Search squid archive

Re: Cache manager - 2 questions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le 13/02/2006, Henrik Nordstrom <hno@xxxxxxxxxxxxxxx> a dit:

> On Mon, 13 Feb 2006, Magali Bernard wrote:
> 
> > I have noticed that cachemgr.cgi gives no more value but 0 (zero) for
> > Maximum Resident Size. Could it be something in squid configuration ?
> 
> Not configuration related.. most likely OS/libc issue.
> 
> What does the following small C program report on your system:
> 
> --- cut here ---
> #include <sys/time.h>
> #include <sys/resource.h>
> #include <string.h>
> #include <stdio.h>
> #include <stdlib.h>
> 
> int main(int argc, char **argv)
> {
>  	char *p = malloc(1024 * 1024);
>  	struct rusage ru;
>  	int i;
>  	memset(p, 0, 1024 * 1024);
>  	memset(&ru, 0, sizeof(ru));
>  	getrusage(RUSAGE_SELF, &ru);
>  	printf("My Maximum Resident size: %d\n", (int)ru.ru_maxrss);
> }
> --- cut here ---
> 
> save as rsstest.c, then
> 
>    gcc -o rsstest rsstest.c
>    ./rsstest
> 
> My bet is that this too reports 0, where it certainly is larger...

And of course you're right.
I'm running Debian Woody (old stable) with libc6 (Provides: glibc-2.2.5-11.8)
Hope Debian Sarge (stable) will solve the problem.

> > Second, giving the next config, I thought I could not access to
> > Cache Manager from a browser outside "localhost": I do, after
> > providing authentication (manager/password). Is it normal ?
> 
> Depends on your http_access rules, and what you refer to...
> 
> The access controls in Squid restricts where cachemgr.cgi may be running, 
> not who may use cachemgr.cgi. Defaults to only allow access to 
> cachemgr.cgi running on the same box (i.e. web server on same box as 
> Squid).

This point I didn't understand at all.

> The more interesting access controls on who may call the cachemgr.cgi 
> application is in your web server where you call the cachemgr.cgi 
> application, not Squid.
> 
> When both conditions (user allowed by webserver to call the cachemgr.cgi, 
> and whe webserer allowed by Squid to use the cachemgr functions) are 
> fulfilled the cachemgr_password settings in squid.conf further restricts 
> access by requiring a "secret" password as per your squid.conf.

Now it's clear for me that these controls are the most important.
Fortunately they already exist.

Thanks a lot,

> Regards
> Henrik
> 

-- 
______________________________________________________________________
Magali BERNARD - Centre de Ressources Informatiques Télécom et Réseaux
Université Jean Monnet de Saint-Étienne - FRANCE

A: Yes.
>Q: Are you sure?
>>A: Because it reverses the logical flow of conversation.
>>>Q: Why is top posting annoying in email?




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux