URL: https://linuxfr.org/forums/linux-debutant/posts/squid-ad
Title: Squid + AD
Authors: megadidi
Date: 2017年06月21日T09:15:23+02:00
License: CC By-SA
Tags:
Score: 0
Bonjour,
Je tente de connecter mon serveur SQUID à mon AD 2012, avec kerberos, windbind, tout fonctionne bien, j'ai suivi le tutoriel suivant:
https://access.redhat.com/solutions/3376
tout est ok, tout les tests de ce tutoriel fonctionne.
SAUF QUE,
quand je fais des "systemctl start squid" , systemctl restart squid", ok , aucune erreur.
mais quand je fais "systemctl status squid", la, j'ai de nombreuses erreurs:
```ruby
# systemctl status squid
●くろまる squid.service - Squid caching proxy
Loaded: loaded (/usr/lib/systemd/system/squid.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since mer. 2017年06月21日 08:57:56 CEST; 1min 47s ago
Process: 29880 ExecStop=/usr/sbin/squid -k shutdown -f $SQUID_CONF (code=exited, status=1/FAILURE)
Process: 29860 ExecStart=/usr/sbin/squid $SQUID_OPTS -f $SQUID_CONF (code=exited, status=0/SUCCESS)
Process: 29855 ExecStartPre=/usr/libexec/squid/cache_swap.sh (code=exited, status=0/SUCCESS)
Main PID: 29863 (code=exited, status=1/FAILURE)
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com squid[29880]: 2017年06月21日 08:57:56| WARNING: You should probably remove '::1' from the ACL named 'to_localhost'
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com squid[29880]: 2017年06月21日 08:57:56| ERROR: Directive 'hierarchy_stoplist' is obsolete.
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com squid[29880]: WARNING: Cannot write log file: /var/log/squid/cache.log
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com squid[29880]: /var/log/squid/cache.log: Permission denied
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com squid[29880]: messages will be sent to 'stderr'.
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com squid[29880]: 2017年06月21日 08:57:56| Set Current Directory to /var/spool/squid
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com squid[29880]: squid: ERROR: Could not send signal 15 to process 29878: (3) No such process
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com systemd[1]: squid.service: control process exited, code=exited status=1
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com systemd[1]: Unit squid.service entered failed state.
juin 21 08:57:56 l203dvup302.agrom.mousquetaires.com systemd[1]: squid.service failed.
```
squid n'écoute même pas sur le port 3128 quand je fais un netstat... enfin bref.. pas terrible.
Contenu de mon squid.conf :
```ruby
http_port 10.127.12.40:3128
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
acl auth proxy_auth REQUIRED
http_access allow auth
#defaults
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl localnet src 10.0.0.0/24
acl localnet src 172.16.0.0/12
acl localnet src 192.168.0.0/16
acl localnet src fc00::/7
acl localnet src fe80::/10
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
http_access allow manager localhost localnet
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
#http_port 3128
hierarchy_stoplist cgi-bin ?
coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
```
Je vous remercie d'avance pour l'aide que vous m'apporter.