On 14/04/2016 6:02 a.m., Odhiambo Washington wrote: > Hi Amos, > > I bit the bullet and upgraded my FreeBSD-8.4 -> 9.3. > > I am struggling to compile squid-3.5.16. I just have to find a way to make > it compile and run, by all means. > > So now here is what happens: > > > #!/bin/sh > ./configure --prefix=/opt/squid-3.5 \ > --enable-removal-policies="lru heap" \ > --disable-epoll \ > --with-pthreads \ > --enable-storeio="ufs diskd rock aufs" \ > --enable-delay-pools \ > --enable-snmp \ > --with-openssl=/usr \ > --enable-forw-via-db \ > --enable-cache-digests \ > --enable-wccpv2 \ > --enable-follow-x-forwarded-for \ > --with-large-files \ > --enable-esi \ > --enable-kqueue \ > --enable-icap-client \ > --enable-kill-parent-hack \ > --enable-ssl \ > --enable-ssl-crtd \ > --enable-url-rewrite-helpers \ > --enable-xmalloc-statistics \ > --enable-stacktraces \ > --enable-zph-qos \ > --enable-eui \ > --with-nat-devpf \ > --enable-pf-transparent \ > --enable-ipf-transparent \ > --enable-auth \ > > My config.log output is here: *http://goo.gl/LcV1yN <http://goo.gl/LcV1yN>* > > And this is how the compile fails:Making all in negotiate_auth > Making all in kerberos > depbase=`echo negotiate_kerberos_auth.o | sed > 's|[^/]*$|.deps/&|;s|\.o$||'`; g++ -DHAVE_CONFIG_H -I../../.. > -I../../../include -I../../../lib -I../../../src -I../../../include > -I/usr/include -I/usr/include -I../../../libltdl -I. -I/usr/include > -I/usr/local/include/libxml2 -I/usr/local/include/libxml2 -Wall > -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual > -Werror -pipe -D_REENTRANT -I/usr/local/include -g -O2 -march=native > -I/usr/local/include -MT negotiate_kerberos_auth.o -MD -MP -MF $depbase.Tpo > -c -o negotiate_kerberos_auth.o negotiate_kerberos_auth.cc && mv -f > $depbase.Tpo $depbase.Po > negotiate_kerberos_auth.cc: In function 'int main(int, char* const*)': > negotiate_kerberos_auth.cc:754: error: > 'gsskrb5_extract_authz_data_from_sec_context' was not declared in this scope > *** [negotiate_kerberos_auth.o] Error code 1 > Strange. Check the Kerberos / krb5 libraries available are up to date. Or for now you may need to use one or more of these: --without-mit-kerberos \ --without-heimdal-kerbers \ --without-gssapi-kerberos > > I am getting closer I think. > > The initial compile that I had before the upgrade from 8.4 to 9.3 cannot > run. Gives a different error: > > 2016/04/13 14:12:13| Accepting NAT intercepted SSL bumped HTTPS Socket > connections at local=192.168.55.254:13129 remote=[::] FD 36 flags=41 > 2016/04/13 14:12:13| Accepting ICP messages on [::]:3130 > 2016/04/13 14:12:13| Sending ICP messages from [::]:3130 > 2016/04/13 14:12:13| ERROR: NAT/TPROXY lookup failed to locate original IPs > on local=192.168.55.254:13128 remote=192.168.55.83:50648 FD 14 flags=33 <http://www.squid-cache.org/Versions/v3/3.4/RELEASENOTES.html#ss2.4> I dont think IPFilter (--enable-ipf-transparent) works on FreeBSD. paketFilte (PF, --enable-pf-transparent --with-nat-devpf) and IFPW (--enable-ipfw-transparent) should do. Be careful of the 'f' and 'w' characters there, it can be a bit confusing with them all those different names. NP: the same error message can occur if you have simply configured DNAT / REDIRECT external to the Squid machine. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
