NethServer 6

• manual: each proxy must set the proxy
• authenticated: manual configuragtion with pam authentication
• transparent: all traffic is routed through proxy, manual configuration available
• transparent_ssl: all traffic is routed trough proxy, even ssl traffic, manual configuration available #1775

• Upstream proxy
• List of non-cachable sites

Needs documentation.

• Test cases, from Developer
• RPM package in nethserver-testing repository, from Packager

Implemented in nethserver-squid package.

• nethserver-squid-1.0.0-1
• squid-3.3.5-1

• Install: yum --enablerepo=nethserver-testing install nethserver-squid
• Enable manual mode using web interface
• Configure a client to use the proxy
• Make sure client is accessing web via proxy (check /var/log/squid/access.log and /var/log/squid/cache.log)
• Try all other proxy modes

I follow this wiki too: http://dev.nethserver.org/projects/nethserver/wiki/Nethserver-squid

# rpm -qa | grep squid
nethserver-squid-1.0.0-1.ns6.noarch
squid-3.3.5-1.el6.x86_64

Squid installed and activated in manual mode using web interface

First problem
No squid loaded

[root@muflone ~]# ps ax | grep squid
30478 pts/0    S+     0:00 grep squid

Workaround
I try manual start:

service squid start

[root@muflone ~]# ps ax | grep squid
30513 ?        Ss     0:00 squid
30515 ?        S      0:00 (squid-1)
30516 ?        S      0:00 (logfile-daemon) /var/log/squid/access.log
30518 pts/0    S+     0:00 grep squid

Now works.

Logs checked

Second problem
Authentication mode show login form but authentication with valid user fail

On messages i see:

Jun 29 09:29:09 localhost (basic_pam_auth): pam_ldap: ldap_search_s No such object

Should i fill some bugs?
How can i test NoCache feature?

I should test transparent_mode

First problem
No squid loaded
[...]

Squid is now restarted (and not reloaded) in nethserver-squid-save and nethserver-squid-update events.

Second problem
Authentication mode show login form but authentication with valid user fail

The pam authenticator script must be executed as root.
Squid now uses a setuid perl wrapper: /usr/libexec/nethserver/squid_pam_helper

How can i test NoCache feature?

Execute:

config setprop squid NoCache www.google.com
signal-event nethserver-squid-save

Check no cache entry is created in /var/log/squid/access.log when visiting www.google.com using the proxy.

• nethserver-squid-1.0.2

Also includes part of #2072 enhancement.

I'm testing it, together with #1775..

• Access a cacheable resource

  curl -L -x davidep2.vboxnet0.tld:3128 http://code.nethesis.it/gitweb.css
  
  ==> /var/log/squid/access.log <==
  1374768335.169   2410 192.168.8.1 TCP_MISS/200 8736 GET http://code.nethesis.it/gitweb.css - HIER_DIRECT/95.138.186.87 text/css
  1374768339.028      1 192.168.8.1 TCP_MEM_HIT/200 8742 GET http://code.nethesis.it/gitweb.css - HIER_NONE/- text/css
  

• If no credentials are provided => ERR_CACHE_ACCESS_DENIED
• Passing credentials

  curl -L -x user01:XXXXXX@davidep2.vboxnet0.tld:3128 http://code.nethesis.it/gitweb.css
  
  ==> /var/log/squid/cache.log <==
  2013/07/25 16:25:25 kid1| Starting new basicauthenticator helpers...
  2013/07/25 16:25:25 kid1| helperOpenServers: Starting 1/5 'squid_pam_helper' processes
  
  ==> /var/log/squid/access.log <==
  1374769526.404    922 192.168.8.1 TCP_MISS/200 8736 GET http://code.nethesis.it/gitweb.css user01 HIER_DIRECT/95.138.186.87 text/css
  

• NOTE Credentials are passed in CLEAR-TEXT (only in a base64-encoded form)

• Enabled server&gateway mode and set as network gateway
• Client hosts use the transparent web proxy
• SSL connections are not proxied

Transparent SSL

See #1775

VERIFIED

RPMs:

nethserver-smartd-1.0.0-1.ns6.noarch
postfix-2.9.6-2.ns6.x86_64
nethserver-lightsquid-1.0.2-1.ns6.noarch
nethserver-nethgui-1.2.2-1.ns6.noarch
dovecot-antispam-0.0.49-1.ns6.x86_64
nethserver-backup-config-1.0.3-1.ns6.noarch
nethserver-samba-1.3.6-1.ns6.noarch
nethserver-httpd-admin-1.0.4-1.ns6.noarch
nethserver-openssh-1.0.2-1.ns6.noarch
nethserver-shorewall-1.0.0-1.ns6.noarch
nethserver-lib-1.3.0-1.ns6.noarch
nethserver-directory-1.2.2-1.ns6.noarch
nethserver-antivirus-1.0.3-1.ns6.noarch
nethserver-mail-common-1.2.1-1.ns6.noarch
nethserver-php-1.1.0-1.ns6.noarch
nethserver-ntp-1.0.4-1.ns6.noarch
nethserver-httpd-2.2.1-1.ns6.noarch
nethserver-firewall-base-1.0.3-1.ns6.noarch
nethserver-yum-1.1.1-1.ns6.noarch
nethserver-mail-server-1.4.4-1.ns6.noarch
nethserver-hosts-1.0.4-1.ns6.noarch
nethserver-grub-1.0.1-1.ns6.noarch
nethserver-squid-1.0.2-1.ns6.noarch
nethserver-base-1.4.0-1.ns6.noarch
nethserver-mail-filter-1.1.1-1.ns6.noarch
nethserver-dnsmasq-1.0.4-1.ns6.noarch

Moved to nethserver-updates repository