]>
Commit | Line | Data |
---|---|---|
f78f51ea | 1 | # TODO |
078f5547 | 2 | # - REVIEW patches and configuration |
1d9fd646 | 3 | # - use /usr/lib/cgi-bin instead of /home/services |
59113687 | 4 | # - ZPH TOS - |
5 | # For this to work correctly, you will need to patch your linux | |
6 | # kernel with the TOS preserving ZPH patch. | |
7 | # The kernel patch can be downloaded from http://zph.bratcheda.org | |
9f399e60 | 8 | # |
9 | # Conditional build: | |
632c8533 | 10 | %bcond_with combined_log # enables apache-like combined log format |
9f399e60 | 11 | # |
bbd3a6ea | 12 | Summary: SQUID Internet Object Cache |
42b7bd48 ER |
13 | Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher |
14 | Summary(pl.UTF-8): Uniwersalny serwer proxy-cache | |
15 | Summary(pt_BR.UTF-8): Cache Squid de objetos Internet | |
16 | Summary(ru.UTF-8): Squid - кэш объектов Internet | |
17 | Summary(uk.UTF-8): Squid - кеш об'єктів Internet | |
18 | Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器 | |
bbd3a6ea | 19 | Name: squid |
cdfd5438 | 20 | Version: 3.0.STABLE6 |
078f5547 AM |
21 | # review patches before stable release |
22 | Release: 0.1 | |
80d0d8a3 | 23 | Epoch: 7 |
c0986f46 | 24 | License: GPL v2 |
36fddb2a | 25 | Group: Networking/Daemons |
078f5547 | 26 | Source0: http://www.squid-cache.org/Versions/v3/3.0/%{name}-%{version}.tar.bz2 |
cdfd5438 | 27 | # Source0-md5: 231323a73346041cec825e785960e348 |
d114d8e2 JB |
28 | # http://www.squid-cache.org/Doc/FAQ/FAQ.tar.gz |
29 | Source1: %{name}-FAQ.tar.gz | |
30 | # Source1-md5: cb9a955f8cda9cc166e086fccd412a43 | |
bbd3a6ea | 31 | Source2: %{name}.init |
29ca562c | 32 | Source3: %{name}.sysconfig |
d114d8e2 | 33 | # http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip |
078f5547 | 34 | Source4: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip |
d114d8e2 | 35 | # Source4-md5: 4f3b6dab1de9cbb847df89d8b417378a |
590e6457 | 36 | Source5: %{name}.conf.patch |
27a7ed0d | 37 | Source6: %{name}.logrotate |
3c0645bd | 38 | Source7: %{name}.pamd |
f1c5f539 | 39 | # Bug fixes from Squid home page, please include URL |
68f70685 | 40 | # lets have fun - there is no patches... yet:) |
8f8faf3f | 41 | # Other patches: |
59113687 | 42 | # http://zph.bratcheda.org/ |
68f70685 ER |
43 | Patch0: %{name}_hit_miss_mark.patch |
44 | Patch1: %{name}-fhs.patch | |
45 | Patch2: %{name}-location.patch | |
46 | Patch3: %{name}-domainmatch.patch | |
47 | Patch4: %{name}-libnsl_fixes.patch | |
48 | Patch5: %{name}-crash-on-ENOSPC.patch | |
49 | Patch6: %{name}-newssl.patch | |
50 | Patch7: %{name}-empty-referer.patch | |
51 | Patch8: %{name}-2.5.STABLE4-apache-like-combined-log.patch | |
52 | Patch9: %{name}-auth_on_acceleration.patch | |
2655eecf | 53 | Patch10: %{name}-ppc-m32.patch |
f0a5f35f | 54 | URL: http://www.squid-cache.org/ |
7488bd27 | 55 | BuildRequires: autoconf |
4b4ba0a1 | 56 | BuildRequires: automake |
0f1815c6 | 57 | BuildRequires: cyrus-sasl-devel >= 2.1.0 |
427f606c | 58 | BuildRequires: db-devel |
f89ac51f | 59 | BuildRequires: libltdl-devel |
0542d8f7 | 60 | BuildRequires: openldap-devel >= 2.3.0 |
63e75b9c | 61 | BuildRequires: openssl-devel >= 0.9.7d |
29294f93 | 62 | BuildRequires: pam-devel |
7de7a1e8 | 63 | BuildRequires: perl-base |
2210ba0e | 64 | BuildRequires: rpmbuild(macros) >= 1.268 |
349b995c | 65 | BuildRequires: sed >= 4.0 |
115a61f1 | 66 | BuildRequires: unzip |
2a8ec884 | 67 | Requires(post): /bin/hostname |
b3a4b715 JB |
68 | Requires(post): fileutils |
69 | Requires(post): findutils | |
d6013865 | 70 | Requires(post): grep |
2a8ec884 | 71 | Requires(post,preun): /sbin/chkconfig |
b3a4b715 JB |
72 | Requires(postun): /usr/sbin/groupdel |
73 | Requires(postun): /usr/sbin/userdel | |
2a8ec884 ER |
74 | Requires(pre): /bin/id |
75 | Requires(pre): /usr/bin/getgid | |
76 | Requires(pre): /usr/lib/rpm/user_group.sh | |
77 | Requires(pre): /usr/sbin/groupadd | |
78 | Requires(pre): /usr/sbin/useradd | |
79 | Requires: rc-scripts >= 0.2.0 | |
80 | Requires: setup >= 2.4.6 | |
93090cc0 | 81 | Provides: group(squid) |
c93c3680 | 82 | # epoll enabled by default: |
d765f971 | 83 | Requires: uname(release) >= 2.6 |
93090cc0 | 84 | Provides: user(squid) |
5e26975c | 85 | Conflicts: logrotate < 3.7-4 |
f01c9d57 | 86 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
e1baf3c8 | 87 | |
7480ed4d AF |
88 | %define _libexecdir %{_libdir}/%{name} |
89 | %define _sysconfdir /etc/%{name} | |
e986fc96 | 90 | %define _cgidir /home/services/httpd/cgi-bin |
7480ed4d | 91 | |
e1baf3c8 | 92 | %description |
36fddb2a | 93 | Squid is a high-performance proxy caching server for web clients, |
94 | supporting FTP, gopher, and HTTP data objects. Unlike traditional | |
95 | caching software, Squid handles all requests in a single, | |
96 | non-blocking, I/O-driven process. Squid keeps meta data and especially | |
97 | hot objects cached in RAM, caches DNS lookups, supports non-blocking | |
98 | DNS lookups, and implements negative caching of failed requests. If | |
99 | you are tight on memory, check out the NOVM version of this package. | |
100 | Squid supports SSL, extensive access controls, and full request | |
101 | logging. By using the lightweight Internet Cache Protocol, Squid | |
8f00d34a | 102 | caches can be arranged in a hierarchy or mesh for additional bandwidth |
36fddb2a | 103 | savings. Squid consists of a main server program squid, a Domain Name |
104 | System lookup program dnsserver, a program for retrieving FTP data | |
105 | ftpget, and some management and client tools. When squid starts up, it | |
106 | spawns a configurable number of dnsserver processes, each of which can | |
107 | perform a single, blocking Domain Name System (DNS) lookup. This | |
108 | reduces the amount of time the cache waits for DNS lookups. Squid is | |
109 | derived from the ARPA-funded Harvest project. | |
e1baf3c8 | 110 | |
1cf03309 JR |
111 | %description -l es.UTF-8 |
112 | Squid es un servidor proxy con caché de alto desempeño para clientes | |
4b571a16 | 113 | web, soportando FTP, gopher y HTTP. Diferentemente de softwares |
1cf03309 JR |
114 | tradicionales de caché squid manipula todas las requisiciones en un |
115 | único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y | |
116 | objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché | |
4b571a16 | 117 | de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa |
1cf03309 JR |
118 | un caché negativo de requisiciones que fallen. Si tiene poca memoria |
119 | da un vistazo en la versión NOVM de este paquete. También soporta SSL, | |
4b571a16 | 120 | controles extensivos de acceso y registro (log) completo de las |
121 | requisiciones. Usando el ligero Protocolo de Caches Internet (ICP) | |
1cf03309 JR |
122 | puede ser usado en una jerarquía de servidores para mayor ahorro de la |
123 | banda de comunicación. Está compuesto del programa squid (servidor | |
124 | principal), del programa dnsserver (para resolución DNS), del programa | |
4b571a16 | 125 | ftpget (para transmisiones ftp) y otras herramientas clientes y para |
1cf03309 | 126 | administración. Cuando squid se inicia, dispara un número configurable |
4b571a16 | 127 | de procesos dnsserver, cada uno pudiendo ejecutar solamente una |
1cf03309 JR |
128 | resolución DNS con poder de bloquear. Esto reduce el tiempo que el |
129 | caché espera por resoluciones DNS. Fue derivado del proyecto Harvest, | |
4b571a16 | 130 | financiado por la ARPA. |
131 | ||
1cf03309 JR |
132 | %description -l pl.UTF-8 |
133 | Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW, | |
134 | klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w | |
135 | pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla | |
136 | SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych | |
137 | danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer | |
138 | squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet | |
139 | squid obejmuje: główny program serwera squid, program dostarczający | |
140 | informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz | |
141 | pomocnicze programy do zarządzania. Squid wywodzi się ze | |
36fddb2a | 142 | sponsorowanego przez ARPA projektu Harvest. |
e1baf3c8 | 143 | |
1cf03309 JR |
144 | %description -l pt_BR.UTF-8 |
145 | O Squid é um servidor proxy com cache de alta performance para | |
4b571a16 | 146 | clientes web, suportando FTP, gopher e HTTP. Diferentemente de |
1cf03309 JR |
147 | softwares tradicionais de cache o squid manipula todas as requisições |
148 | em um único processo sem bloqueios, direcionado a E/S. | |
4b571a16 | 149 | |
1cf03309 JR |
150 | Mantém meta dados e objetos freqüentemente pedidos num cache em |
151 | memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem | |
152 | bloqueio e implementa um cache negativo de requisições que falharem. | |
153 | Se você tem pouca memória dê uma olhada na versão NOVM deste pacote. | |
4b571a16 | 154 | |
1cf03309 JR |
155 | Também suporta SSL, controles extensivos de acesso e registro (log) |
156 | completo das requisições. Usando o leve Protocolo de Caches Internet | |
4b571a16 | 157 | (ICP) ele pode ser usado em uma hierarquia de servidores para maior |
1cf03309 | 158 | economia de banda de comunicação. |
4b571a16 | 159 | |
160 | Ele consiste do programa squid (servidor principal), do programa | |
1cf03309 | 161 | dnsserver (para resolução DNS), do programa ftpget (para transmissões |
4b571a16 | 162 | ftp) e outras ferramentas clientes e para gerenciamento. Quando o |
1cf03309 JR |
163 | squid é inicializado ele dispara um número configurável de processos |
164 | dnsserver, cada um podendo executar somente uma resolução DNS | |
165 | bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS. | |
4b571a16 | 166 | |
167 | Foi derivado do projeto Harvest, financiado pela ARPA. | |
168 | ||
1cf03309 JR |
169 | %description -l ru.UTF-8 |
170 | Squid - это высокопроизводительный кэширующий прокси-сервер для | |
171 | клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В | |
172 | отличие от традиционных кэширующих программ, Squid обрабатывает все | |
173 | запросы при помощи одного неблокирующегося, управляемого | |
174 | вводом-выводом процесса. | |
735979dc | 175 | |
1cf03309 | 176 | Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб |
735979dc | 177 | (Netdb). |
178 | ||
1cf03309 JR |
179 | %description -l uk.UTF-8 |
180 | Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує | |
181 | об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних | |
182 | кешуючих програм, Squid обробляє всі запити за допомогою одного | |
183 | неблокуючого, керованого вводом-виводом процесу. | |
735979dc | 184 | |
1cf03309 | 185 | Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб |
735979dc | 186 | (Netdb). |
187 | ||
29ca562c | 188 | %package cachemgr |
189 | Summary: CGI script for Squid management | |
42b7bd48 | 190 | Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW |
29ca562c | 191 | Group: Networking/Admin |
f0a5f35f | 192 | Requires: %{name} = %{epoch}:%{version}-%{release} |
79634bd7 | 193 | Requires: webserver |
29ca562c | 194 | |
195 | %description cachemgr | |
36fddb2a | 196 | Cachemgr.cgi is a CGI script that allows administrator to chceck |
197 | various informations about Squid via WWW. | |
29ca562c | 198 | |
1cf03309 JR |
199 | %description cachemgr -l pl.UTF-8 |
200 | Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi | |
201 | zapoznać się z informacjami o pracy Squida poprzez WWW. | |
29ca562c | 202 | |
ce1cc056 | 203 | %package ldap_auth |
8acaa3f5 | 204 | Summary: LDAP authentication helper for Squid |
42b7bd48 | 205 | Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida |
ce1cc056 | 206 | Group: Networking/Admin |
f0a5f35f | 207 | Requires: %{name} = %{epoch}:%{version}-%{release} |
ce1cc056 | 208 | |
209 | %description ldap_auth | |
210 | This Squid helper allows authentication against LDAP directories using | |
211 | the "simple authentication" (plain-text). | |
212 | ||
1cf03309 JR |
213 | %description ldap_auth -l pl.UTF-8 |
214 | Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego | |
632c8533 | 215 | uwierzytelniania (otwartym tekstem). |
8acaa3f5 | 216 | |
ce1cc056 | 217 | %package pam_auth |
8acaa3f5 | 218 | Summary: PAM authentication helper for Squid |
42b7bd48 | 219 | Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida |
ce1cc056 | 220 | Group: Networking/Admin |
f0a5f35f | 221 | Requires: %{name} = %{epoch}:%{version}-%{release} |
891c08b7 | 222 | Requires: pam >= 0.77.3 |
ce1cc056 | 223 | |
224 | %description pam_auth | |
225 | This program authenticates users against a PAM configured | |
226 | authentication service "squid". This allows you to authenticate Squid | |
227 | users to any authentication source for which you have a PAM module. | |
228 | ||
1cf03309 JR |
229 | %description pam_auth -l pl.UTF-8 |
230 | Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym | |
231 | źródle posiadającym moduł PAM. | |
8acaa3f5 | 232 | |
ce1cc056 | 233 | %package smb_auth |
8acaa3f5 | 234 | Summary: SMB authentication helper for Squid |
42b7bd48 | 235 | Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida |
ce1cc056 | 236 | Group: Networking/Admin |
f0a5f35f | 237 | Requires: %{name} = %{epoch}:%{version}-%{release} |
ce1cc056 | 238 | |
239 | %description smb_auth | |
240 | This is a proxy authentication module. With smb_auth you can | |
241 | authenticate proxy users against an SMB server like Windows NT or | |
242 | Samba. | |
243 | ||
1cf03309 JR |
244 | %description smb_auth -l pl.UTF-8 |
245 | To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można | |
246 | uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy | |
632c8533 | 247 | Samba. |
8acaa3f5 | 248 | |
7140e072 PG |
249 | %package msnt_auth |
250 | Summary: MSNT domain authentication helper for Squid | |
42b7bd48 | 251 | Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida |
7140e072 | 252 | Group: Networking/Admin |
f0a5f35f | 253 | Requires: %{name} = %{epoch}:%{version}-%{release} |
7140e072 PG |
254 | |
255 | %description msnt_auth | |
5f1d3951 | 256 | This is an authentication module for the Squid proxy server to |
7140e072 PG |
257 | authenticate users on an NT domain. |
258 | ||
1cf03309 JR |
259 | %description msnt_auth -l pl.UTF-8 |
260 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
261 | uwierzytelnianie użytkowników proxy w domenie NT. | |
7140e072 PG |
262 | |
263 | %package yp_auth | |
264 | Summary: YP authentication helper for Squid | |
42b7bd48 | 265 | Summary(pl.UTF-8): Obsługa uwierzytelniania YP dla squida |
7140e072 | 266 | Group: Networking/Admin |
f0a5f35f | 267 | Requires: %{name} = %{epoch}:%{version}-%{release} |
7140e072 PG |
268 | |
269 | %description yp_auth | |
270 | This is an authentication module for the Squid proxy server to | |
271 | authenticate users on YP. | |
272 | ||
1cf03309 JR |
273 | %description yp_auth -l pl.UTF-8 |
274 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
275 | uwierzytelnianie użytkowników proxy poprzez YP. | |
7140e072 | 276 | |
84c99453 JR |
277 | %package ncsa_auth |
278 | Summary: NCSA httpd style authentication helper for Squid | |
42b7bd48 | 279 | Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida |
84c99453 | 280 | Group: Networking/Admin |
f0a5f35f | 281 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
282 | |
283 | %description ncsa_auth | |
284 | This module uses a NCSA httpd style password file for authentication. | |
285 | ||
1cf03309 JR |
286 | %description ncsa_auth -l pl.UTF-8 |
287 | Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd. | |
84c99453 JR |
288 | |
289 | %package sasl_auth | |
290 | Summary: SASL authentication helper for Squid | |
42b7bd48 | 291 | Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida |
84c99453 | 292 | Group: Networking/Admin |
f0a5f35f | 293 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
294 | |
295 | %description sasl_auth | |
296 | This is an authentication module for the Squid proxy server to | |
297 | authenticate users via SASL. | |
298 | ||
1cf03309 JR |
299 | %description sasl_auth -l pl.UTF-8 |
300 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
301 | uwierzytelnianie użytkowników proxy poprzez SASL. | |
84c99453 | 302 | |
84c99453 JR |
303 | %package getpwname_auth |
304 | Summary: getpwname authentication helper for Squid | |
42b7bd48 | 305 | Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida |
84c99453 | 306 | Group: Networking/Admin |
f0a5f35f | 307 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
308 | |
309 | %description getpwname_auth | |
310 | This is an authentication module for the Squid proxy server to | |
311 | authenticate users using getpwname. | |
312 | ||
1cf03309 JR |
313 | %description getpwname_auth -l pl.UTF-8 |
314 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
315 | uwierzytelnianie użytkowników proxy poprzez getpwname. | |
84c99453 JR |
316 | |
317 | %package passwd_auth | |
318 | Summary: passwd authentication helper for Squid | |
42b7bd48 | 319 | Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida |
84c99453 | 320 | Group: Networking/Admin |
f0a5f35f | 321 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
322 | |
323 | %description passwd_auth | |
324 | This is an authentication module for the Squid proxy server to | |
325 | authenticate users with separate passwd file. | |
326 | ||
1cf03309 JR |
327 | %description passwd_auth -l pl.UTF-8 |
328 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
329 | uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd. | |
84c99453 JR |
330 | |
331 | %package ntlm_auth | |
332 | Summary: NTLM authentication helper for Squid | |
42b7bd48 | 333 | Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida |
84c99453 | 334 | Group: Networking/Admin |
f0a5f35f | 335 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
336 | |
337 | %description ntlm_auth | |
338 | This is an authentication module for the Squid proxy server to | |
339 | authenticate users on NTLM. | |
340 | ||
1cf03309 JR |
341 | %description ntlm_auth -l pl.UTF-8 |
342 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
343 | uwierzytelnianie użytkowników proxy poprzez NTLM. | |
84c99453 | 344 | |
39607b78 | 345 | %package digest_ldap_auth |
346 | Summary: LDAP authentication helper for Squid | |
42b7bd48 | 347 | Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida |
39607b78 | 348 | Group: Networking/Admin |
349 | Requires: %{name} = %{epoch}:%{version}-%{release} | |
350 | ||
351 | %description digest_ldap_auth | |
352 | This is an authentication module for the Squid proxy server to | |
353 | authenticate users on LDAP. | |
354 | ||
1cf03309 JR |
355 | %description digest_ldap_auth -l pl.UTF-8 |
356 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
357 | uwierzytelnianie użytkowników proxy poprzez LDAP. | |
39607b78 | 358 | |
84c99453 JR |
359 | %package ip_acl |
360 | Summary: IP external ACL helper for Squid | |
42b7bd48 | 361 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida |
84c99453 | 362 | Group: Networking/Admin |
f0a5f35f | 363 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
364 | |
365 | %description ip_acl | |
f0a5f35f | 366 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 367 | access for users based on IP address. |
84c99453 | 368 | |
1cf03309 JR |
369 | %description ip_acl -l pl.UTF-8 |
370 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
371 | ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP. | |
84c99453 JR |
372 | |
373 | %package ldap_acl | |
374 | Summary: LDAP group external ACL helper for Squid | |
42b7bd48 | 375 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida |
84c99453 | 376 | Group: Networking/Admin |
f0a5f35f | 377 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
378 | |
379 | %description ldap_acl | |
f0a5f35f | 380 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 381 | access for users based on LDAP group membership. |
84c99453 | 382 | |
1cf03309 JR |
383 | %description ldap_acl -l pl.UTF-8 |
384 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
385 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
386 | przynależności do grup LDAP. | |
84c99453 JR |
387 | |
388 | %package unix_acl | |
389 | Summary: UNIX group external ACL helper for Squid | |
42b7bd48 | 390 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida |
84c99453 | 391 | Group: Networking/Admin |
f0a5f35f | 392 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
393 | |
394 | %description unix_acl | |
f0a5f35f | 395 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 396 | access for users based on UNIX group membership. |
84c99453 | 397 | |
1cf03309 JR |
398 | %description unix_acl -l pl.UTF-8 |
399 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
400 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
401 | przynależności do grup UNIX. | |
84c99453 JR |
402 | |
403 | %package wbinfo_acl | |
404 | Summary: NT domain group external ACL helper for Squid | |
42b7bd48 | 405 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida |
84c99453 | 406 | Group: Networking/Admin |
f0a5f35f | 407 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
408 | |
409 | %description wbinfo_acl | |
f0a5f35f | 410 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 411 | access for users based on NT domain group membership using wbinfo. |
84c99453 | 412 | |
1cf03309 JR |
413 | %description wbinfo_acl -l pl.UTF-8 |
414 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
415 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
416 | przynależności do grup w domenie NT przy użyciu wbinfo. | |
84c99453 | 417 | |
39607b78 | 418 | %package session_acl |
419 | Summary: Squid session tracking external acl group helper | |
84c99453 | 420 | Group: Networking/Admin |
f0a5f35f | 421 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 | 422 | |
39607b78 | 423 | %description session_acl |
68f70685 ER |
424 | This helper maintains a concept of sessions by monitoring requests and |
425 | timing out sessions if no requests have been seen for the idle timeout | |
39607b78 | 426 | timer. |
84c99453 | 427 | |
4c0ef65a | 428 | %package scripts |
c8e93bac | 429 | Summary: Perl scripts for Squid |
42b7bd48 | 430 | Summary(pl.UTF-8): Skrypty perlowe dla Squida |
4c0ef65a ER |
431 | Group: Networking/Admin |
432 | Requires: %{name} = %{epoch}:%{version}-%{release} | |
433 | ||
434 | %description scripts | |
c8e93bac JB |
435 | This package contains Perl scripts and contributed programs for Squid. |
436 | ||
1cf03309 | 437 | %description scripts -l pl.UTF-8 |
c8e93bac | 438 | Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida. |
4c0ef65a | 439 | |
e1baf3c8 | 440 | %prep |
d114d8e2 | 441 | %setup -q -a1 -a4 |
8f8faf3f | 442 | # Bug fixes from Squid home page: |
960d91d2 | 443 | |
3de753ac | 444 | # Other patches: |
59113687 | 445 | %patch0 -p1 |
2655eecf | 446 | %patch1 -p1 |
078f5547 AM |
447 | #%patch2 -p1 |
448 | #%patch3 -p1 | |
449 | #%patch4 -p1 | |
450 | #%patch5 -p1 | |
451 | #%patch6 -p1 | |
452 | #%patch7 -p1 | |
2655eecf | 453 | %{?with_combined_log:%patch8 -p1} |
454 | %patch9 -p1 | |
7b66d9b5 | 455 | %ifarch ppc |
2655eecf | 456 | %patch10 -p1 |
7b66d9b5 | 457 | %endif |
dae9f88a | 458 | |
349b995c ER |
459 | %{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts,helpers/*/*}/*.pl |
460 | ||
e1baf3c8 | 461 | %build |
3de753ac | 462 | %{__aclocal} |
da6a399a | 463 | %{__autoconf} |
e5759917 | 464 | %{__autoheader} |
3de753ac | 465 | %{__automake} |
7480ed4d | 466 | %configure \ |
194fe678 | 467 | --datadir=%{_datadir}/squid \ |
03ee6af7 | 468 | --enable-arp-acl \ |
f48cdc06 | 469 | --enable-auth="basic,digest,negotiate,ntlm" \ |
470 | --enable-basic-auth-helpers="LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,getpwnam,multi-domain-NTLM" \ | |
078f5547 AM |
471 | --enable-cache-digests \ |
472 | --enable-coss-aio-ops \ | |
473 | --enable-delay-pools \ | |
f48cdc06 | 474 | --enable-digest-auth-helpers="ldap,password" \ |
078f5547 AM |
475 | --enable-err-language=English \ |
476 | --enable-esi \ | |
f48cdc06 | 477 | --enable-external-acl-helpers="ip_user,ldap_group,session,unix_group,wbinfo_group" \ |
078f5547 AM |
478 | --enable-follow-x-forwarded-for \ |
479 | --enable-forward-log \ | |
480 | --enable-forw-via-db \ | |
481 | --enable-htcp \ | |
482 | --enable-icap-client \ | |
483 | --enable-icmp \ | |
484 | --enable-kill-parent-hack \ | |
485 | --enable-large-cache-files \ | |
486 | --enable-linux-netfilter \ | |
487 | --enable-linux-tproxy \ | |
488 | --enable-multicast-miss \ | |
f48cdc06 | 489 | --enable-ntlm-auth-helpers="SMB,fakeauth,no_check" \ |
490 | --enable-ntlm-fail-open \ | |
078f5547 AM |
491 | --enable-referer-log \ |
492 | --enable-removal-policies="heap,lru" \ | |
493 | --enable-snmp \ | |
494 | --enable-ssl \ | |
495 | --enable-storeio="aufs,coss,diskd,null,ufs" \ | |
496 | --enable-useragent-log \ | |
194fe678 | 497 | --enable-x-accelerator-vary \ |
68c5bbf6 PG |
498 | --localstatedir=/var \ |
499 | --sysconfdir=%{_sysconfdir} \ | |
e5759917 | 500 | --with-auth-on-acceleration \ |
4dcb690c | 501 | --with-large-files \ |
078f5547 | 502 | --with-maxfd=32768 \ |
59113687 | 503 | --with-pthreads \ |
504 | --enable-zph-qos | |
e1baf3c8 | 505 | |
8acaa3f5 | 506 | %{__make} |
e1baf3c8 | 507 | |
508 | %install | |
509 | rm -rf $RPM_BUILD_ROOT | |
e986fc96 | 510 | install -d $RPM_BUILD_ROOT%{_cgidir} \ |
3c0645bd | 511 | $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \ |
24c96395 | 512 | $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \ |
f0a5f35f | 513 | $RPM_BUILD_ROOT%{_mandir}/man8 \ |
29ca562c | 514 | $RPM_BUILD_ROOT%{_datadir}/squid \ |
e62e100a | 515 | $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid |
e1baf3c8 | 516 | |
77f75ffe | 517 | %{__make} install \ |
3de753ac | 518 | DESTDIR=$RPM_BUILD_ROOT |
e1baf3c8 | 519 | |
daed1adf | 520 | cp -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib |
2fe495a6 | 521 | install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir} |
29ca562c | 522 | |
24c96395 | 523 | install %{SOURCE7} $RPM_BUILD_ROOT/etc/pam.d/squid |
3c0645bd | 524 | touch $RPM_BUILD_ROOT/etc/security/blacklist.squid |
ce1cc056 | 525 | |
e986fc96 | 526 | mv -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir} |
e1baf3c8 | 527 | |
590e6457 | 528 | cd $RPM_BUILD_ROOT/etc/squid |
fde47eed | 529 | cp -f squid.conf{,.default} |
0542d8f7 ER |
530 | %{__patch} -p0 < %{SOURCE5} |
531 | rm -f *~ *.orig | |
590e6457 | 532 | cd - |
533 | ||
29ca562c | 534 | install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid |
535 | install %{SOURCE3} $RPM_BUILD_ROOT/etc/sysconfig/squid | |
29ca562c | 536 | install %{SOURCE6} $RPM_BUILD_ROOT/etc/logrotate.d/squid |
e1baf3c8 | 537 | |
29ca562c | 538 | touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log |
bbd3a6ea | 539 | |
29ca562c | 540 | # These two files start squid. They are replaced by /etc/rc.d/init.d script. |
0d89ccc2 | 541 | rm -f $RPM_BUILD_ROOT%{_bindir}/R* |
e1baf3c8 | 542 | |
1c1894b4 ER |
543 | # cp, to have re-entrant install |
544 | rm -rf docs | |
545 | cp -a doc docs | |
68c5bbf6 | 546 | # dunno why, but manual is not installed |
1c1894b4 | 547 | mv docs/squid.8 $RPM_BUILD_ROOT%{_mandir}/man8 |
68c5bbf6 | 548 | # We don't want Makefiles as docs... |
1c1894b4 | 549 | rm -f docs/Makefile* |
68c5bbf6 | 550 | |
f0a5f35f | 551 | # We don't like message: rpm found unpackaged files ... |
acf3cdb9 TP |
552 | rm -f $RPM_BUILD_ROOT/etc/squid/msntauth.conf.default \ |
553 | $RPM_BUILD_ROOT/etc/squid/squid.conf.orig | |
f0a5f35f | 554 | |
1c1894b4 ER |
555 | > $RPM_BUILD_ROOT/var/cache/squid/netdb_state |
556 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state | |
557 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean | |
558 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean | |
559 | ||
fde47eed | 560 | %clean |
7140e072 | 561 | rm -rf $RPM_BUILD_ROOT |
fde47eed | 562 | |
3e5c79df | 563 | %pre |
9cc7d20f ER |
564 | %groupadd -g 91 squid |
565 | %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid | |
566 | %addusertogroup stats squid | |
567 | ||
349b995c | 568 | [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || : |
3e5c79df | 569 | |
e1baf3c8 | 570 | %post |
1e0573f8 | 571 | if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then |
b47ca9e4 ER |
572 | hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost' |
573 | echo visible_hostname $hostname >> /etc/squid/squid.conf | |
1e0573f8 | 574 | fi |
575 | ||
2210ba0e | 576 | /sbin/chkconfig --add squid |
c98ab205 | 577 | if [ "$1" = "1" ]; then |
9cac9077 | 578 | /sbin/service squid init >&2 |
c98ab205 | 579 | fi |
2210ba0e | 580 | %service squid restart |
29ca562c | 581 | |
582 | %preun | |
688434c4 | 583 | if [ "$1" = "0" ]; then |
c98ab205 | 584 | /sbin/chkconfig --del squid |
2210ba0e | 585 | %service squid stop |
1c1894b4 ER |
586 | |
587 | # nuke squid cache if uninstalling | |
588 | rm -rf /var/cache/squid/?? | |
e1baf3c8 | 589 | fi |
590 | ||
b3a4b715 JB |
591 | %postun |
592 | if [ "$1" = "0" ]; then | |
93090cc0 | 593 | %userremove squid |
594 | %groupremove squid | |
b3a4b715 | 595 | fi |
5f1d3951 | 596 | |
9cac9077 ER |
597 | %triggerpostun -- squid < 7:2.5.STABLE7-5 |
598 | %addusertogroup stats squid | |
599 | ||
e1baf3c8 | 600 | %files |
601 | %defattr(644,root,root,755) | |
d114d8e2 | 602 | %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART RELEASENOTES.html SPONSORS |
1c1894b4 | 603 | %doc docs/* src/mib.txt FAQ*.html book-full.html |
194fe678 | 604 | %attr(755,root,root) %{_bindir}/squidclient |
078f5547 | 605 | %attr(755,root,root) %{_libexecdir}/diskd |
dad16a56 | 606 | # YES, it has to be suid root, it sends ICMP packets. |
194fe678 AM |
607 | %attr(4754,root,squid) %{_libexecdir}/pinger |
608 | %attr(755,root,root) %{_libexecdir}/unlinkd | |
f0a5f35f | 609 | %attr(755,root,root) %{_libexecdir}/fakeauth_auth |
3ef3ad78 | 610 | %attr(755,root,root) %{_sbindir}/* |
bbd3a6ea | 611 | |
d765f971 | 612 | %dir %{_sysconfdir} |
e1baf3c8 | 613 | |
e0a16a3e | 614 | %attr(754,root,root) /etc/rc.d/init.d/squid |
8d2e1c07 | 615 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid |
6b2e091c | 616 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid |
dad16a56 | 617 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf |
3e5c79df | 618 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf |
29ca562c | 619 | %attr(640,root,root) %{_sysconfdir}/mime.conf.default |
620 | %attr(640,root,root) %{_sysconfdir}/squid.conf.default | |
621 | ||
7134c92f | 622 | %dir %{_datadir}/squid |
56db77a9 | 623 | %dir %{_datadir}/squid/errors |
29ca562c | 624 | %{_datadir}/squid/icons |
625 | %{_datadir}/squid/mib.txt | |
6ac74d17 | 626 | %lang(am) %{_datadir}/squid/errors/Armenian |
39607b78 | 627 | %lang(az) %{_datadir}/squid/errors/Azerbaijani |
daed1adf | 628 | %lang(bg) %{_datadir}/squid/errors/Bulgarian |
260e8a82 | 629 | %lang(ca) %{_datadir}/squid/errors/Catalan |
daed1adf JR |
630 | %lang(cs) %{_datadir}/squid/errors/Czech |
631 | %lang(da) %{_datadir}/squid/errors/Danish | |
632 | %lang(nl) %{_datadir}/squid/errors/Dutch | |
633 | %{_datadir}/squid/errors/English | |
634 | %lang(et) %{_datadir}/squid/errors/Estonian | |
635 | %lang(fi) %{_datadir}/squid/errors/Finnish | |
636 | %lang(fr) %{_datadir}/squid/errors/French | |
637 | %lang(de) %{_datadir}/squid/errors/German | |
2011b5a0 | 638 | %lang(el) %{_datadir}/squid/errors/Greek |
2e235151 | 639 | %lang(he) %{_datadir}/squid/errors/Hebrew |
daed1adf JR |
640 | %lang(hu) %{_datadir}/squid/errors/Hungarian |
641 | %lang(it) %{_datadir}/squid/errors/Italian | |
642 | %lang(ja) %{_datadir}/squid/errors/Japanese | |
643 | %lang(ko) %{_datadir}/squid/errors/Korean | |
acd983a2 | 644 | %lang(lt) %{_datadir}/squid/errors/Lithuanian |
daed1adf JR |
645 | %lang(pl) %{_datadir}/squid/errors/Polish |
646 | %lang(pt) %{_datadir}/squid/errors/Portuguese | |
647 | %lang(ro) %{_datadir}/squid/errors/Romanian | |
648 | %lang(ru) %{_datadir}/squid/errors/Russian-1251 | |
649 | %lang(ru) %{_datadir}/squid/errors/Russian-koi8-r | |
b56dd683 | 650 | %lang(zh_CN) %{_datadir}/squid/errors/Simplify_Chinese |
daed1adf JR |
651 | %lang(sk) %{_datadir}/squid/errors/Slovak |
652 | %lang(es) %{_datadir}/squid/errors/Spanish | |
2e235151 | 653 | %lang(sr) %{_datadir}/squid/errors/Serbian |
daed1adf | 654 | %lang(sv) %{_datadir}/squid/errors/Swedish |
b56dd683 | 655 | %lang(zh_TW) %{_datadir}/squid/errors/Traditional_Chinese |
daed1adf | 656 | %lang(tr) %{_datadir}/squid/errors/Turkish |
078f5547 | 657 | %lang(uk) %{_datadir}/squid/errors/Ukrainian* |
d765f971 | 658 | %dir %{_libexecdir} |
29ca562c | 659 | |
e62e100a | 660 | %attr(770,root,squid) %dir /var/log/archive/squid |
3e5c79df JK |
661 | %attr(770,root,squid) %dir /var/log/squid |
662 | %attr(660,root,squid) %ghost /var/log/squid/* | |
e1baf3c8 | 663 | |
3e5c79df | 664 | %attr(770,root,squid) %dir /var/cache/squid |
1c1894b4 ER |
665 | %ghost /var/cache/squid/netdb_state |
666 | %ghost /var/cache/squid/swap.state | |
667 | %ghost /var/cache/squid/swap.state.clean | |
668 | %ghost /var/cache/squid/swap.state.last-clean | |
68c5bbf6 | 669 | %{_mandir}/man8/squid.8* |
29ca562c | 670 | |
671 | %files cachemgr | |
36fddb2a | 672 | %defattr(644,root,root,755) |
2011b5a0 | 673 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/cachemgr.conf |
e986fc96 | 674 | %attr(755,root,root) %{_cgidir}/* |
2011b5a0 | 675 | %{_mandir}/man8/cachemgr.cgi.8* |
ce1cc056 | 676 | |
677 | %files ldap_auth | |
678 | %defattr(644,root,root,755) | |
84c99453 JR |
679 | %doc helpers/basic_auth/LDAP/README |
680 | %attr(755,root,root) %{_libexecdir}/%{name}_ldap_auth | |
0a79ee40 | 681 | %{_mandir}/man8/%{name}_ldap_auth.* |
ce1cc056 | 682 | |
683 | %files pam_auth | |
684 | %defattr(644,root,root,755) | |
84c99453 | 685 | %doc helpers/basic_auth/PAM/pam_auth.c |
3c0645bd | 686 | %config(noreplace) /etc/pam.d/squid |
687 | %config(noreplace) /etc/security/blacklist.squid | |
84c99453 | 688 | %attr(755,root,root) %{_libexecdir}/pam_auth |
f0a5f35f | 689 | %{_mandir}/man8/pam_auth.8* |
ce1cc056 | 690 | |
691 | %files smb_auth | |
692 | %defattr(644,root,root,755) | |
68b6c6ad | 693 | %doc helpers/basic_auth/SMB/{README,ChangeLog,smb_auth.sh} |
84c99453 | 694 | %doc helpers/basic_auth/multi-domain-NTLM/* |
24c96395 | 695 | %attr(755,root,root) %{_libexecdir}/smb_auth* |
7140e072 PG |
696 | |
697 | %files msnt_auth | |
698 | %defattr(644,root,root,755) | |
84c99453 JR |
699 | %doc helpers/basic_auth/MSNT/README* |
700 | %attr(755,root,root) %{_libexecdir}/msnt_auth | |
b2aa8620 | 701 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf |
7140e072 PG |
702 | |
703 | %files yp_auth | |
704 | %defattr(644,root,root,755) | |
84c99453 JR |
705 | %attr(755,root,root) %{_libexecdir}/yp_auth |
706 | ||
707 | %files ncsa_auth | |
708 | %defattr(644,root,root,755) | |
709 | %attr(755,root,root) %{_libexecdir}/ncsa_auth | |
39607b78 | 710 | %{_mandir}/man8/ncsa_auth.8* |
84c99453 JR |
711 | |
712 | %files sasl_auth | |
713 | %defattr(644,root,root,755) | |
714 | %doc helpers/basic_auth/SASL/{README,squid_sasl*} | |
715 | %attr(755,root,root) %{_libexecdir}/sasl_auth | |
716 | ||
84c99453 JR |
717 | %files getpwname_auth |
718 | %defattr(644,root,root,755) | |
719 | %attr(755,root,root) %{_libexecdir}/getpwname_auth | |
720 | ||
721 | %files passwd_auth | |
722 | %defattr(644,root,root,755) | |
723 | %attr(755,root,root) %{_libexecdir}/digest_pw_auth | |
724 | ||
725 | %files ntlm_auth | |
726 | %defattr(644,root,root,755) | |
727 | %doc helpers/ntlm_auth/no_check/{README*,no_check.pl} | |
84c99453 JR |
728 | %attr(755,root,root) %{_libexecdir}/ntlm_auth |
729 | ||
39607b78 | 730 | %files digest_ldap_auth |
731 | %defattr(644,root,root,755) | |
732 | %attr(755,root,root) %{_libexecdir}/digest_ldap_auth | |
733 | ||
84c99453 JR |
734 | %files ip_acl |
735 | %defattr(644,root,root,755) | |
736 | %doc helpers/external_acl/ip_user/{README,example*} | |
737 | %attr(755,root,root) %{_libexecdir}/ip_user_check | |
738 | ||
739 | %files ldap_acl | |
740 | %defattr(644,root,root,755) | |
741 | %attr(755,root,root) %{_libexecdir}/squid_ldap_group | |
0a79ee40 | 742 | %{_mandir}/man8/%{name}_ldap_group.* |
84c99453 JR |
743 | |
744 | %files unix_acl | |
745 | %defattr(644,root,root,755) | |
746 | %doc helpers/external_acl/unix_group/README | |
24c96395 | 747 | %attr(755,root,root) %{_libexecdir}/squid_unix_group |
0a79ee40 | 748 | %{_mandir}/man8/%{name}_unix_group.* |
84c99453 JR |
749 | |
750 | %files wbinfo_acl | |
751 | %defattr(644,root,root,755) | |
752 | %attr(755,root,root) %{_libexecdir}/wbinfo_group.pl | |
753 | ||
39607b78 | 754 | %files session_acl |
84c99453 | 755 | %defattr(644,root,root,755) |
39607b78 | 756 | %attr(755,root,root) %{_libexecdir}/squid_session |
757 | %{_mandir}/man8/%{name}_session.8* | |
4c0ef65a ER |
758 | |
759 | %files scripts | |
760 | %defattr(644,root,root,755) | |
761 | %attr(755,root,root) %{_libexecdir}/*.pl | |
762 | %attr(755,root,root) %{_libexecdir}/contrib |