On 5/11/2012 10:12 p.m., Janåke Rönnblom wrote:
Hi
Im using squid-3.1.16 on Ubuntu 10.04. Since Squid-3.1 is not included in
Ubuntu 10.04 i compiled it myself.
I also use squid_kerb_auth for authentication and squid_ldap_group for checking
group membership.
I recently tried to upgrade to Ubuntu 12.04 with the included squid-3.1.19
however I cant get this to work with Kerberos. After a lot(!) of trial and
error I tried my 3.1.16 which worked.
After that I tried compiling 3.1.18, 3.1.19, 3.1.20 and 3.1.21. Everyone of
those crashes either silently or with a
FATAL: Received Segment Violation...dying.
or
assertion failed: external_acl.cc:841: "ch->auth_user_request"
This is my configure line:
./configure --disable-maintainer-mode --disable-dependency-tracking
--disable-silent-rules --enable-inline --enable-async-io=8
--enable-storeio=ufs,aufs,diskd --enable-removal-policies=lru,heap
--enable-delay-pools --enable-cache-digest --enable-underscores
--enable-icap-client --enable-follow-x-forwarded-for
--enable-negotiate-auth-helpers=squid_kerb_auth
--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group
--enable-arp-acl --enable-esi --enable-zph-qos --disable-translation
--with-logdir=/var/log/squid3 --with-pidfile=/var/run/squid3.pid
--enable-digest-auth-helpers=ldap,password
--enable-negotiate-auth-helpers=squid_kerb_auth
--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group
--with-filedescriptors=65536 --with-large-files --with-default-user=proxy
--enable-linux-netfilter --enable-ltdl-convenience --build=x86_64-linux-gnu
I ran the same config with every different release of squid and the only one
that works is 3.1.16
To me it looks like a problem with the Kerberos authentication.
Any ideas how to resolve this?
Please try 3.2.3. There are a lot of auth related issues in 3.1 like
this one which are resolved in the newer series.
Amos
