Проблема Ubuntu server 12.04+squid+sams+rejik

[sahaha]

Здравствуйте. На работе стоит шлюз на freeBSD,squid,sams. Долго стоит и периодически глючит. Начальство поставило задачу установки нового шлюза. Выбрал ос ubuntu server 12.04. Установил,настроил squid3(авторизация ncsa), установил настроил sams 1.05, всё работало, пользователей через sams завёл. Начал ставить rejik, установил,запустил,в логах всё ок стартанул и всё... Прокся не запускается, из /etc/squid3/ пропали файлы *.sams. Выкосил всё из конфига по sams-у, прокся заработала но в прозрачном режиме. Вернул конфиг,прокси не запускается. Читал на форуме убрать из конфига сквид всё по авторизации(sams допишет) не помогло. Ступор. Прошу помощи,очень надо. Спасибо.
зы. Если надо выложить какие конфиги или выводы команд напишите. Ещё раз спасибо.

[aborigen1020]

что требуется? что хотите получить в итоге?

[sahaha]

Странный вопрос. Да ладно. Хочу шлюз в интернет с авторизацией нцса и удобной веб мордой для отчётов.

[aborigen1020]

Могу только про transparent mode + lightsquid рассказать
а что именно не получается? пропадают файлы? что в логах?

[sahaha]

После установки rejik перестала стартовать прокся с авторизацией по паролю.

[AnrDaemon]

Логи, сестра! Логи!

[sahaha]

Выкладываю всё!
#сеть

(Нажмите, чтобы показать/скрыть)

 

    auto eth0
iface eth0 inet static
   address 192.168.1.55
   netmask 255.255.255.0
   network 192.168.1.0
   broadcast 192.168.1.255
   gateway 192.168.1.1
   # dns-* options are implemented by the resolvconf package, if installed
   dns-nameservers 192.168.1.1
   dns-search local
auto eth1
iface eth1 inet static
   address 192.168.0.1
   netmask 255.255.255.0
 

#squid.conf (убрал всё лишнее,если надо будет залью весь файл)

(Нажмите, чтобы показать/скрыть)

 

Код: [Выделить]

auth_param basic program /usr/lib/squid3/ncsa_auth /etc/squid3/ncsa.sams
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
#Default:
# none

#  TAG: authenticate_cache_garbage_interval

#  TAG: acl
acl _sams_5315f02912f89 proxy_auth "/etc/squid3/5315f02912f89.sams"
acl _sams_5315f02912f89_time time MTWHFAS 00:00-23:59
# Defining an Access List
# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
#acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
#acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/24 # RFC1918 possible internal network
#acl localnet src fc00::/7       # RFC 4193 local private network range
#acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

#  TAG: follow_x_forwarded_for

#  TAG: http_access
http_access allow _sams_5315f02912f89  _sams_5315f02912f89_time 
# Allowing or Denying access based on defined access lists
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager

# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
http_access allow localnet
http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

#  TAG: adapted_http_access
http_access allow _sams_5315f02912f89  _sams_5315f02912f89_time 
# Allowing or Denying access based on defined access lists
#
# Essentially identical to http_access, but runs after redirectors
# and ICAP/eCAP adaptation. Allowing access control based on their
# output.
#
# If not set then only http_access is used.
#Default:
# none

#  TAG: http_reply_access
# Squid normally listens to port 3128
http_port 8080

#  TAG: https_port
# Uncomment and adjust the following to add a disk cache directory.
cache_dir ufs /var/spool/squid3 10000 16 256

#  TAG: store_dir_select_algorithm
# Default:
# access_log /var/log/squid3/access.log squid
#Default:
access_log /var/log/squid3/access.log squid

#  TAG: icap_log
#  TAG: pid_filename
# A filename to write the process-id to.  To disable, enter "none".
#Default:
pid_filename /var/run/squid3.pid

#  TAG: cache_log
# Cache logging file. This is where general information about
# your cache's behavior goes. You can increase the amount of data
# logged to this file and how often its rotated with "debug_options"
#Default:
cache_log /var/log/squid3/cache.log

#Default:
# coredump_dir none
#

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid3

# OPTIONS FOR FTP GATEWAYING
# -----------------------------------------------------------------------------

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
# example lin deb packages
#refresh_pattern (\.deb|\.udeb)$   129600 100% 129600
refresh_pattern . 0 20% 4320
#Default:
# delay_pools 0

#  TAG: delay_class
delay_pools 1
delay_class 1 2
delay_access 1 allow _sams_5315f02912f89
delay_access 1 deny all
delay_parameters 1 524288/524288 524288/524288
#Default:
# max_filedescriptors 0

 

#sams.conf

(Нажмите, чтобы показать/скрыть)

   

Код: [Выделить]

      [client]
DB_USER=sams
DB_PASSWORD="*****"
SQUID_DB=squidlog
SAMS_DB=squidctrl
MYSQLHOSTNAME=localhost
MYSQLUSER=sams
MYSQLPASSWORD=*****
MYSQLVERSION=4.0
SQUIDCACHEFILE=access.log
SQUIDROOTDIR=/etc/squid3
SQUIDLOGDIR=/var/log/squid3
SQUIDCACHEDIR=/var/spool/squid3
SAMSPATH=/etc
SQUIDPATH=/etc/init.d
SQUIDGUARDLOGPATH=/var/log
SQUIDGUARDDBPATH=/etc/squid3
RECODECOMMAND=iconv -f KOI8-R -t 866 %finp > %fout
LDAPSERVER=servername_or_ipadress
LDAPBASEDN=your.domain
LDAPUSER=DomainAdministrator
LDAPUSERPASSWD=passwd
LDAPUSERSGROUP=Users
REJIKPATH=/usr/local/rejik3
SHUTDOWNCOMMAND=shutdown -h now
CACHENUM=0
   

#cache.log

(Нажмите, чтобы показать/скрыть)

   

Код: [Выделить]

      Squid Cache (Version 3.1.19): Terminated abnormally.
CPU Usage: 0.052 seconds = 0.032 user + 0.020 sys
Maximum Resident Size: 52656 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
total space in arena:    2248 KB
Ordinary blocks:         2102 KB      9 blks
Small blocks:               0 KB      0 blks
Holding blocks:         26912 KB     10 blks
Free Small blocks:          0 KB
Free Ordinary blocks:     145 KB
Total in use:           29014 KB 1291%
Total free:               145 KB 6%
2014/03/10 17:04:26| Starting Squid Cache version 3.1.19 for i686-pc-linux-gnu...
2014/03/10 17:04:26| Process ID 1151
2014/03/10 17:04:26| With 65535 file descriptors available
2014/03/10 17:04:26| Initializing IP Cache...
2014/03/10 17:04:26| DNS Socket created at [::], FD 5
2014/03/10 17:04:26| DNS Socket created at 0.0.0.0, FD 6
2014/03/10 17:04:26| Adding nameserver 192.168.1.1 from /etc/resolv.conf
2014/03/10 17:04:26| Adding domain local from /etc/resolv.conf
2014/03/10 17:04:26| helperOpenServers: Starting 5/5 'ncsa_auth' processes
cannot stat /etc/squid3/ncsa.sams
cannot stat /etc/squid3/ncsa.sams
cannot stat /etc/squid3/ncsa.sams
2014/03/10 17:04:26| Unlinkd pipe opened on FD 21
2014/03/10 17:04:26| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/03/10 17:04:26| Store logging disabled
2014/03/10 17:04:26| Swap maxSize 10240000 + 262144 KB, estimated 807857 objects
2014/03/10 17:04:26| Target number of buckets: 40392
2014/03/10 17:04:26| Using 65536 Store buckets
2014/03/10 17:04:26| Max Mem  size: 262144 KB
2014/03/10 17:04:26| Max Swap size: 10240000 KB
2014/03/10 17:04:26| Version 1 of swap file with LFS support detected...
2014/03/10 17:04:26| Rebuilding storage in /var/spool/squid3 (CLEAN)
2014/03/10 17:04:26| Using Least Load store dir selection
2014/03/10 17:04:26| Set Current Directory to /var/spool/squid3
cannot stat /etc/squid3/ncsa.sams
2014/03/10 17:04:26| Loaded Icons.
2014/03/10 17:04:26| Accepting  HTTP connections at [::]:8080, FD 24.
2014/03/10 17:04:26| HTCP Disabled.
2014/03/10 17:04:26| Squid plugin modules loaded: 0
2014/03/10 17:04:26| Adaptation support is off.
2014/03/10 17:04:26| Ready to serve requests.
2014/03/10 17:04:26| Done reading /var/spool/squid3 swaplog (22 entries)
2014/03/10 17:04:26| Finished rebuilding storage from disk.
2014/03/10 17:04:26|        22 Entries scanned
2014/03/10 17:04:26|         0 Invalid entries.
2014/03/10 17:04:26|         0 With invalid flags.
2014/03/10 17:04:26|        22 Objects loaded.
2014/03/10 17:04:26|         0 Objects expired.
2014/03/10 17:04:26|         0 Objects cancelled.
2014/03/10 17:04:26|         0 Duplicate URLs purged.
2014/03/10 17:04:26|         0 Swapfile clashes avoided.
2014/03/10 17:04:26|   Took 0.02 seconds (1183.88 objects/sec).
2014/03/10 17:04:26| Beginning Validation Procedure
cannot stat /etc/squid3/ncsa.sams
2014/03/10 17:04:26|   Completed Validation Procedure
2014/03/10 17:04:26|   Validated 69 Entries
2014/03/10 17:04:26|   store_swap_size = 88
2014/03/10 17:04:26| WARNING: basicauthenticator #1 (FD 7) exited
2014/03/10 17:04:26| WARNING: basicauthenticator #2 (FD 9) exited
2014/03/10 17:04:26| WARNING: basicauthenticator #3 (FD 11) exited
2014/03/10 17:04:26| WARNING: basicauthenticator #5 (FD 15) exited
2014/03/10 17:04:26| Too few basicauthenticator processes are running
2014/03/10 17:04:26| storeDirWriteCleanLogs: Starting...
2014/03/10 17:04:27|   Finished.  Wrote 22 entries.
2014/03/10 17:04:27|   Took 0.08 seconds (273.02 entries/sec).
FATAL: The basicauthenticator helpers are crashing too rapidly, need help!

Squid Cache (Version 3.1.19): Terminated abnormally.
CPU Usage: 0.052 seconds = 0.024 user + 0.028 sys
Maximum Resident Size: 52608 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
total space in arena:    2248 KB
Ordinary blocks:         2102 KB     12 blks
Small blocks:               0 KB      0 blks
Holding blocks:         26912 KB     10 blks
Free Small blocks:          0 KB
Free Ordinary blocks:     145 KB
Total in use:           29014 KB 1291%
Total free:               145 KB 6%
   

#Попытался включить squid из webmin и перестроить кэш

(Нажмите, чтобы показать/скрыть)

   

Код: [Выделить]

      Очистка и перестроение кэша


Удаление старых файлов кэша ..
 .. Сделано

 Инициализация кэша Squid командой squid3 -f /etc/squid3/squid.conf -z ..
2014/03/13 21:45:06| cache_cf.cc(381) parseOneConfigFile: squid.conf:1 unrecognized: 'w#'
2014/03/13 21:45:06| strtokFile: /etc/squid3/5315f02912f89.sams not found
2014/03/13 21:45:06| Warning: empty ACL: acl _sams_5315f02912f89 proxy_auth "/etc/squid3/5315f02912f89.sams"
 .. Сделано
________________________________________________________________________________
Производится инициализация кэш Squid через команду squid3 -f /etc/squid3/squid.conf -z ..
2014/03/13 21:54:14| cache_cf.cc(381) parseOneConfigFile: squid.conf:1 unrecognized: 'w#'
2014/03/13 21:54:14| strtokFile: /etc/squid3/5315f02912f89.sams not found
2014/03/13 21:54:14| Warning: empty ACL: acl _sams_5315f02912f89 proxy_auth "/etc/squid3/5315f02912f89.sams"
2014/03/13 21:54:14| Can't use proxy auth because no authentication schemes are fully configured.
FATAL: ERROR: Invalid ACL: acl _sams_5315f02912f89 proxy_auth "/etc/squid3/5315f02912f89.sams"

Squid Cache (Version 3.1.19): Terminated abnormally.
CPU Usage: 0.008 seconds = 0.000 user + 0.008 sys
Maximum Resident Size: 77760 KB
Page faults with physical i/o: 0

   

#лог rejik3

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

2014-03-10 12:41:37 [2443] Redirector start and working (3.2.11)
2014-03-10 12:41:37 [2442] Make-cache finished detected, continue
2014-03-10 12:41:37 [2442] Load 658 rules from /usr/local/rejik3/banlists/banners/urls.cache
2014-03-10 12:41:37 [2442] Load 8 pattern from BANNER pcre
2014-03-10 12:41:37 [2442] Load 22283 rules from /usr/local/rejik3/banlists/porno/urls.cache
2014-03-10 12:41:37 [2442] Load 5 pattern from MP3 pcre
2014-03-10 12:41:37 [2442] Load 1 rules from /usr/local/rejik3/banlists/js/urls.cache
2014-03-10 12:41:37 [2442] Redirector start and working (3.2.11)



#Если нужно,последние строки access.log

(Нажмите, чтобы показать/скрыть)

Код: [Выделить]

1394456326.172  70941 192.168.0.2 TCP_MISS/200 3124 CONNECT dispatcher.cloud.mail.ru:443 - DIRECT/94.100.184.252 -
1394456329.871  10093 192.168.0.2 TCP_MISS/200 852 GET http://192.168.0.1/sams/main.php? - DIRECT/192.168.0.1 text/html
1394456330.085  65254 192.168.0.2 TCP_MISS/200 3886 CONNECT desktopcloud.cdnmail.ru:443 - DIRECT/217.69.139.110 -
1394456364.652    135 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-file-geo.kaspersky-labs.com:443 - DIRECT/62.128.100.41 -
1394456365.171    592 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-kas-geo.kaspersky-labs.com:443 - DIRECT/81.19.104.42 -
1394456365.207    628 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-info-geo.kaspersky-labs.com:443 - DIRECT/81.19.104.45 -
1394456365.240    661 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-ipm-1.kaspersky-labs.com:443 - DIRECT/27.111.185.135 -
1394456365.339    151 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-pbs-geo.kaspersky-labs.com:443 - DIRECT/62.128.100.35 -
1394456365.345    688 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-kddi.kaspersky-labs.com:443 - DIRECT/27.111.185.141 -
1394456365.378    159 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-stat-geo.kaspersky-labs.com:443 - DIRECT/62.128.100.39 -
1394456365.387    136 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-tboot-1.kaspersky-labs.com:443 - DIRECT/62.128.100.84 -
1394456365.912    552 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-tpcert-1.kaspersky-labs.com:443 - DIRECT/119.255.133.33 -
1394456365.912    568 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-tcert-geo.kaspersky-labs.com:443 - DIRECT/81.19.104.42 -
1394456365.966    575 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-verdict-geo.kaspersky-labs.com:443 - DIRECT/81.19.104.45 -
1394456365.973    582 192.168.0.2 TCP_MISS/200 2 CONNECT ksn-url-geo.kaspersky-labs.com:443 - DIRECT/81.19.104.120 -
1394456371.021   5095 192.168.0.2 TCP_MISS/200 0 CONNECT ksn4-12.kaspersky-labs.com:443 - DIRECT/62.128.100.161 -
1394456387.448    266 192.168.0.2 TCP_MISS/200 3888 CONNECT jdcloud.mail.ru:443 - DIRECT/94.100.181.171 -


[sahaha]

Неужели никто не поможет?