[squid-users] Many new ERROR lines in cache.log after upgrade

[Truniger Othmar]

Hi
we have been successfully running Squid for authentication and authorization for almost two decades. We don't cache and no SSL-bumping, just many access rules.

Last weekend I migrated from self-compiled 3.5.x on RHEL7 to RHEL8 with official RPM squid-4.11-4 using the same configuration file. We want to get advantage from official RPMs.

Now we get many log entries in cache.log like this (a few hundred pairs a day):
2021/12/21 11:52:24 kid3| ERROR: helper: {result=BH, notes={message: Success; }}, attempt #1 of 2
2021/12/21 11:52:24 kid3| ERROR: helper: {result=BH, notes={message: Success; message: Success; }}, attempt #2 of 2

Because nothing in the environment changed I must assume that it's only a matter of more intensive logging. But I'm not sure if I have to worry about.

I understand it's related to basic helpers. Since ever we use the original basic_ldap_auth and ext_ldap_group_acl and never experienced any problems with them. Also cachemgr now reports 100% successful requests/replies for the helpers and I see not any indication for any problem.
It just looks a little awkward to see ERROR in these lines but Success for everything at the same time.
I have set "debug_options ALL,1 rotate=2"
The helpers don't use persistent connections.

Maybe this point could be significant: I used "--disable-ipv6" when self-compiling while the RHEL8 RPM probably has full IPv6 support included. Our servers have all IPv6 support disabled though.

I could not find much about this topic. It was once said that one should check for strange behaviour of the basic helpers if these messages occur.

Should I worry about it?
Is it just an artefact for logging in this redhat RPM version?
Could it be related with the way squid helpers deals with IPv6 on systems without IPv6?
How could I specifically debug the helpers without flooding the cache.log (what section)?
Any advice?

many thanks and regards, Othmar

________________________________

Disclaimer:


Diese E-Mail enthält möglicherweise vertrauliche Informationen und ist einzig für den beabsichtigten Empfänger bestimmt. Sollten Sie diese E-Mail irrtümlicherweise erhalten haben, bitten wir Sie, die Zürcher Kantonalbank unverzüglich zu benachrichtigen und diese E-Mail sowie deren Anhänge sofort zu löschen. Unbefugte Verwendung kann geahndet werden.

Vielen Dank.