[squid-users] Negotiate/kerberos problem with squid 3.4.2

From: Peter Benko <benko_peter_at_vse.sk>
Date: Thu, 9 Jan 2014 13:17:13 +0100

Hi squid users,

I'm trying to upgrade squid from 3.3.11 to 3.4.2 on Debian 6. Both squids are
compiled from source with the same compilation flags and their config files are
equal.

I have problem with Negotiate/kerberos authentication against Active Directory
in squid 3.4.2 (squid 3.3.11 works without problems).

First 2 lines of access.log are produced by command:
$ curl -q --proxy-negotiate -x proxy2.example.com:8080 -U : -L --max-redirs 1 http://www.six.sk/
curl: (47) Maximum (1) redirects followed
...curl doesn't obtain the required html page (it works against squid 3.3.11).

Last 3 lines of access.log are produced by command:
$ curl -q --proxy-negotiate -x proxy2.example.com:8080 -U : -L --max-redirs 2 http://www.six.sk/
...curl obtains the required html page.

What's wrong with my squid configuration?

squid_at_proxy2:~ $ diff -s squid33/etc/squid.conf squid34/etc/squid.conf
Files squid33/etc/squid.conf and squid34/etc/squid.conf are identical

squid_at_proxy2:~ $ squid34/sbin/squid -v
Squid Cache: Version 3.4.2
configure options: '--prefix=/opt/squid/squid34' '--with-logdir=/var/log/squid' '--with-default-user=squid' '--disable-loadable-modules' '--enable-storeio=ufs,aufs' '--enable-removal-policies=lru,heap' '--disable-snmp' '--disable-delay-pools' '--disable-esi' '--disable-icap-client' '--disable-ecap' '--disable-wccp' '--disable-wccpv2' '--disable-htcp' '--disable-ssl' '--disable-linux-netfilter' '--disable-ident-lookups' '--enable-auth-basic=LDAP,PAM' '--enable-auth-digest=file' '--enable-auth-ntlm=smb_lm' '--enable-auth-negotiate=kerberos,wrapper' '--enable-external-acl-helpers=file_userip,LDAP_group,session' '--disable-ipv6'

squid_at_proxy2:~ $ grep -E -v '^#|^$' squid34/etc/squid.conf
cache_effective_user squid
workers 1
http_port 8080
debug_options ALL,1 28,3
memory_replacement_policy heap GDSF
maximum_object_size_in_memory 64 KB
cache_mem 512 MB
memory_pools on
memory_pools_limit 128 MB
cache_replacement_policy heap LFUDA
cache_dir aufs /var/spool/squid 20000 32 256 min-size=2048 max-size=134217728
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
coredump_dir /var/spool/squid
shutdown_lifetime 1 second
access_log daemon:/var/log/squid/access.log
cache_store_log none
logfile_rotate 0
auth_param negotiate program /opt/squid/squid34/libexec/negotiate_kerberos_auth -r
auth_param negotiate children 30 startup=10 idle=5
external_acl_type groupAD ttl=30 negative_ttl=30 children-max=10 children-startup=2 %LOGIN /opt/squid/squid34/libexec/ext_ldap_group_acl -R -b DC=ad,DC=example,DC=com -f (&(objectClass=person)(sAMAccountName=%u)(memberOf=CN=%g,OU=Groups,DC=ad,DC=example,DC=com)) -D CN=ldap01,OU=Users,DC=ad,DC=example,DC=com -W /opt/squid/etc/ldappass.txt -t 1 -H ldap://ad.example.com
acl FromLocalNet src 10.0.0.0/8 127.0.0.0/8
acl facebook dstdomain .facebook.com
acl group1 external groupAD internet
acl internetF external groupAD internetF
http_access deny !FromLocalNet
http_access deny !group1 all
http_access deny facebook internetF all
http_access allow all

squid_at_proxy2:~ $ cat /var/log/squid/access.log
1389267633.593 0 10.106.68.14 TCP_DENIED/407 3519 GET http://www.six.sk/ - HIER_NONE/- text/html
1389267633.603 4 10.106.68.14 TCP_DENIED/407 6116 GET http://www.six.sk/ benko_peter HIER_NONE/- text/html
1389267662.100 0 10.106.68.14 TCP_DENIED/407 3519 GET http://www.six.sk/ - HIER_NONE/- text/html
1389267662.110 4 10.106.68.14 TCP_DENIED/407 6116 GET http://www.six.sk/ benko_peter HIER_NONE/- text/html
1389267662.150 34 10.106.68.14 TCP_MISS/200 4387 GET http://www.six.sk/ benko_peter HIER_DIRECT/194.160.23.5 text/html

squid_at_proxy2:~ $ cat /var/log/squid/cache.log
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.153| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12.154| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:39:12 kid1| Set Current Directory to /var/spool/squid
2014/01/09 12:39:12 kid1| Starting Squid Cache version 3.4.2 for x86_64-unknown-linux-gnu...
2014/01/09 12:39:12 kid1| Process ID 25457
2014/01/09 12:39:12 kid1| Process Roles: worker
2014/01/09 12:39:12 kid1| With 16384 file descriptors available
2014/01/09 12:39:12 kid1| Initializing IP Cache...
2014/01/09 12:39:12 kid1| DNS Socket created at 0.0.0.0, FD 7
2014/01/09 12:39:12 kid1| Adding domain ad.example.com from /etc/resolv.conf
2014/01/09 12:39:12 kid1| Adding domain example.com from /etc/resolv.conf
2014/01/09 12:39:12 kid1| Adding nameserver 10.106.77.101 from /etc/resolv.conf
2014/01/09 12:39:12 kid1| Adding nameserver 10.106.77.102 from /etc/resolv.conf
2014/01/09 12:39:12 kid1| helperOpenServers: Starting 10/30 'negotiate_kerberos_auth' processes
2014/01/09 12:39:12 kid1| helperOpenServers: Starting 2/10 'ext_ldap_group_acl' processes
2014/01/09 12:39:12 kid1| Logfile: opening log daemon:/var/log/squid/access.log
2014/01/09 12:39:12 kid1| Logfile Daemon: opening log /var/log/squid/access.log
2014/01/09 12:39:12 kid1| Store logging disabled
2014/01/09 12:39:12 kid1| Swap maxSize 20480000 + 524288 KB, estimated 1615714 objects
2014/01/09 12:39:12 kid1| Target number of buckets: 80785
2014/01/09 12:39:12 kid1| Using 131072 Store buckets
2014/01/09 12:39:12 kid1| Max Mem size: 524288 KB
2014/01/09 12:39:12 kid1| Max Swap size: 20480000 KB
2014/01/09 12:39:12 kid1| Rebuilding storage in /var/spool/squid (clean log)
2014/01/09 12:39:12 kid1| Using Least Load store dir selection
2014/01/09 12:39:12 kid1| Set Current Directory to /var/spool/squid
2014/01/09 12:39:12 kid1| Finished loading MIME types and icons.
2014/01/09 12:39:12 kid1| Accepting HTTP Socket connections at local=0.0.0.0:8080 remote=[::] FD 36 flags=9
2014/01/09 12:39:12 kid1| Done reading /var/spool/squid swaplog (2916 entries)
2014/01/09 12:39:12 kid1| Finished rebuilding storage from disk.
2014/01/09 12:39:12 kid1| 2916 Entries scanned
2014/01/09 12:39:12 kid1| 0 Invalid entries.
2014/01/09 12:39:12 kid1| 0 With invalid flags.
2014/01/09 12:39:12 kid1| 2916 Objects loaded.
2014/01/09 12:39:12 kid1| 0 Objects expired.
2014/01/09 12:39:12 kid1| 0 Objects cancelled.
2014/01/09 12:39:12 kid1| 0 Duplicate URLs purged.
2014/01/09 12:39:12 kid1| 0 Swapfile clashes avoided.
2014/01/09 12:39:12 kid1| Took 0.06 seconds (48348.59 objects/sec).
2014/01/09 12:39:12 kid1| Beginning Validation Procedure
2014/01/09 12:39:12 kid1| Completed Validation Procedure
2014/01/09 12:39:12 kid1| Validated 2916 Entries
2014/01/09 12:39:12 kid1| store_swap_size = 117776.00 KB
2014/01/09 12:39:13 kid1| storeLateRelease: released 0 objects
2014/01/09 12:40:33.592 kid1| Checklist.cc(62) preCheck: 0x13ec528 checking slow rules
2014/01/09 12:40:33.592 kid1| Ip.cc(560) match: aclIpMatchIp: '10.106.68.14:42736' found
2014/01/09 12:40:33.592 kid1| Acl.cc(176) matches: checked: FromLocalNet = 1
2014/01/09 12:40:33.592 kid1| Acl.cc(176) matches: checked: !FromLocalNet = 0
2014/01/09 12:40:33.592 kid1| Acl.cc(176) matches: checked: http_access#1 = 0
2014/01/09 12:40:33.592 kid1| Checklist.cc(55) markFinished: 0x13ec528 answer AUTH_REQUIRED for aclMatchExternal exception
2014/01/09 12:40:33.592 kid1| Acl.cc(176) matches: checked: group1 = -1
2014/01/09 12:40:33.592 kid1| Acl.cc(176) matches: checked: !group1 = -1
2014/01/09 12:40:33.592 kid1| Acl.cc(176) matches: checked: http_access#2 = -1
2014/01/09 12:40:33.592 kid1| Acl.cc(176) matches: checked: http_access = -1
2014/01/09 12:40:33.592 kid1| Checklist.cc(148) checkCallback: ACLChecklist::checkCallback: 0x13ec528 answer=AUTH_REQUIRED
2014/01/09 12:40:33.593 kid1| Checklist.cc(62) preCheck: 0x7fff569d67d0 checking fast ACLs
2014/01/09 12:40:33.593 kid1| Acl.cc(176) matches: checked: (access_log daemon:/var/log/squid/access.log line) = 1
2014/01/09 12:40:33.593 kid1| Acl.cc(176) matches: checked: access_log daemon:/var/log/squid/access.log = 1
2014/01/09 12:40:33.593 kid1| Checklist.cc(55) markFinished: 0x7fff569d67d0 answer ALLOWED for match
2014/01/09 12:40:33.598 kid1| Checklist.cc(62) preCheck: 0x13ec528 checking slow rules
2014/01/09 12:40:33.598 kid1| Ip.cc(560) match: aclIpMatchIp: '10.106.68.14:42736' found
2014/01/09 12:40:33.598 kid1| Acl.cc(176) matches: checked: FromLocalNet = 1
2014/01/09 12:40:33.598 kid1| Acl.cc(176) matches: checked: !FromLocalNet = 0
2014/01/09 12:40:33.598 kid1| Acl.cc(176) matches: checked: http_access#1 = 0
2014/01/09 12:40:33.598 kid1| AclProxyAuth.cc(143) checkForAsync: checking password via authenticator
2014/01/09 12:40:33.598 kid1| Acl.cc(176) matches: checked: group1 = -1 async
2014/01/09 12:40:33.598 kid1| Acl.cc(176) matches: checked: !group1 = -1 async
2014/01/09 12:40:33.598 kid1| Acl.cc(176) matches: checked: http_access#2 = -1 async
2014/01/09 12:40:33.598 kid1| Acl.cc(176) matches: checked: http_access = -1 async
2014/01/09 12:40:33.602 kid1| Checklist.cc(119) goAsync: 0x13ec528 a slow ACL resumes by going async again!
2014/01/09 12:40:33.602 kid1| Checklist.cc(55) markFinished: 0x13ec528 answer DUNNO for aclMatchExternal exception
2014/01/09 12:40:33.602 kid1| Acl.cc(176) matches: checked: group1 = -1
2014/01/09 12:40:33.602 kid1| InnerNode.cc(104) resumeMatchingAt: checked: !group1 = -1
2014/01/09 12:40:33.602 kid1| InnerNode.cc(104) resumeMatchingAt: checked: http_access#2 = -1
2014/01/09 12:40:33.602 kid1| InnerNode.cc(104) resumeMatchingAt: checked: http_access = -1
2014/01/09 12:40:33.602 kid1| Checklist.cc(148) checkCallback: ACLChecklist::checkCallback: 0x13ec528 answer=DUNNO
2014/01/09 12:40:33.603 kid1| Checklist.cc(62) preCheck: 0x7fff569d67d0 checking fast ACLs
2014/01/09 12:40:33.603 kid1| Acl.cc(176) matches: checked: (access_log daemon:/var/log/squid/access.log line) = 1
2014/01/09 12:40:33.603 kid1| Acl.cc(176) matches: checked: access_log daemon:/var/log/squid/access.log = 1
2014/01/09 12:40:33.603 kid1| Checklist.cc(55) markFinished: 0x7fff569d67d0 answer ALLOWED for match
2014/01/09 12:41:02.099 kid1| Checklist.cc(62) preCheck: 0x13ec528 checking slow rules
2014/01/09 12:41:02.100 kid1| Ip.cc(560) match: aclIpMatchIp: '10.106.68.14:42737' found
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: FromLocalNet = 1
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: !FromLocalNet = 0
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: http_access#1 = 0
2014/01/09 12:41:02.100 kid1| Checklist.cc(55) markFinished: 0x13ec528 answer AUTH_REQUIRED for aclMatchExternal exception
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: group1 = -1
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: !group1 = -1
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: http_access#2 = -1
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: http_access = -1
2014/01/09 12:41:02.100 kid1| Checklist.cc(148) checkCallback: ACLChecklist::checkCallback: 0x13ec528 answer=AUTH_REQUIRED
2014/01/09 12:41:02.100 kid1| Checklist.cc(62) preCheck: 0x7fff569d67d0 checking fast ACLs
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: (access_log daemon:/var/log/squid/access.log line) = 1
2014/01/09 12:41:02.100 kid1| Acl.cc(176) matches: checked: access_log daemon:/var/log/squid/access.log = 1
2014/01/09 12:41:02.100 kid1| Checklist.cc(55) markFinished: 0x7fff569d67d0 answer ALLOWED for match
2014/01/09 12:41:02.106 kid1| Checklist.cc(62) preCheck: 0x13ec528 checking slow rules
2014/01/09 12:41:02.106 kid1| Ip.cc(560) match: aclIpMatchIp: '10.106.68.14:42737' found
2014/01/09 12:41:02.106 kid1| Acl.cc(176) matches: checked: FromLocalNet = 1
2014/01/09 12:41:02.106 kid1| Acl.cc(176) matches: checked: !FromLocalNet = 0
2014/01/09 12:41:02.106 kid1| Acl.cc(176) matches: checked: http_access#1 = 0
2014/01/09 12:41:02.106 kid1| AclProxyAuth.cc(143) checkForAsync: checking password via authenticator
2014/01/09 12:41:02.106 kid1| Acl.cc(176) matches: checked: group1 = -1 async
2014/01/09 12:41:02.106 kid1| Acl.cc(176) matches: checked: !group1 = -1 async
2014/01/09 12:41:02.106 kid1| Acl.cc(176) matches: checked: http_access#2 = -1 async
2014/01/09 12:41:02.106 kid1| Acl.cc(176) matches: checked: http_access = -1 async
2014/01/09 12:41:02.109 kid1| Checklist.cc(119) goAsync: 0x13ec528 a slow ACL resumes by going async again!
2014/01/09 12:41:02.109 kid1| Checklist.cc(55) markFinished: 0x13ec528 answer DUNNO for aclMatchExternal exception
2014/01/09 12:41:02.109 kid1| Acl.cc(176) matches: checked: group1 = -1
2014/01/09 12:41:02.110 kid1| InnerNode.cc(104) resumeMatchingAt: checked: !group1 = -1
2014/01/09 12:41:02.110 kid1| InnerNode.cc(104) resumeMatchingAt: checked: http_access#2 = -1
2014/01/09 12:41:02.110 kid1| InnerNode.cc(104) resumeMatchingAt: checked: http_access = -1
2014/01/09 12:41:02.110 kid1| Checklist.cc(148) checkCallback: ACLChecklist::checkCallback: 0x13ec528 answer=DUNNO
2014/01/09 12:41:02.110 kid1| Checklist.cc(62) preCheck: 0x7fff569d67d0 checking fast ACLs
2014/01/09 12:41:02.110 kid1| Acl.cc(176) matches: checked: (access_log daemon:/var/log/squid/access.log line) = 1
2014/01/09 12:41:02.110 kid1| Acl.cc(176) matches: checked: access_log daemon:/var/log/squid/access.log = 1
2014/01/09 12:41:02.110 kid1| Checklist.cc(55) markFinished: 0x7fff569d67d0 answer ALLOWED for match
2014/01/09 12:41:02.115 kid1| Checklist.cc(62) preCheck: 0x13ec528 checking slow rules
2014/01/09 12:41:02.115 kid1| Ip.cc(560) match: aclIpMatchIp: '10.106.68.14:42737' found
2014/01/09 12:41:02.115 kid1| Acl.cc(176) matches: checked: FromLocalNet = 1
2014/01/09 12:41:02.115 kid1| Acl.cc(176) matches: checked: !FromLocalNet = 0
2014/01/09 12:41:02.115 kid1| Acl.cc(176) matches: checked: http_access#1 = 0
2014/01/09 12:41:02.115 kid1| Acl.cc(176) matches: checked: group1 = -1 async
2014/01/09 12:41:02.115 kid1| Acl.cc(176) matches: checked: !group1 = -1 async
2014/01/09 12:41:02.115 kid1| Acl.cc(176) matches: checked: http_access#2 = -1 async
2014/01/09 12:41:02.115 kid1| Acl.cc(176) matches: checked: http_access = -1 async
2014/01/09 12:41:02.120 kid1| Acl.cc(176) matches: checked: group1 = 1
2014/01/09 12:41:02.120 kid1| InnerNode.cc(104) resumeMatchingAt: checked: !group1 = 0
2014/01/09 12:41:02.120 kid1| InnerNode.cc(104) resumeMatchingAt: checked: http_access#2 = 0
2014/01/09 12:41:02.120 kid1| DomainData.cc(131) match: aclMatchDomainList: checking 'www.six.sk'
2014/01/09 12:41:02.120 kid1| DomainData.cc(135) match: aclMatchDomainList: 'www.six.sk' NOT found
2014/01/09 12:41:02.120 kid1| Acl.cc(176) matches: checked: facebook = 0
2014/01/09 12:41:02.120 kid1| Acl.cc(176) matches: checked: http_access#3 = 0
2014/01/09 12:41:02.120 kid1| Ip.cc(560) match: aclIpMatchIp: '10.106.68.14:42737' found
2014/01/09 12:41:02.120 kid1| Acl.cc(176) matches: checked: all = 1
2014/01/09 12:41:02.120 kid1| Acl.cc(176) matches: checked: http_access#4 = 1
2014/01/09 12:41:02.120 kid1| InnerNode.cc(104) resumeMatchingAt: checked: http_access = 1
2014/01/09 12:41:02.120 kid1| Checklist.cc(55) markFinished: 0x13ec528 answer ALLOWED for match
2014/01/09 12:41:02.120 kid1| Checklist.cc(148) checkCallback: ACLChecklist::checkCallback: 0x13ec528 answer=ALLOWED
2014/01/09 12:41:02.150 kid1| Checklist.cc(62) preCheck: 0x7fff569d67d0 checking fast ACLs
2014/01/09 12:41:02.150 kid1| Acl.cc(176) matches: checked: (access_log daemon:/var/log/squid/access.log line) = 1
2014/01/09 12:41:02.150 kid1| Acl.cc(176) matches: checked: access_log daemon:/var/log/squid/access.log = 1
2014/01/09 12:41:02.150 kid1| Checklist.cc(55) markFinished: 0x7fff569d67d0 answer ALLOWED for match
2014/01/09 12:41:21 kid1| Preparing for shutdown after 5 requests
2014/01/09 12:41:21 kid1| Waiting 1 seconds for active connections to finish
2014/01/09 12:41:21 kid1| Closing HTTP port 0.0.0.0:8080
2014/01/09 12:41:21 kid1| Shutdown: NTLM authentication.
2014/01/09 12:41:21 kid1| Shutdown: Negotiate authentication.
2014/01/09 12:41:21 kid1| Shutdown: Digest authentication.
2014/01/09 12:41:21 kid1| Shutdown: Negotiate authentication.
2014/01/09 12:41:21 kid1| Shutdown: Basic authentication.
2014/01/09 12:41:24 kid1| Shutting down...
2014/01/09 12:41:24 kid1| storeDirWriteCleanLogs: Starting...
2014/01/09 12:41:24 kid1| Finished. Wrote 2916 entries.
2014/01/09 12:41:24 kid1| Took 0.00 seconds (1735714.29 entries/sec).
CPU Usage: 0.104 seconds = 0.052 user + 0.052 sys
Maximum Resident Size: 52112 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
        total space in arena: 5432 KB
        Ordinary blocks: 5298 KB 20 blks
        Small blocks: 0 KB 5 blks
        Holding blocks: 9748 KB 5 blks
        Free Small blocks: 0 KB
        Free Ordinary blocks: 133 KB
        Total in use: 15046 KB 277%
        Total free: 133 KB 2%
2014/01/09 12:41:24 kid1| Logfile: closing log daemon:/var/log/squid/access.log
2014/01/09 12:41:24 kid1| Logfile Daemon: closing log daemon:/var/log/squid/access.log
2014/01/09 12:41:24 kid1| Open FD READ/WRITE 7 DNS Socket IPv4
2014/01/09 12:41:24 kid1| Open FD READ/WRITE 8 negotiate_kerberos_auth #1
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 10 negotiate_kerberos_auth #2
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 12 negotiate_kerberos_auth #3
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 14 negotiate_kerberos_auth #4
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 16 negotiate_kerberos_auth #5
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 18 negotiate_kerberos_auth #6
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 20 negotiate_kerberos_auth #7
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 22 negotiate_kerberos_auth #8
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 24 negotiate_kerberos_auth #9
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 26 negotiate_kerberos_auth #10
2014/01/09 12:41:24 kid1| Open FD READ/WRITE 29 ext_ldap_group_acl #1
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 31 ext_ldap_group_acl #2
2014/01/09 12:41:24 kid1| Open FD UNSTARTED 32 IPC UNIX STREAM Parent
2014/01/09 12:41:24 kid1| Squid Cache (Version 3.4.2): Exiting normally.
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.548 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.549 kid1| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.553| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: '
2014/01/09 12:41:24.554| Acl.cc(397) ~ACL: ACL::~ACL: ' 

-- 
Peter Benko
Received on Thu Jan 09 2014 - 12:17:25 MST

This archive was generated by hypermail 2.2.0 : Fri Jan 10 2014 - 12:00:04 MST