On Tue, 2011-10-25 at 02:23 +0300, Alex F wrote: > >> > >> BTW, how can I find out what version is the session helper? > >> Cheers. > > > > ext_session_acl -v should tell you. > > It doesn't work, I already tried it. > /usr/local/squid/libexec/ext_session_acl -v > /usr/local/squid/libexec/ext_session_acl: invalid option -- 'v' Not a wholly accurate test, but if you check the man page then that will tell you the version (man ext_session_acl). > BTW, did you leave "/var/lib/squid/session/" intentionally or was it > supposed to be /var/lib/squid/session/session.db? Ah, that could be your problem. It needs to be /var/lib/squid/session/ (it works with a filename for backward compatibility). Using a directory causes the helper to open a database environment, which prevents the sync problems that you are seeing (the man page provides more info). Try that and it should fix it. > Can you please confirm that this type of config is working with you, > so I can be sure that at least this isn't the problem. My *exact* current config (with extra stuff) that works is as follows: http_access allow localhost acl our_networks src 10.0.0.0/16 external_acl_type session_active_def concurrency=100 ttl=3 %SRC /usr/lib/squid3/ext_session_acl -a -T 10800 -b /var/lib/squid/session/ acl session_is_active external session_active_def acl session_day time "/var/www/announce_days.txt" deny_info http://nelsonwr.wardroom/announce.php?url=%u session_day session_is_active http_access deny session_day !session_is_active http_access allow our_networks http_access deny all My LOGIN code is contained in a local PHP page that serves up the splash page (I do this because local web requests bypass Squid): $handle = popen($session_helper, 'w'); fwrite($handle, "10 " . $_SERVER['REMOTE_ADDR'] . " LOGIN\n"); pclose($handle); Andy
