On installing Squid it tells me that it should work straight out of the
box on port 80 if I disable Internet Faststart. Did that. Apache shows
an "It Worked!" and a PC on the network can browse the Squid and Apache
documentation.
If I now set the proxy settings on the client PC to port 80 on the
server I get the following error for any URL I try.
" Error
Access Denied
Sorry, you are not currently allowed to request:
from this cache. Please check with the cache administrator if you
believe this is incorrect.
"
I then tried to checked that Squid is operating on port 80 with "telnet
<server> 80" it connects and responses with a HTML page generated by
squid.
I then stopped squid downloaded the very basic configuration as per the
squid documentation.
I restarted squid and got
"
1999/07/30 12:22:42| Squid is not safe to run as root! If you must
1999/07/30 12:22:42| start Squid as root, then you must configure
1999/07/30 12:22:42| it to run as a non-priveledged user with the
1999/07/30 12:22:42| 'cache_effective_user' option in the config file.
FATAL: Don't run Squid as root, set 'cache_effective_user'!
Squid Cache (Version 1.1.22): Terminated abnormally.
CPU Usage: user 0 sys 0
Maximum Resident Size: -4 KB
Page faults with physical i/o: -2147350882
"
Now the basic configuration does have the 'cache_effective_user' set to
'nobody' but SCO has a user 'nouser' so I changed nobody to nouser and
restarted squid, no error this time. 'telnet <server> 80' now returns
'telnet: Unable to connect to remote host: Connection refused'. Squid is
not running on port 80, so I added 'http_port 80' to the configuration
file and restarted. telnet on 80 again connects and Squid works.
===================================================
CUSTOMWARE, 27 Cookes Road, Windsor Gardens SA 5087
Phone +61 8 8369 2287 Fax +61 8 8369 1121
Email st...@customware.aust.com
===================================================
Jean-Pierre Radley
| This started as plea for help with getting Squid 1.1.22 to work at
| all, as I worked through what I had done the solution became obvious,
| I've left all of that in the message in case it is of interest to
| anyone.
|
| My problem now is that I can get the basic configuration to work but
| the configuration created by the installation gives me an access
| error. I'd love to hear from anyone who has got it work on SCO
| Openserver 5.0.2 or 5.0.4
I compiled squid-2.2.STABLE4 last weekend on OSR 5.0.5, having never
seen it before. "No Hacking Required (TM)." I didn't muck with what you
did, trying to make it run on port 80. I've got it on the port it uses
by default, 3128, and have set /usr/local/squid and everything below it
to be owned by "nouser".
I then added this to the squid.conf file:
redirect_program /usr/local/squid/squid_redirect
to use the ad-zapping stuff from www.zip.com.au/~cs/adzap/index.html,
pointed netscape to the proxy on port 3128, and I was done except
for a couple of crontab entries.
I then ported all of my work to a customer's site, where there's an
ever-changing dynamic IP number for their connection to an ISP, and
had all the Windows clients on their internal, non-routable, 192.168.x.y
network to point to the unix box, and bingo, they're getting net pages.
Seems pretty simple and direct to me...
--
Jean-Pierre Radley <j...@jpr.com> XC/XT Custodian Sysop, CompuServe SCOForum
Kenneth McCormick
Brother Bear,
http://www.sco.com/skunkware/osr5/net/squid/
will get you squid-2.2.STABLE2
It is really nice.
Recentky, st...@customware.aust.com said...
|This started as plea for help with getting Squid 1.1.22 to work at all,
|as I worked through what I had done the solution became obvious, I've
|left all of that in the message in case it is of interest to anyone.
|
|My problem now is that I can get the basic configuration to work but the
|configuration created by the installation gives me
|an access error. I'd love to hear from anyone who has got it work on SCO
|Openserver 5.0.2 or 5.0.4
|