In a bid to get ICP to work I've noticed I didn't have htcp_access
defined. From the FAQ:
http://www.squid-cache.org/Versions/v2/2.6/cfgman/htcp_access.html
It tells us to use it just like http_access and shows the example:
htcp_access allow all
But when I add this line to my squid.conf and restart, it tells me
2007/10/19 15:46:33| parseConfigFile: line 55 unrecognized:
'htcp_access allow all'
The only thing I can think of is if this binary of Squid for RHEL4
wasn't compiled with support for that. Is this a switch that needs to
be added, or should it just be there anyway? Details of my build:
bash-3.00# /usr/sbin/squid -v
Squid Cache: Version 2.6.STABLE13
configure options: '--build=x86_64-redhat-linux-gnu'
'--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu'
'--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr'
'--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc'
'--includedir=/usr/include' '--libdir=/usr/lib64'
'--libexecdir=/usr/libexec' '--sharedstatedir=/usr/com'
'--mandir=/usr/share/man' '--infodir=/usr/share/info'
'--exec_prefix=/usr' '--bindir=/usr/sbin'
'--libexecdir=/usr/lib64/squid' '--localstatedir=/var'
'--datadir=/usr/share' '--sysconfdir=/etc/squid' '--enable-epoll'
'--enable-snmp' '--enable-removal-policies=heap,lru'
'--enable-storeio=aufs,coss,diskd,null,ufs' '--enable-ssl'
'--with-openssl=/usr/kerberos' '--enable-delay-pools'
'--enable-linux-netfilter' '--with-pthreads'
'--enable-ntlm-auth-helpers=SMB,fakeauth'
'--enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_grou
p' '--enable-auth=basic,digest,ntlm'
'--enable-digest-auth-helpers=password' '--with-winbind-auth-challenge'
'--enable-useragent-log' '--enable-referer-log'
'--disable-dependency-tracking' '--enable-cachemgr-hostname=localhost'
'--enable-underscores'
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-do
main-NTLM,SASL' '--enable-cache-digests' '--enable-ident-lookups'
'--enable-follow-x-forwarded-for' '--enable-wccpv2' '--enable-fd-config'
'--with-maxfd=16384' 'CFLAGS=-fPIE -Os -g -pipe -fsigned-char'
'LDFLAGS=-pie' 'build_alias=x86_64-redhat-linux-gnu'
'host_alias=x86_64-redhat-linux-gnu'
'target_alias=x86_64-redhat-linux-gnu'
Still unsure of if this will make our squids talk to each other,
instead, if they don't have the page they don't check with eachother,
just just go to the origin server with the FIRST_PARENT_UP message.
Relevant lines:
cache_peer nsdgecmweb-18.appl.devjones.com parent 80 0 no-query
no-netdb-exchange no-digest originserver login=PASS
cache_peer nldg-28.appl.devjones.com sibling 3128 3130 proxy-only
login=PASS no-query default
acl fromneighbor src 192.168.120.226
#cache_peer_access nldg-28.appl.devjones.com deny fromneighbor
cache_peer_access nldg-28.appl.devjones.com allow fromneighbor
icp_access allow all
log_icp_queries on
Thanks all.
P
-- PS - my company adds the following disclaimer after I send the email, so I can't turn it off. Sorry. If you are not the intended recipient of this message (including attachments), or if you have received this message in error, immediately notify us and delete it and any attachments. If you no longer wish to receive e-mail from Edward Jones, please send this request to messages@edwardjones.com. You must include the e-mail address that you wish not to receive e-mail communications. For important additional information related to this e-mail, visit www.edwardjones.com/US_email_disclosureReceived on Fri Oct 19 2007 - 15:00:31 MDT
This archive was generated by hypermail pre-2.1.9 : Thu Nov 01 2007 - 13:00:01 MDT