[squid-users] Linux build, libcap, and enable-linux-netfilter

Hey all, I'm trying to compile squid 3.1.20 on a RHEL5 machine
(running kernel 2.6.18-308) with --enable-linux-netfilter to add
support for running as a transparent proxy. Also installed are libcap
development files1.10-26 (i.e. /usr/include/sys/capability.h and
/usr/include/linux/capability.h with libcap-devel).

Unfortunately, when running configure the script is consistently throwing:
configure: WARNING: Missing needed capabilities (libcap or libcap2) for TPROXY
configure: WARNING: Linux Transparent Proxy support WILL NOT be enabled
configure: WARNING: Reduced support to Interception Proxy
configure: WARNING: Missing needed capabilities (libcap or libcap2)
for TPROXY v2
configure: WARNING: Linux Transparent Proxy support WILL NOT be enabled

This seems to be a pretty common problem people are running into, but
the solution most people on the Internet present is to make sure
libcap is installed. Could the configure script be looking in the
wrong place for some reason? Full config flags are below

./configure \
--prefix=/opt/www/squid-3.1.20 \
--disable-dependency-tracking \
--enable-arp-acl \
--enable-follow-x-forwarded-for \
--enable-auth="basic,digest,ntlm,negotiate" \
--enable-basic-auth-helpers="LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,DB,POP3,squid_radius_auth"
\
--enable-ntlm-auth-helpers="smb_lm,no_check,fakeauth" \
--enable-digest-auth-helpers="password,ldap,eDirectory" \
--enable-negotiate-auth-helpers="squid_kerb_auth" \
--enable-external-acl-helpers="ip_user,ldap_group,session,unix_group,wbinfo_group"
\
--enable-cache-digests \
--enable-cachemgr-hostname=localhost \
--enable-delay-pools \
--enable-epoll \
--enable-icap-client \
--enable-ident-lookups \
--with-large-files \
--enable-referer-log \
--enable-removal-policies="heap,lru" \
--enable-snmp \
--enable-ssl \
--enable-storeio="aufs,diskd,ufs" \
--enable-useragent-log \
--enable-wccpv2 \
--enable-esi \
--with-aio \
--with-default-user="squid" \
--with-filedescriptors=16384 \
--with-dl \
--with-openssl \
--with-pthreads \
--enable-linux-netfilter

Thanks for your time,
David
Received on Tue Aug 14 2012 - 17:54:01 MDT