Re: [squid-users] SQUID Logrotate problem

From: Railic Njegos <railic.njegos_at_gmail.com>
Date: Fri, 29 Jul 2011 13:36:21 +0200

Hi all,
definetly problem is with permission.

When i try manualy rotate result is next :

[root_at_proxy01 ~]# ll /var/log/squid/
total 469016
-rw-r--r-- 1 squid squid 308718681 Jul 29 13:13 access.log
-rw-r--r-- 1 squid squid 18831645 Jul 4 23:13 access.log.1.gz
-rw-r--r-- 1 squid squid 15437442 Jun 7 21:03 access.log.2.gz
-rw-r--r-- 1 squid squid 7987085 May 16 14:37 access.log.3.gz
-rw-r--r-- 1 squid squid 4121806 May 1 04:02 access.log.4.gz
-rw-r--r-- 1 squid squid 3266210 Apr 24 04:02 access.log.5.gz
-rw-r--r-- 1 squid squid 24858481 Jul 29 13:03 cache.log
-rw-r--r-- 1 squid squid 2504821 Jul 4 23:13 cache.log.1.gz
-rw-r--r-- 1 squid squid 2681893 Jun 7 21:03 cache.log.2.gz
-rw-r--r-- 1 squid squid 2360296 May 16 14:37 cache.log.3.gz
-rw-r--r-- 1 squid squid 1389531 May 1 04:02 cache.log.4.gz
-rw-r--r-- 1 squid squid 934844 Apr 24 04:02 cache.log.5.gz
-rw-r--r-- 1 squid squid 1862553 Dec 9 2009 mail.txt
-rw-r--r-- 1 squid squid 7144 May 3 21:55 squid.out
-rw-r--r-- 1 squid squid 0 Apr 4 2009 store.log

[root_at_proxy01 ~]# rpm -q squid logrotate
squid-2.6.STABLE21-6.el5
logrotate-3.7.4-9.el5_5.2

[root_at_proxy01 ~]# logrotate -d -v -f /etc/logrotate.d/squid
reading config file /etc/logrotate.d/squid
reading config info for /var/log/squid/access.log
reading config info for /var/log/squid/cache.log
reading config info for /var/log/squid/store.log

Handling 3 logs

rotating pattern: /var/log/squid/access.log forced from command line
(5 rotations)
empty log files are not rotated, old logs are removed
considering log /var/log/squid/access.log
  log needs rotating
rotating log /var/log/squid/access.log, log->rotateCount is 5
renaming /var/log/squid/access.log.5.gz to
/var/log/squid/access.log.6.gz (rotatecount 5, logstart 1, i 5),
renaming /var/log/squid/access.log.4.gz to
/var/log/squid/access.log.5.gz (rotatecount 5, logstart 1, i 4),
renaming /var/log/squid/access.log.3.gz to
/var/log/squid/access.log.4.gz (rotatecount 5, logstart 1, i 3),
renaming /var/log/squid/access.log.2.gz to
/var/log/squid/access.log.3.gz (rotatecount 5, logstart 1, i 2),
renaming /var/log/squid/access.log.1.gz to
/var/log/squid/access.log.2.gz (rotatecount 5, logstart 1, i 1),
renaming /var/log/squid/access.log.0.gz to
/var/log/squid/access.log.1.gz (rotatecount 5, logstart 1, i 0),
copying /var/log/squid/access.log to /var/log/squid/access.log.1
truncating /var/log/squid/access.log
compressing log with: /bin/gzip
removing old log /var/log/squid/access.log.6.gz

rotating pattern: /var/log/squid/cache.log forced from command line
(5 rotations)
empty log files are not rotated, old logs are removed
considering log /var/log/squid/cache.log
  log needs rotating
rotating log /var/log/squid/cache.log, log->rotateCount is 5
renaming /var/log/squid/cache.log.5.gz to
/var/log/squid/cache.log.6.gz (rotatecount 5, logstart 1, i 5),
renaming /var/log/squid/cache.log.4.gz to
/var/log/squid/cache.log.5.gz (rotatecount 5, logstart 1, i 4),
renaming /var/log/squid/cache.log.3.gz to
/var/log/squid/cache.log.4.gz (rotatecount 5, logstart 1, i 3),
renaming /var/log/squid/cache.log.2.gz to
/var/log/squid/cache.log.3.gz (rotatecount 5, logstart 1, i 2),
renaming /var/log/squid/cache.log.1.gz to
/var/log/squid/cache.log.2.gz (rotatecount 5, logstart 1, i 1),
renaming /var/log/squid/cache.log.0.gz to
/var/log/squid/cache.log.1.gz (rotatecount 5, logstart 1, i 0),
copying /var/log/squid/cache.log to /var/log/squid/cache.log.1
truncating /var/log/squid/cache.log
compressing log with: /bin/gzip
removing old log /var/log/squid/cache.log.6.gz

rotating pattern: /var/log/squid/store.log forced from command line
(5 rotations)
empty log files are not rotated, old logs are removed
considering log /var/log/squid/store.log
  log does not need rotating
not running postrotate script, since no logs were rotated
[root_at_proxy01 ~]# squid -k rotate
[root_at_proxy01 ~]# ls -lZ /var/log/squid/
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.1.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.2.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.3.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.4.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.5.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.1.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.2.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.3.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.4.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.5.gz
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 mail.txt
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 squid.out
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 store.log
-rw-r--r-- squid squid root:object_r:squid_log_t:s0 trendmicro.log

[root_at_proxy01 ~]# ll /var/log/squid/
total 469212
-rw-r--r-- 1 squid squid 308914051 Jul 29 13:19 access.log
-rw-r--r-- 1 squid squid 18831645 Jul 4 23:13 access.log.1.gz
-rw-r--r-- 1 squid squid 15437442 Jun 7 21:03 access.log.2.gz
-rw-r--r-- 1 squid squid 7987085 May 16 14:37 access.log.3.gz
-rw-r--r-- 1 squid squid 4121806 May 1 04:02 access.log.4.gz
-rw-r--r-- 1 squid squid 3266210 Apr 24 04:02 access.log.5.gz
-rw-r--r-- 1 squid squid 24859168 Jul 29 13:19 cache.log
-rw-r--r-- 1 squid squid 2504821 Jul 4 23:13 cache.log.1.gz
-rw-r--r-- 1 squid squid 2681893 Jun 7 21:03 cache.log.2.gz
-rw-r--r-- 1 squid squid 2360296 May 16 14:37 cache.log.3.gz
-rw-r--r-- 1 squid squid 1389531 May 1 04:02 cache.log.4.gz
-rw-r--r-- 1 squid squid 934844 Apr 24 04:02 cache.log.5.gz
-rw-r--r-- 1 squid squid 1862553 Dec 9 2009 mail.txt
-rw-r--r-- 1 squid squid 7144 May 3 21:55 squid.out
-rw-r--r-- 1 squid squid 0 Apr 4 2009 store.log

After rotation files are not changed. What is wrong with permission?

Njegos

On Thu, Jul 28, 2011 at 10:19 AM, Railic Njegos <railic.njegos_at_gmail.com> wrote:
> After all, I reviewed squid.conf and found l:
>
> #logfile_rotate 0
>
> is commented. I uncommented this line, set all permission to 664
>
> root@ server# ll /var/log/squid/
> total 8292
> -rw-r--r-- 1 squid squid 4205163 Jul 28 10:11 access.log
> -rw-r--r-- 1 squid squid  575272 Jul 28 04:02 access.log.1.gz
> -rw-r--r-- 1 squid squid  541432 Jul 27 04:02 access.log.2.gz
> -rw-r--r-- 1 squid squid  678548 Jul 26 04:02 access.log.3.gz
> -rw-r--r-- 1 squid squid   53749 Jul 25 04:02 access.log.4.gz
> -rw-r--r-- 1 squid squid  181229 Jul 24 04:02 access.log.5.gz
> -rw-r--r-- 1 squid squid 1063373 Jul 28 10:06 cache.log
> -rw-r--r-- 1 squid squid  158995 Jul 28 04:02 cache.log.1.gz
> -rw-r--r-- 1 squid squid  125093 Jul 27 04:02 cache.log.2.gz
> -rw-r--r-- 1 squid squid  100423 Jul 26 04:02 cache.log.3.gz
> -rw-r--r-- 1 squid squid     140 Jul 25 04:02 cache.log.4.gz
> -rw-r--r-- 1 squid squid  119508 Jul 24 04:02 cache.log.5.gz
> -rw-r--r-- 1 squid squid  534963 Dec  9  2009 mail.txt
> -rw-r--r-- 1 squid squid    7068 Jul  4 23:22 squid.out
> -rw-r--r-- 1 squid squid       0 Apr  4  2009 store.log
> -rw-r--r-- 1 squid squid       0 Jul 23  2009 test.txt
>
>
> and
>
>  ll /etc/logrotate.d/
>
> -rw-r--r-- 1 root root 543 Jul 28 10:11 squid
>
> And now I wait until tommorow.
>
> Njegos
>
>
> On Fri, Jul 22, 2011 at 3:59 PM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
>> On 23/07/11 00:50, Will Roberts wrote:
>>>
>>> Hi Amos,
>>>
>>> On Fri, Jul 22, 2011 at 12:32 AM, Amos Jeffries<squid3_at_treenet.co.nz>
>>>  wrote:
>>>>
>>>> Can you check the contents of the squid.pid file vs the processes that
>>>> are actually running between step (6) and (7).
>>>
>>> Sure, here are the processes after each step that would cause a change:
>>>
>>> Step 3:
>>>  1879 ?        Ss     0:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf
>>>  1881 ?        S      0:00 (squid) -YC -f /etc/squid3/squid.conf
>>>  1890 ?        S      0:00 (digest_pw_auth) -c /etc/squid3/digest
>>>
>>> Step 5:
>>>  1879 ?        Ss     0:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf
>>>  1881 ?        S      0:00 (squid) -YC -f /etc/squid3/squid.conf
>>>  1890 ?        S      0:00 (digest_pw_auth) -c /etc/squid3/digest
>>>
>>> Step 7:
>>>  1879 ?        Ss     0:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf
>>>  1881 ?        S      0:00 (squid) -YC -f /etc/squid3/squid.conf
>>>  2237 ?        S      0:00 (digest_pw_auth) -c /etc/squid3/digest
>>>
>>> And the pid file never changed from 1881. Let me know if you want an
>>> strace or anything else.
>>>
>>> --Will
>>
>> I'm out of ideas for now. I suspected the old issue of PID left pointing at
>> the crashed/gone process, but seems we did really fix that one.
>>
>> So it comes down to why the automated rotate was crashing in the first
>> place.
>>
>> Amos
>> --
>> Please be using
>>  Current Stable Squid 2.7.STABLE9 or 3.1.14
>>  Beta testers wanted for 3.2.0.9
>>
>
Received on Fri Jul 29 2011 - 11:36:29 MDT

This archive was generated by hypermail 2.2.0 : Fri Jul 29 2011 - 12:00:03 MDT