[squid-users] Portal Splash Page 4.7 -> 5.7 FATAL: (ext_session_acl): Failed to open session db

Fri Feb 17 19:27:13 UTC 2023

Dear Alex,

the file permissions must be ok.
Check my log messages, I made an extra test with a short path under /tmp
squid is able to create the session file:
-rw-r----- 1 squid squid 0 17. Feb 14:44 session

and even so, I get the error messages.
The same configuration was and is perfect under squid 3.x and 4.x.

Next week I will do deeper checks, thank you for your ideas.

A statement, that that part has no regressions, works also in the 5.x 
versions would give me hope :-D

br, Tibor

Am 17.02.2023 um 17:30 schrieb Alex Rousskov:
> On 2/17/23 09:20, MATYAS, Tibor wrote:
>
>> FATAL: (ext_session_acl): Failed to open session db 
>> '/tmp/session/session'
>
>> An empty session file with zero byte is always created (with or
>> without tdb), and then the error flow.
>
> This is a long shot, but check permissions of that file (and its 
> directory). Will Squid effective user be able to open that file for 
> writing? I would expect the helper to not be able to create a file at 
> all if this is a permissions issue, but it is easy to check.
>
> If checking permissions does not give you an answer, I would try 
> wrapping the helper in a script to strace it (or equivalent). If you 
> are lucky, you will see a failed helper system call just before the 
> helper system calls that emit the above error message. That failure 
> may explain what is going on.
>
> If nothing helps, I would attach gdb to the helper, but that requires 
> even more work.
>
>
> HTH,
>
> Alex.
>
>
>> Am 17.02.2023 um 10:09 schrieb MATYAS, Tibor:
>>> Hello List,
>>>
>>> trying to move from 4.7 to 5.7 (on gentoo Linux).
>>> Splash portal is in use 
>>> https://wiki.squid-cache.org/ConfigExamples/Portal/Splash
>>>
>>> squid -k parse -> OK
>>> /var/lib/squid/session/ is clean, old berkeleyDB session files deleted.
>>> Owner of the folder is the squid user.
>>>
>>> Squid compiled with tdb:
>>>
>>> Squid Cache: Version 5.7
>>> Service Name: squid
>>> Gentoo squid-5.7-r1 (r: NONE)
>>> This binary uses OpenSSL 1.1.1t  7 Feb 2023. For legal restrictions 
>>> on distribution see https://www.openssl.org/source/license.html
>>> configure options:  '--prefix=/usr' '--build=x86_64-pc-linux-gnu' 
>>> '--host=x86_64-pc-linux-gnu' '--mandir=/usr/share/man' 
>>> '--infodir=/usr/share/info' '--datadir=/usr/share' 
>>> '--sysconfdir=/etc' '--localstatedir=/var/lib' 
>>> '--datarootdir=/usr/share' '--disable-dependency-tracking' 
>>> '--disable-silent-rules' '--disable-static' 
>>> '--docdir=/usr/share/doc/squid-5.7-r1' 
>>> '--htmldir=/usr/share/doc/squid-5.7-r1/html' '--with-sysroot=/' 
>>> '--libdir=/usr/lib64' '--datadir=/usr/share/squid' 
>>> '--libexecdir=/usr/libexec/squid' '--localstatedir=/var' 
>>> '--sysconfdir=/etc/squid' '--with-default-user=squid' 
>>> '--with-logdir=/var/log/squid' '--with-pidfile=/run/squid.pid' 
>>> '--enable-build-info=Gentoo squid-5.7-r1 (r: NONE)' 
>>> '--enable-log-daemon-helpers' '--enable-url-rewrite-helpers' 
>>> '--enable-cache-digests' '--enable-delay-pools' '--enable-disk-io' 
>>> '--enable-eui' '--enable-icmp' '--enable-ipv6' 
>>> '--enable-follow-x-forwarded-for' 
>>> '--enable-removal-policies=lru,heap' 
>>> '--disable-strict-error-checking' '--disable-arch-native' 
>>> '--with-large-files' '--with-build-environment=default' '--with-tdb' 
>>> '--without-included-ltdl' '--with-ltdl-include=/usr/include' 
>>> '--with-ltdl-lib=/usr/lib64' '--with-libcap' '--enable-snmp' 
>>> '--with-openssl' '--with-nettle' '--with-gnutls' '--enable-ssl-crtd' 
>>> '--without-systemd' '--without-cppunit' '--disable-ecap' 
>>> '--disable-esi' '--disable-expat' '--disable-libxml2' 
>>> '--enable-htcp' '--enable-wccp' '--enable-wccpv2' 
>>> '--without-mit-krb5' '--without-heimdal-krb5' 
>>> '--enable-linux-netfilter' '--enable-storeio=aufs,diskd,rock,ufs' 
>>> '--enable-auth-basic=NCSA,POP3,getpwnam,PAM' 
>>> '--enable-auth-digest=file' '--enable-auth-ntlm=none' 
>>> '--enable-auth-negotiate=none' 
>>> '--enable-external-acl-helpers=file_userip,session,unix_group,delayer,time_quota' 
>>> 'build_alias=x86_64-pc-linux-gnu' 'host_alias=x86_64-pc-linux-gnu' 
>>> 'CC=x86_64-pc-linux-gnu-gcc' 'CFLAGS=-march=nocona -O2 -pipe 
>>> -fomit-frame-pointer' 'LDFLAGS=-Wl,-O1 -Wl,--as-needed' 
>>> 'CXXFLAGS=-march=nocona -O2 -pipe -fomit-frame-pointer' 
>>> 'BUILDCXX=x86_64-pc-linux-gnu-g++' 'BUILDCXXFLAGS=-march=nocona -O2 
>>> -pipe -fomit-frame-pointer'
>>>
>>> starting squid results in:
>>>
>>> FATAL: (ext_session_acl): Failed to open session db 
>>> '/var/lib/squid/session/session'
>>> 2023/02/17 09:21:11 kid1| WARNING: external_acl_type #Hlpr27652 exited
>>>     current master transaction: master3
>>> 2023/02/17 09:21:11 kid1| Too few external_acl_type processes are 
>>> running (need 1/1)
>>>     current master transaction: master3
>>> 2023/02/17 09:21:11 kid1| Starting new helpers
>>>     current master transaction: master3
>>> 2023/02/17 09:21:11 kid1| helperOpenServers: Starting 1/1 
>>> 'ext_session_acl' processes
>>>     current master transaction: master3
>>>
>>> What am I missing?
>>>
>>> Thanks a lot and br
>>> Tibor
>>>
>>> _______________________________________________
>>> squid-users mailing list
>>> squid-users at lists.squid-cache.org
>>> http://lists.squid-cache.org/listinfo/squid-users
>>
>>
>>
>> --------------------------------------------------
>> DSI Aerospace Technologie GmbH
>>
>> Sitz der Gesellschaft: Otto-Lilienthal-Str. 1, D-28199 Bremen, Germany
>> Web: http://www.dsi-as.de
>>
>> Geschaeftsfuehrer: Dr.-Ing. Christian Dierker
>>                    M. Sc. Elias Hashem
>>
>> HRB 17726, Amtsgericht Bremen
>> USt-IdNr.: DE 192 681 774
>> --------------------------------------------------
>>
>>
>>
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

--------------------------------------------------
DSI Aerospace Technologie GmbH

Sitz der Gesellschaft: Otto-Lilienthal-Str. 1, D-28199 Bremen, Germany
Web: http://www.dsi-as.de

Geschaeftsfuehrer: Dr.-Ing. Christian Dierker
                   M. Sc. Elias Hashem

HRB 17726, Amtsgericht Bremen
USt-IdNr.: DE 192 681 774
--------------------------------------------------