[squid-users] Problems configuring Squid with C-ICAP+Squidclamav

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
Second try to check changelog for your version squidclamav. Looks like
you are using version still support method OPTIONS redirection which you
not permit in c-icap.conf. Which is desupported in squidclamav starting
version 6.14, as described here: http://squidclamav.darold.net/news.html


11.05.16 20:41, C. L. Martinez пишет:
> Hi all,
>
>  I am installing a new squid proxy server under OpenBSD 5.9 with
C-ICAP+Squidclamav, and I am having some troubles. When squid start up
and I request some web page, it is returning the following error:
>
>  2016/05/11 14:22:06 kid1| essential ICAP service is down after an
options fetch failure: icap://localhost:1344/squidclamav [down,!opt]
>  2016/05/11 14:23:54 kid1| suspending ICAP service for too many failures
>
>  I've read Squid's wiki page about this and I don't see any error in
my config. Squid's config is:
>
> icap_enable on
> icap_send_client_ip on
> icap_send_client_username on
> icap_client_username_header X-Authenticated-User
> icap_preview_enable on
> icap_preview_size 1024
> #icap_service_failure_limit -1
> icap_service service_avi_req reqmod_precache
icap://localhost:1344/squidclamav bypass=off
> adaptation_access service_avi_req allow all
> icap_service service_avi_resp respmod_precache
icap://localhost:1344/squidclamav bypass=on
> adaptation_access service_avi_resp allow all
>
>  And c-icap's config is:
>
> PidFile /var/run/c-icap/c-icap.pid
> CommandsSocket /var/run/c-icap/c-icap.ctl
> Timeout 300
> MaxKeepAliveRequests 100
> KeepAliveTimeout 600
> StartServers 3
> MaxServers 10
> MinSpareThreads     10
> MaxSpareThreads     20
> ThreadsPerChild     10
> MaxRequestsPerChild  0
> Port 1344
> TmpDir /var/tmp
> MaxMemObject 131072
> DebugLevel 1
> Pipelining on
> ModulesDir /usr/local/lib/c_icap
> ServicesDir /usr/local/lib/c_icap
> TemplateDir /usr/local/share/c_icap/templates/
> LoadMagicFile /etc/c-icap/c-icap.magic
> RemoteProxyUsers off
> RemoteProxyUserHeader X-Authenticated-User
> RemoteProxyUserHeaderEncoded on
> acl localhost src 127.0.0.1/255.255.255.255
> acl ALLREQUESTS type RESPMOD REQMOD
> icap_access allow localhost ALLREQUESTS
> icap_access deny all
> ServerLog /var/log/c-icap/server.log
> AccessLog /var/log/c-icap/access.log
> Logger file_logger
> Module logger sys_logger.so
> Service squidclamav squidclamav.so
>
>  Any idea what am I doing wrong?? How can I do a simple test against
c-icap server from command line??
>
> Thanks.
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXM0eEAAoJENNXIZxhPexGNBQH/00JYsgcaV3QzWVfG3w+mqhk
J/zdX6coYA4r+gS87uhBO8QGiDg8lg88doYYb41JnL9gkqA+6bcCxmqTzAceJMyT
G5UChZ/jvG764pkSB6xW423CqTzgvuObkm9zUS83CPMhw0rG5OMaz7iqmvZsvBAq
qZhLVWKEk1G9oG8i8okY88UPO/L6/PRvo05w1tpYFTW3vwRg1GjFSks5eatb1HZc
PZIJXA84Osh93M7fe0Xb78MCkgca2Rdjk0vMJWJZIH24OcrXZPk3o8LM3NfpS12N
HuRn6uIKPFhpSTZQOcPasKHfO7TLpdvbYcilZ+VtBZ2TZOOTo34bHvNLUh55xaI=
=uD/E
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160511/46c9bcd5/attachment.key>