On 5/11/2012 10:12 p.m., Janåke Rönnblom wrote:
Hi Im using squid-3.1.16 on Ubuntu 10.04. Since Squid-3.1 is not included in Ubuntu 10.04 i compiled it myself. I also use squid_kerb_auth for authentication and squid_ldap_group for checking group membership. I recently tried to upgrade to Ubuntu 12.04 with the included squid-3.1.19 however I cant get this to work with Kerberos. After a lot(!) of trial and error I tried my 3.1.16 which worked. After that I tried compiling 3.1.18, 3.1.19, 3.1.20 and 3.1.21. Everyone of those crashes either silently or with a FATAL: Received Segment Violation...dying. or assertion failed: external_acl.cc:841: "ch->auth_user_request" This is my configure line: ./configure --disable-maintainer-mode --disable-dependency-tracking --disable-silent-rules --enable-inline --enable-async-io=8 --enable-storeio=ufs,aufs,diskd --enable-removal-policies=lru,heap --enable-delay-pools --enable-cache-digest --enable-underscores --enable-icap-client --enable-follow-x-forwarded-for --enable-negotiate-auth-helpers=squid_kerb_auth --enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group --enable-arp-acl --enable-esi --enable-zph-qos --disable-translation --with-logdir=/var/log/squid3 --with-pidfile=/var/run/squid3.pid --enable-digest-auth-helpers=ldap,password --enable-negotiate-auth-helpers=squid_kerb_auth --enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group --with-filedescriptors=65536 --with-large-files --with-default-user=proxy --enable-linux-netfilter --enable-ltdl-convenience --build=x86_64-linux-gnu I ran the same config with every different release of squid and the only one that works is 3.1.16 To me it looks like a problem with the Kerberos authentication. Any ideas how to resolve this?
Please try 3.2.3. There are a lot of auth related issues in 3.1 like this one which are resolved in the newer series.
Amos
