[squid-users] How to debug external_acl_type

From: Maik Kündig <Maik.Kuendig_at_reist-tele.com>
Date: Tue, 25 Aug 2009 17:14:51 +0200

Hello,

I need some help to debug a external_acly_type problem. Which debug options
to set? Where can I find more output?

squid.conf:
-----8<-----
acl all src all

auth_param basic program /usr/local/bin/my-auth.pl
#external_acl_type myAclType ttl=1 %SRC %LOGIN %{Proxy-Authorization}
/usr/local/bin/my-acl.pl
external_acl_type myAclType ttl=1 %SRC %LOGIN %{Proxy-Authorization}
/tmp/foobar
acl MyAcl external myAclType
http_access allow MyAcl

http_port 3128
debug_options ALL,1 82,9 4,9 11,9 28,9

hosts_file /etc/hosts
access_log /var/log/squid/access.log squid
coredump_dir /var/spool/squid
----->8-----

/tmp/foobar:
-----8<-----
#!/usr/bin/perl

$|=1;

while (<>) {
  print "OK";
}
----->8-----

/var/log/squid/cache.log:
-----8<-----
2009/08/25 17:09:17| aclCheckFast: list: 0x8d187e8
2009/08/25 17:09:17| aclMatchAclList: checking all
2009/08/25 17:09:17| aclMatchAcl: checking 'acl all src all'
2009/08/25 17:09:17| aclMatchIp: '192.168.32.1' found
2009/08/25 17:09:17| aclMatchAclList: returning 1
2009/08/25 17:09:17| aclCheck: checking 'http_access allow MyAcl'
2009/08/25 17:09:17| aclMatchAclList: checking MyAcl
2009/08/25 17:09:17| aclMatchAcl: checking 'acl MyAcl external myAclType'
2009/08/25 17:09:17| aclMatchExternal: acl="myAclType"
2009/08/25 17:09:17| aclAuthenticated: returning 0 sending authentication
challenge.
2009/08/25 17:09:17| aclMatchExternal: myAclType user not authenticated (-1)
2009/08/25 17:09:17| aclMatchAclList: no match, returning 0
2009/08/25 17:09:17| aclCheck: requiring Proxy Auth header.
2009/08/25 17:09:17| aclCheck: match found, returning 2
2009/08/25 17:09:17| aclCheckCallback: answer=2
2009/08/25 17:09:17| errorConvert: %U --> 'http://www.openbsd.org/'
2009/08/25 17:09:17| errorConvert: %U --> 'http://www.openbsd.org/'
2009/08/25 17:09:17| errorConvert: %U --> 'http://www.openbsd.org/'
2009/08/25 17:09:17| errorConvert: %w --> 'webmaster'
2009/08/25 17:09:17| errorConvert: %h --> 'squid-ads.localdomain'
2009/08/25 17:09:17| errorConvert: %T --> 'Tue, 25 Aug 2009 15:09:17 GMT'
2009/08/25 17:09:17| errorConvert: %h --> 'squid-ads.localdomain'
2009/08/25 17:09:17| errorConvert: %s --> 'squid/2.7.STABLE3'
2009/08/25 17:09:17| errorConvert: %S --> '
<BR clear="all">
<HR noshade size="1px">
<ADDRESS>
Generated Tue, 25 Aug 2009 15:09:17 GMT by squid-ads.localdomain
(squid/2.7.STABLE3)
</ADDRESS>
</BODY></HTML>
'
2009/08/25 17:09:17| aclCheckFast: list: 0x8d187e8
2009/08/25 17:09:17| aclMatchAclList: checking all
2009/08/25 17:09:17| aclMatchAcl: checking 'acl all src all'
2009/08/25 17:09:17| aclMatchIp: '192.168.32.1' found
2009/08/25 17:09:17| aclMatchAclList: returning 1
2009/08/25 17:09:17| aclCheck: checking 'http_access allow MyAcl'
2009/08/25 17:09:17| aclMatchAclList: checking MyAcl
2009/08/25 17:09:17| aclMatchAcl: checking 'acl MyAcl external myAclType'
2009/08/25 17:09:17| aclMatchExternal: acl="myAclType"
2009/08/25 17:09:17| aclAuthenticated: returning 0 sending credentials to
helper.
2009/08/25 17:09:17| aclMatchExternal: myAclType user not authenticated (-1)
2009/08/25 17:09:17| aclMatchAclList: no match, returning 0
2009/08/25 17:09:17| aclCheck: checking password via authenticator
----->8-----

Best regards

Maik Kündig
Received on Tue Aug 25 2009 - 15:11:23 MDT

This archive was generated by hypermail 2.2.0 : Wed Aug 26 2009 - 12:00:04 MDT