RE: authenticate_program bombs out

From: Mike Everest <mike@dont-contact.us>
Date: Tue, 27 Mar 2001 09:53:54 +1000

yes!

authenticate_program d:\squid\sqltest.exe
authenticate_children 2

and here are the acl rules i am using (mostly default):

acl authenticated proxy_auth REQUIRED
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
#acl GSAT_IDOM src 203.23.179.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

and the access rules:

#Default configuration:
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
http_access allow localhost
#http_access allow GSAT_IDOM
http_access allow authenticated
http_access deny all

by the way, i have not been able to find the cygwin32 version - do you have
any pointers?

many thanks and regards,

Mike.

> -----Original Message-----
> From: Robert Collins [mailto:robert.collins@itdomain.com.au]
> Sent: Tuesday, 27 March 2001 9:37
> To: Mike Everest; squid-dev@squid-cache.org
> Subject: RE: authenticate_program bombs out
>
>
> Have you configured a authenticate_program line in your squid.conf?
>
>
>
>
> > -----Original Message-----
> > From: Mike Everest [mailto:mike@gsat.net.au]
> > Sent: Tuesday, March 27, 2001 9:41 AM
> > To: Robert Collins; Mike Everest; squid-dev@squid-cache.org
> > Subject: RE: authenticate_program bombs out
> >
> >
> > Thanks Robert,
> >
> > > There will be more details at the start of the log on what
> > > squid manages
> > > to start up.
> >
> > here is the whole log, from startup to bomb. what i do is
> > delete cache.log, start the squid service, send it a request
> > for a single file (like:
> > http://www.site.com/images/image.gif) then here is the full
> > contents of cache.log:
> >
> > ==========....============
> >
> > 2001/03/27 09:35:01| Starting Squid Cache version 2.3.STABLE4
> > for WIN32...
> > 2001/03/27 09:35:01| Process ID 3616
> > 2001/03/27 09:35:01| With 2560 file descriptors available
> > 2001/03/27 09:35:01| Performing DNS Tests...
> > 2001/03/27 09:35:01| Successful DNS name lookup tests...
> > 2001/03/27 09:35:01| DNS Socket created on FD 404
> > 2001/03/27 09:35:01| Adding nameserver 203.23.178.2 from Registry
> > 2001/03/27 09:35:01| Adding nameserver 203.23.178.3 from Registry
> > 2001/03/27 09:35:01| Adding nameserver 203.23.178.6 from Registry
> > 2001/03/27 09:35:01| Adding nameserver 203.23.178.2 from Registry
> > 2001/03/27 09:35:01| Adding nameserver 203.23.178.3 from Registry
> > 2001/03/27 09:35:01| Adding nameserver 203.23.178.6 from Registry
> > 2001/03/27 09:35:01| Swap maxSize 102400 KB, estimated 7876 objects
> > 2001/03/27 09:35:01| Target number of buckets: 157
> > 2001/03/27 09:35:01| Using 8192 Store buckets
> > 2001/03/27 09:35:01| Max Mem size: 8192 KB
> > 2001/03/27 09:35:01| Max Swap size: 102400 KB
> > 2001/03/27 09:35:01| Local cache digest enabled;
> > rebuild/rewrite every 3600/3600 sec
> > 2001/03/27 09:35:01| Rebuilding storage in d:\squid\cache (DIRTY)
> > 2001/03/27 09:35:01| Set Current Directory to d:\squid\cache
> > 2001/03/27 09:35:01| Loaded Icons.
> > 2001/03/27 09:35:01| Accepting HTTP connections at 127.0.0.1,
> > port 3128, FD 108.
> > 2001/03/27 09:35:01| Accepting HTTP connections at
> > 203.23.178.4, port 8081, FD 432.
> > 2001/03/27 09:35:01| commSetNoLinger: FD 440: 10042
> > 2001/03/27 09:35:01| Accepting ICP messages at 0.0.0.0, port
> > 3130, FD 440.
> > 2001/03/27 09:35:01| commSetNoLinger: FD 448: 10042
> > 2001/03/27 09:35:01| Accepting HTCP messages on port 4827, FD 448.
> > 2001/03/27 09:35:01| WCCP Disabled.
> > 2001/03/27 09:35:01| Ready to serve requests.
> > 2001/03/27 09:35:02| Done reading d:\squid\cache swaplog
> (105 entries)
> > 2001/03/27 09:35:02| Finished rebuilding storage from disk.
> > 2001/03/27 09:35:02| 105 Entries scanned
> > 2001/03/27 09:35:02| 0 Invalid entries.
> > 2001/03/27 09:35:02| 0 With invalid flags.
> > 2001/03/27 09:35:02| 86 Objects loaded.
> > 2001/03/27 09:35:02| 0 Objects expired.
> > 2001/03/27 09:35:02| 0 Objects cancelled.
> > 2001/03/27 09:35:02| 0 Duplicate URLs purged.
> > 2001/03/27 09:35:02| 19 Swapfile clashes avoided.
> > 2001/03/27 09:35:02| Took 1.0 seconds ( 86.0 objects/sec).
> > 2001/03/27 09:35:02| Beginning Validation Procedure
> > 2001/03/27 09:35:02| Completed Validation Procedure
> > 2001/03/27 09:35:02| Validated 86 Entries
> > 2001/03/27 09:35:02| store_swap_size = 1597k
> > 2001/03/27 09:35:04| storeLateRelease: released 0 objects
> > 2001/03/27 09:36:32| authenticateStart: 'mike:xxxxxxxxxxx'
> > 2001/03/27 09:36:32| WARNING: All authenticator processes are busy.
> > 2001/03/27 09:36:32| WARNING: 1 pending requests queued
> > 2001/03/27 09:36:32| storeDirWriteCleanLogs: Starting...
> > 2001/03/27 09:36:33| Finished. Wrote 86 entries.
> > 2001/03/27 09:36:33| Took 1.0 seconds ( 86.1 entries/sec).
> > FATAL: Too many queued authenticator requests
> > Squid Cache (Version 2.3.STABLE4): Terminated abnormally.
> > CPU Usage: 0.000 seconds = 0.000 user + 0.000 sys
> > Maximum Resident Size: 0 KB
> > Page faults with physical i/o: 0
> >
> > ==========....============
> >
> > i can't see where it loads the authenticator anywhere :(
> >
> > > My .2c worth: download cygwin & the cygwin precompiled
> > > version - I know
> > > that works :]
> >
> > ;-) heck, i have no allegiances - i used the 'NT' port coz
> > it's the first one i found that purported to run on NT - i'll
> > hunt down the cygwin version right away and (if i can find
> > it) try it out!
> >
> > thanks again,
> >
> > Mike.
> >
> > >
> > > Rob
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: Mike Everest [mailto:mike@gsat.net.au]
> > > > Sent: Tuesday, March 27, 2001 9:03 AM
> > > > To: Robert Collins; Mike Everest; squid-dev@squid-cache.org
> > > > Subject: RE: authenticate_program bombs out
> > > >
> > > >
> > > > Hi Robert, thanks too for your suggestions!
> > > >
> > > > > Does you program uses buffered I/O? What is the lag time doing
> > > > > authentication?
> > > >
> > > > the way it runs now, the only IO is stdin with
> > > > "while(fgets(buf, 256, stdin)
> > > > != NULL)" and stdout like "printf("ERR\n")"
> > > >
> > > > > I don't know too much about the "NT" Port of squid (I
> > maintain the
> > > > > cygwin/Win32 port) but on every other version of squid,
> > > turning the
> > > > > debug level to ALL,1 29,9 will get the actual input and
> > > ouput to the
> > > > > authenticators logged. Then you can examine the log (In the
> > > > event log
> > > > > for your port) to see whats going on.
> > > >
> > > > thanks, yep - this is all that the log reports:
> > > >
> > > > 2001/03/27 08:52:22| authenticateStart: 'mike:xxxxxxxxxxx'
> > > > 2001/03/27 08:52:22| WARNING: All authenticator processes
> > are busy.
> > > > 2001/03/27 08:52:22| WARNING: 1 pending requests queued
> > > > 2001/03/27 08:52:22| storeDirWriteCleanLogs: Starting...
> > > > 2001/03/27 08:52:22| Finished. Wrote 105 entries.
> > > > 2001/03/27 08:52:22| Took 0.0 seconds (7000000.0 entries/sec).
> > > > FATAL: Too many queued authenticator requests
> > > > Squid Cache (Version 2.3.STABLE4): Terminated abnormally.
> > > > CPU Usage: 0.000 seconds = 0.000 user + 0.000 sys
> > > > Maximum Resident Size: 0 KB
> > > > Page faults with physical i/o: 0
> > > >
> > > > i suspect that "WARNING: All authenticator processes are
> > > > busy" *really*
> > > > means that none of the authenticate_program instances were
> > > > able to start up
> > > > :(
> > > >
> > > > anyone?
> > > >
> > > > thanks and regards.
> > > >
> > > >
> >
>

Received on Tue Mar 27 2001 - 02:48:37 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:13:40 MST