Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Tue, 13 Nov 2007 20:52:09 +0100

On tis, 2007-11-13 at 14:14 +0100, nick humphrey wrote:

> but after uploading my new squid.conf and running reconfigure i would
> expect to see squid listening on port 80, but it isn't:

Did you upload the squid.conf to the correct place?

> i checked my squid logs and couldn't see any requests on port 80 other
> than this in cache.log:
> commBind: Cannot bind socket FD 8 to *:80: (13) Permission denied

Right. To bind to ports <1024 you either need to remove this restriction
from your OS, or start Squid as root. Squid then changes user to the
cache_effective_user after startup.

> so i ps'ed to see who is running what:
> $ ps aux |grep squid
> squid 3338 0.0 0.5 5408 2068 ? Ss Nov06 0:00
> /usr/local/squid/sbin/squid -D
> squid 3340 0.0 6.2 48568 24356 ? S Nov06 1:23 (squid) -D
> squid 3341 0.0 0.0 1240 280 ? Ss Nov06 0:00 (unlinkd)
> root 21173 0.0 0.5 7512 2216 ? Ss 13:27 0:00 sshd:
> squid [priv]
> squid 21177 0.0 0.6 7688 2340 ? S 13:27 0:02 sshd:
> squid@pts/0
> squid 21178 0.0 0.5 3600 2128 pts/0 Ss 13:27 0:00 -bash
> squid 21388 0.0 0.2 2344 908 pts/0 R+ 14:33 0:00 ps aux
> squid 21389 0.0 0.1 1772 600 pts/0 R+ 14:33 0:00 grep squid
>
> does squid need to run as root? i thought it had to run as the squid user?
> i'm baffled....

It's running as squid. The only root processes above is the ssh daemon
from your ssh login..

Regards
Henrik

Received on Tue Nov 13 2007 - 12:52:24 MST

This archive was generated by hypermail pre-2.1.9 : Sat Dec 01 2007 - 12:00:02 MST