Re: [squid-users] configuring splash page

From: Andrew Beverley <andy_at_andybev.com>
Date: Tue, 25 Oct 2011 00:34:33 +0100

On Tue, 2011-10-25 at 02:23 +0300, Alex F wrote:
> >>
> >> BTW, how can I find out what version is the session helper?
> >> Cheers.
> >
> > ext_session_acl -v should tell you.
>
> It doesn't work, I already tried it.
> /usr/local/squid/libexec/ext_session_acl -v
> /usr/local/squid/libexec/ext_session_acl: invalid option -- 'v'

Not a wholly accurate test, but if you check the man page then that will
tell you the version (man ext_session_acl).

> BTW, did you leave "/var/lib/squid/session/" intentionally or was it
> supposed to be /var/lib/squid/session/session.db?

Ah, that could be your problem. It needs to be /var/lib/squid/session/
(it works with a filename for backward compatibility). Using a directory
causes the helper to open a database environment, which prevents the
sync problems that you are seeing (the man page provides more info). Try
that and it should fix it.

> Can you please confirm that this type of config is working with you,
> so I can be sure that at least this isn't the problem.

My *exact* current config (with extra stuff) that works is as follows:

http_access allow localhost
acl our_networks src 10.0.0.0/16
external_acl_type session_active_def concurrency=100 ttl=3 %SRC /usr/lib/squid3/ext_session_acl -a -T 10800 -b /var/lib/squid/session/
acl session_is_active external session_active_def
acl session_day time "/var/www/announce_days.txt"
deny_info http://nelsonwr.wardroom/announce.php?url=%u session_day session_is_active
http_access deny session_day !session_is_active
http_access allow our_networks
http_access deny all

My LOGIN code is contained in a local PHP page that serves up the splash
page (I do this because local web requests bypass Squid):

  $handle = popen($session_helper, 'w');
  fwrite($handle, "10 " . $_SERVER['REMOTE_ADDR'] . " LOGIN\n");
  pclose($handle);

Andy
Received on Mon Oct 24 2011 - 23:34:40 MDT

This archive was generated by hypermail 2.2.0 : Tue Oct 25 2011 - 12:00:03 MDT