2 # - REVIEW patches and configuration
4 # For this to work correctly, you will need to patch your linux
5 # kernel with the TOS preserving ZPH patch.
6 # The kernel patch can be downloaded from http://zph.bratcheda.org
9 %bcond_with combined_log # enables apache-like combined log format
11 Summary: SQUID Internet Object Cache
12 Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher
13 Summary(pl.UTF-8): Uniwersalny serwer proxy-cache
14 Summary(pt_BR.UTF-8): Cache Squid de objetos Internet
15 Summary(ru.UTF-8): Squid - кэш объектов Internet
16 Summary(uk.UTF-8): Squid - кеш об'єктів Internet
17 Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器
23 Group: Networking/Daemons
24 Source0: http://www.squid-cache.org/Versions/v3/3.2/%{name}-%{version}.tar.bz2
25 # Source0-md5: b26171dfd397defd9ee113d555691b86
27 Source2: %{name}.sysconfig
28 Source3: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip
29 # Source3-md5: 4f3b6dab1de9cbb847df89d8b417378a
30 Source4: %{name}.conf.patch
31 Source5: %{name}.logrotate
33 Source7: %{name}-cachemgr-apache.conf
34 Source8: %{name}.tmpfiles
35 Patch0: %{name}-fhs.patch
36 Patch1: %{name}-location.patch
37 Patch2: %{name}-crash-on-ENOSPC.patch
38 Patch4: %{name}-2.5.STABLE4-apache-like-combined-log.patch
39 Patch5: %{name}-ppc-m32.patch
40 Patch6: %{name}-cachemgr-webapp.patch
41 URL: http://www.squid-cache.org/
42 BuildRequires: autoconf
43 BuildRequires: automake
44 BuildRequires: cppunit-devel
45 BuildRequires: cyrus-sasl-devel >= 2.1.0
46 BuildRequires: db-devel
47 BuildRequires: expat-devel
48 BuildRequires: heimdal-devel
49 BuildRequires: libcap-devel >= 1:2.09
50 BuildRequires: libecap-devel >= 0.2.0
51 BuildRequires: libltdl-devel
52 BuildRequires: libnetfilter_conntrack-devel
53 BuildRequires: libstdc++-devel
54 BuildRequires: libtool
55 BuildRequires: libxml2-devel
56 BuildRequires: openldap-devel >= 2.3.0
57 BuildRequires: openssl-devel >= 0.9.7d
58 BuildRequires: pam-devel
59 BuildRequires: perl-base
60 BuildRequires: rpmbuild(macros) >= 1.268
61 BuildRequires: sed >= 4.0
63 Requires(post): /bin/hostname
64 Requires(post): fileutils
65 Requires(post): findutils
67 Requires(post,preun): /sbin/chkconfig
68 Requires(postun): /usr/sbin/groupdel
69 Requires(postun): /usr/sbin/userdel
70 Requires(pre): /usr/bin/getgid
71 Requires(pre): /usr/lib/rpm/user_group.sh
72 Requires(pre): /usr/sbin/groupadd
73 Requires(pre): /usr/sbin/useradd
74 Requires(pre,triggerpostun): /bin/id
75 Requires(pre,triggerpostun): /usr/sbin/usermod
76 Requires: rc-scripts >= 0.2.0
77 Requires: setup >= 2.4.6
78 Provides: group(squid)
79 # epoll enabled by default:
80 Requires: uname(release) >= 2.6
81 # TPROXYv4 (v2 disabled b/c it breaks v4)
82 #Suggests: uname(release) >= 2.6.28.3
84 Conflicts: logrotate < 3.8.0
85 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
87 %define _webapps /etc/webapps
88 %define _webapp cachemgr
89 %define _libexecdir %{_libdir}/%{name}
90 %define _sysconfdir /etc/%{name}
91 %define _cgidir %{_prefix}/lib/cgi-bin/%{_webapp}
94 Squid is a high-performance proxy caching server for web clients,
95 supporting FTP, gopher, and HTTP data objects. Unlike traditional
96 caching software, Squid handles all requests in a single,
97 non-blocking, I/O-driven process. Squid keeps meta data and especially
98 hot objects cached in RAM, caches DNS lookups, supports non-blocking
99 DNS lookups, and implements negative caching of failed requests. If
100 you are tight on memory, check out the NOVM version of this package.
101 Squid supports SSL, extensive access controls, and full request
102 logging. By using the lightweight Internet Cache Protocol, Squid
103 caches can be arranged in a hierarchy or mesh for additional bandwidth
104 savings. Squid consists of a main server program squid, a Domain Name
105 System lookup program dnsserver, a program for retrieving FTP data
106 ftpget, and some management and client tools. When squid starts up, it
107 spawns a configurable number of dnsserver processes, each of which can
108 perform a single, blocking Domain Name System (DNS) lookup. This
109 reduces the amount of time the cache waits for DNS lookups. Squid is
110 derived from the ARPA-funded Harvest project.
112 %description -l es.UTF-8
113 Squid es un servidor proxy con caché de alto desempeño para clientes
114 web, soportando FTP, gopher y HTTP. Diferentemente de softwares
115 tradicionales de caché squid manipula todas las requisiciones en un
116 único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y
117 objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché
118 de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa
119 un caché negativo de requisiciones que fallen. Si tiene poca memoria
120 da un vistazo en la versión NOVM de este paquete. También soporta SSL,
121 controles extensivos de acceso y registro (log) completo de las
122 requisiciones. Usando el ligero Protocolo de Caches Internet (ICP)
123 puede ser usado en una jerarquía de servidores para mayor ahorro de la
124 banda de comunicación. Está compuesto del programa squid (servidor
125 principal), del programa dnsserver (para resolución DNS), del programa
126 ftpget (para transmisiones ftp) y otras herramientas clientes y para
127 administración. Cuando squid se inicia, dispara un número configurable
128 de procesos dnsserver, cada uno pudiendo ejecutar solamente una
129 resolución DNS con poder de bloquear. Esto reduce el tiempo que el
130 caché espera por resoluciones DNS. Fue derivado del proyecto Harvest,
131 financiado por la ARPA.
133 %description -l pl.UTF-8
134 Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW,
135 klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w
136 pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla
137 SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych
138 danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer
139 squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet
140 squid obejmuje: główny program serwera squid, program dostarczający
141 informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz
142 pomocnicze programy do zarządzania. Squid wywodzi się ze
143 sponsorowanego przez ARPA projektu Harvest.
145 %description -l pt_BR.UTF-8
146 O Squid é um servidor proxy com cache de alta performance para
147 clientes web, suportando FTP, gopher e HTTP. Diferentemente de
148 softwares tradicionais de cache o squid manipula todas as requisições
149 em um único processo sem bloqueios, direcionado a E/S.
151 Mantém meta dados e objetos freqüentemente pedidos num cache em
152 memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem
153 bloqueio e implementa um cache negativo de requisições que falharem.
154 Se você tem pouca memória dê uma olhada na versão NOVM deste pacote.
156 Também suporta SSL, controles extensivos de acesso e registro (log)
157 completo das requisições. Usando o leve Protocolo de Caches Internet
158 (ICP) ele pode ser usado em uma hierarquia de servidores para maior
159 economia de banda de comunicação.
161 Ele consiste do programa squid (servidor principal), do programa
162 dnsserver (para resolução DNS), do programa ftpget (para transmissões
163 ftp) e outras ferramentas clientes e para gerenciamento. Quando o
164 squid é inicializado ele dispara um número configurável de processos
165 dnsserver, cada um podendo executar somente uma resolução DNS
166 bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS.
168 Foi derivado do projeto Harvest, financiado pela ARPA.
170 %description -l ru.UTF-8
171 Squid - это высокопроизводительный кэширующий прокси-сервер для
172 клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В
173 отличие от традиционных кэширующих программ, Squid обрабатывает все
174 запросы при помощи одного неблокирующегося, управляемого
175 вводом-выводом процесса.
177 Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб
180 %description -l uk.UTF-8
181 Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує
182 об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних
183 кешуючих програм, Squid обробляє всі запити за допомогою одного
184 неблокуючого, керованого вводом-виводом процесу.
186 Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб
190 Summary: CGI script for Squid management
191 Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW
192 Group: Applications/WWW
193 # does not require squid locally
194 Requires: group(http)
197 Requires: webserver(access)
198 Requires: webserver(alias)
199 Requires: webserver(cgi)
201 %description cachemgr
202 Cachemgr.cgi is a CGI script that allows administrator to check
203 various informations about Squid via WWW.
205 %description cachemgr -l pl.UTF-8
206 Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi
207 zapoznać się z informacjami o pracy Squida poprzez WWW.
209 %package kerberos_auth
210 Summary: Authentication via the Negotiate RFC 4559 for proxies
211 Summary(pl.UTF-8): Uwierzytelnianie przez negocjację RFC 4559 dla serwerów proxy
212 Group: Networking/Admin
213 Obsoletes: squid-kerb_auth < %{version}-%{release}
214 Provides: squid-kerb_auth = %{version}-%{release}
216 %description kerberos_auth
217 This squid helper is a reference implementation that supports
218 authentication via the Negotiate RFC 4559 for proxies. It decodes RFC
219 2478 SPNEGO GSS-API tokens from IE7 either through helper functions or
220 via SPNEGO supporting Kerberos libraries and RFC 1964 Kerberos tokens
221 from Firefox on Linux.
223 %description kerberos_auth -l pl.UTF-8
224 Pakiet ten jest implementacją uwierzytelniania przez negocjacji RFC
225 4559 dla serwerów proxy. Dekoduje żetony SPNEGO GSS-API RFC 2478 z IE7
226 poprzez funkcje pomocnicze lub przez biblioteki Kerberos wspierające
227 SPNEGO i żetony Kerberos RFC 1964 z Firefoksa w Linuksie.
230 Summary: LDAP authentication helper for Squid
231 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
232 Group: Networking/Admin
234 %description ldap_auth
235 This Squid helper allows authentication against LDAP directories using
236 the "simple authentication" (plain-text).
238 %description ldap_auth -l pl.UTF-8
239 Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego
240 uwierzytelniania (otwartym tekstem).
243 Summary: PAM authentication helper for Squid
244 Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida
245 Group: Networking/Admin
246 Requires: pam >= 0.77.3
248 %description pam_auth
249 This program authenticates users against a PAM configured
250 authentication service "squid". This allows you to authenticate Squid
251 users to any authentication source for which you have a PAM module.
253 %description pam_auth -l pl.UTF-8
254 Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym
255 źródle posiadającym moduł PAM.
258 Summary: SMB authentication helper for Squid
259 Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida
260 Group: Networking/Admin
262 %description smb_auth
263 This is a proxy authentication module. With smb_auth you can
264 authenticate proxy users against an SMB server like Windows NT or
267 %description smb_auth -l pl.UTF-8
268 To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można
269 uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy
273 Summary: MSNT domain authentication helper for Squid
274 Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida
275 Group: Networking/Admin
277 %description msnt_auth
278 This is an authentication module for the Squid proxy server to
279 authenticate users on an NT domain.
281 %description msnt_auth -l pl.UTF-8
282 Jest to moduł uwierzytelniania proxy, który pozwala na
283 uwierzytelnianie użytkowników proxy w domenie NT.
286 Summary: NIS authentication helper for Squid
287 Summary(pl.UTF-8): Obsługa uwierzytelniania NIS dla squida
288 Group: Networking/Admin
289 Obsoletes: squid-yp_auth < %{version}-%{release}
290 Provides: squid-yp_auth = %{version}-%{release}
292 %description nis_auth
293 This is an authentication module for the Squid proxy server to
294 authenticate users on NIS.
296 %description nis_auth -l pl.UTF-8
297 Jest to moduł uwierzytelniania proxy, który pozwala na
298 uwierzytelnianie użytkowników proxy poprzez NIS.
301 Summary: NCSA httpd style authentication helper for Squid
302 Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida
303 Group: Networking/Admin
305 %description ncsa_auth
306 This module uses a NCSA httpd style password file for authentication.
308 %description ncsa_auth -l pl.UTF-8
309 Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd.
312 Summary: SASL authentication helper for Squid
313 Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida
314 Group: Networking/Admin
316 %description sasl_auth
317 This is an authentication module for the Squid proxy server to
318 authenticate users via SASL.
320 %description sasl_auth -l pl.UTF-8
321 Jest to moduł uwierzytelniania proxy, który pozwala na
322 uwierzytelnianie użytkowników proxy poprzez SASL.
324 %package getpwname_auth
325 Summary: getpwname authentication helper for Squid
326 Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida
327 Group: Networking/Admin
329 %description getpwname_auth
330 This is an authentication module for the Squid proxy server to
331 authenticate users using getpwname.
333 %description getpwname_auth -l pl.UTF-8
334 Jest to moduł uwierzytelniania proxy, który pozwala na
335 uwierzytelnianie użytkowników proxy poprzez getpwname.
338 Summary: passwd authentication helper for Squid
339 Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida
340 Group: Networking/Admin
342 %description passwd_auth
343 This is an authentication module for the Squid proxy server to
344 authenticate users with separate passwd file.
346 %description passwd_auth -l pl.UTF-8
347 Jest to moduł uwierzytelniania proxy, który pozwala na
348 uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd.
351 Summary: NTLM authentication helper for Squid
352 Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida
353 Group: Networking/Admin
355 %description ntlm_auth
356 This is an authentication module for the Squid proxy server to
357 authenticate users on NTLM.
359 %description ntlm_auth -l pl.UTF-8
360 Jest to moduł uwierzytelniania proxy, który pozwala na
361 uwierzytelnianie użytkowników proxy poprzez NTLM.
364 Summary: RADIUS authentication helper for Squid
365 Summary(pl.UTF-8): Obsługa uwierzytelniania RADIUS dla squida
366 Group: Networking/Admin
368 %description radius_auth
369 This helper allows Squid to connect to a RADIUS server to validate the
370 user name and password of Basic HTTP authentication.
372 %description radius_auth -l pl.UTF-8
373 Program ten pozwala na uwierzytelnianie użytkowników squida przez
377 Summary: Database authentication helper for Squid
378 Summary(pl.UTF-8): Obsługa uwierzytelniania przez bazę danych dla squida
379 Group: Networking/Admin
382 This is an authentication module for the Squid proxy server to
383 authenticate users againsta a database.
385 %description db_auth -l pl.UTF-8
386 Jest to moduł uwierzytelniania proxy, który pozwala na
387 uwierzytelnianie użytkowników proxy poprzez bazę danych.
390 Summary: POP3 authentication helper for Squid
391 Summary(pl.UTF-8): Obsługa uwierzytelniania POP3 dla squida
392 Group: Networking/Admin
394 %description pop3_auth
395 This is an authentication module for the Squid proxy server to
396 authenticate users on POP3.
398 %description pop3_auth -l pl.UTF-8
399 Jest to moduł uwierzytelniania proxy, który pozwala na
400 uwierzytelnianie użytkowników proxy poprzez POP3.
402 %package negotiate_wrapper_auth
403 Summary: Kerberos authentication helper for Squid
404 Summary(pl.UTF-8): Obsługa uwierzytelniania Kerberos dla squida
405 Group: Networking/Admin
406 Requires: %{name}-ntlm_auth
407 Requires: %{name}-kerberos_auth
409 %description negotiate_wrapper_auth
410 This is an authentication module for the Squid proxy server to
411 authenticate users on Kerberos.
413 %description negotiate_wrapper_auth -l pl.UTF-8
414 Jest to moduł uwierzytelniania proxy, który pozwala na
415 uwierzytelnianie użytkowników proxy poprzez Kerberosa.
417 %package digest_edirectory_auth
418 Summary: eDirectory authentication helper for Squid
419 Summary(pl.UTF-8): Obsługa uwierzytelniania eDirectory dla squida
420 Group: Networking/Admin
422 %description digest_edirectory_auth
423 This is an authentication module for the Squid proxy server to
424 authenticate users on eDirectory.
426 %description digest_edirectory_auth -l pl.UTF-8
427 Jest to moduł uwierzytelniania proxy, który pozwala na
428 uwierzytelnianie użytkowników proxy poprzez eDirectory.
430 %package digest_ldap_auth
431 Summary: LDAP authentication helper for Squid
432 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
433 Group: Networking/Admin
435 %description digest_ldap_auth
436 This is an authentication module for the Squid proxy server to
437 authenticate users on LDAP.
439 %description digest_ldap_auth -l pl.UTF-8
440 Jest to moduł uwierzytelniania proxy, który pozwala na
441 uwierzytelnianie użytkowników proxy poprzez LDAP.
444 Summary: IP external ACL helper for Squid
445 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida
446 Group: Networking/Admin
447 Requires: %{name} = %{epoch}:%{version}-%{release}
450 This is an external ACL module for the Squid proxy server to limit
451 access for users based on IP address.
453 %description ip_acl -l pl.UTF-8
454 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
455 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP.
458 Summary: LDAP group external ACL helper for Squid
459 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida
460 Group: Networking/Admin
461 Requires: %{name} = %{epoch}:%{version}-%{release}
463 %description ldap_acl
464 This is an external ACL module for the Squid proxy server to limit
465 access for users based on LDAP group membership.
467 %description ldap_acl -l pl.UTF-8
468 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
469 ograniczenie dostępu użytkowników proxy na podstawie ich
470 przynależności do grup LDAP.
473 Summary: UNIX group external ACL helper for Squid
474 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida
475 Group: Networking/Admin
476 Requires: %{name} = %{epoch}:%{version}-%{release}
478 %description unix_acl
479 This is an external ACL module for the Squid proxy server to limit
480 access for users based on UNIX group membership.
482 %description unix_acl -l pl.UTF-8
483 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
484 ograniczenie dostępu użytkowników proxy na podstawie ich
485 przynależności do grup UNIX.
488 Summary: NT domain group external ACL helper for Squid
489 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida
490 Group: Networking/Admin
491 Requires: %{name} = %{epoch}:%{version}-%{release}
493 %description wbinfo_acl
494 This is an external ACL module for the Squid proxy server to limit
495 access for users based on NT domain group membership using wbinfo.
497 %description wbinfo_acl -l pl.UTF-8
498 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
499 ograniczenie dostępu użytkowników proxy na podstawie ich
500 przynależności do grup w domenie NT przy użyciu wbinfo.
503 Summary: Squid session tracking external ACL group helper
504 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez śledzenie sesji
505 Group: Networking/Admin
506 Requires: %{name} = %{epoch}:%{version}-%{release}
508 %description session_acl
509 This helper maintains a concept of sessions by monitoring requests and
510 timing out sessions if no requests have been seen for the idle timeout
513 %description session_acl -l pl.UTF-8
514 Moduł oparty na koncepcji sesji, śledzący zapytania i wygaszający
515 sesje jeśli w określonym czasie nie widziano w ich obrębie kolejnych
518 %package edirectory_userip_acl
519 Summary: Squid eDirectory IP Lookup Helper
520 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez eDirectory
521 Group: Networking/Admin
522 Requires: %{name} = %{epoch}:%{version}-%{release}
524 %description edirectory_userip_acl
525 This is an external ACL module for the Squid proxy server to limit
526 access for users based on IP address lookup in eDirectory.
528 %description edirectory_userip_acl -l pl.UTF-8
529 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
530 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP
531 popranego z eDirectory.
533 %package kerberos_ldap_group_acl
534 Summary: Squid LDAP external acl group helper for Kerberos or NTLM credentials
535 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP/Kerberos/NTLM dla squida
536 Group: Networking/Admin
537 Requires: %{name} = %{epoch}:%{version}-%{release}
539 %description kerberos_ldap_group_acl
540 This is an external ACL module for the Squid proxy server to limit
541 access for users based on LDAP Kerberos or NTLM credentials.
543 %description kerberos_ldap_group_acl -l pl.UTF-8
544 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
545 ograniczenie dostępu użytkowników proxy na podstawie ich
546 uprawnień Kerberosowych lub NTLM-owych w LDAP.
549 Summary: Perl scripts for Squid
550 Summary(pl.UTF-8): Skrypty perlowe dla Squida
551 Group: Networking/Admin
552 Requires: %{name} = %{epoch}:%{version}-%{release}
555 This package contains Perl scripts and contributed programs for Squid.
557 %description scripts -l pl.UTF-8
558 Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida.
565 %{?with_combined_log:%patch4 -p1}
578 --disable-strict-error-checking \
579 --with-default-user=squid \
580 --with-logdir=/var/log/squid \
581 --with-swapdir=/var/cache/squid \
582 --with-pidfile=/var/run/squid.pid \
583 --datadir=%{_datadir}/squid \
586 --enable-basic-auth-helpers \
587 --enable-ntlm-auth-helpers \
588 --enable-negotiate-auth-helpers \
589 --enable-digest-auth-helpers \
590 --enable-external-acl-helpers \
591 --enable-url-rewrite-helpers \
592 --enable-ntlm-fail-open \
593 --enable-cache-digests \
594 --enable-coss-aio-ops \
595 --enable-delay-pools \
596 --enable-err-language=English \
598 --enable-follow-x-forwarded-for \
599 --enable-forward-log \
600 --enable-forw-via-db \
604 --enable-icap-client \
607 --enable-kill-parent-hack \
608 --enable-large-cache-files \
609 --enable-linux-netfilter \
610 --disable-linux-tproxy \
611 --enable-multicast-miss \
612 --enable-referer-log \
613 --enable-removal-policies="heap,lru" \
614 --enable-storeio="aufs,diskd,rock,ufs" \
618 --enable-useragent-log \
619 --enable-x-accelerator-vary \
620 --localstatedir=/var \
621 --sysconfdir=%{_sysconfdir} \
622 --with-auth-on-acceleration \
631 rm -rf $RPM_BUILD_ROOT
632 install -d $RPM_BUILD_ROOT{%{_cgidir},%{_webapps}/%{_webapp}} \
633 $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \
634 $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \
635 $RPM_BUILD_ROOT%{_mandir}/man8 \
636 $RPM_BUILD_ROOT%{_datadir}/squid \
637 $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid \
638 $RPM_BUILD_ROOT%{systemdtmpfilesdir}
641 DESTDIR=$RPM_BUILD_ROOT
643 %{__cp} -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib
644 install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir}
646 install %{SOURCE6} $RPM_BUILD_ROOT/etc/pam.d/squid
647 touch $RPM_BUILD_ROOT/etc/security/blacklist.squid
649 install %{SOURCE8} $RPM_BUILD_ROOT%{systemdtmpfilesdir}/squid.conf
651 %{__mv} -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir}
652 %{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/apache.conf
653 %{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/httpd.conf
654 %{__rm} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/cachemgr.conf.default
656 cd $RPM_BUILD_ROOT/etc/squid
657 %{__patch} -p0 < %{SOURCE4}
658 %{__rm} *.default squid.conf.documented
661 install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid
662 install %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/squid
663 install %{SOURCE5} $RPM_BUILD_ROOT/etc/logrotate.d/squid
665 touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log
667 %{__rm} $RPM_BUILD_ROOT%{_datadir}/squid/errors/{COPYRIGHT,TRANSLATORS}
669 # cp, to have re-entrant install
672 # We don't want Makefiles as docs...
673 %{__rm} docs/Makefile*
675 :> $RPM_BUILD_ROOT/var/cache/squid/netdb_state
676 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state
677 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean
678 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean
681 rm -rf $RPM_BUILD_ROOT
684 %groupadd -g 91 squid
685 %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid
686 %addusertogroup stats squid
688 [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || :
691 if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then
692 hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost'
693 echo visible_hostname $hostname >> /etc/squid/squid.conf
696 /sbin/chkconfig --add squid
697 if [ "$1" = "1" ]; then
698 /sbin/service squid init >&2
700 %service squid restart
703 if [ "$1" = "0" ]; then
704 /sbin/chkconfig --del squid
707 # nuke squid cache if uninstalling
708 rm -rf /var/cache/squid/??
712 if [ "$1" = "0" ]; then
717 %triggerpostun -- squid < 7:2.5.STABLE7-5
718 %addusertogroup stats squid
720 %triggerin cachemgr -- apache1 < 1.3.37-3, apache1-base
721 %webapp_register apache %{_webapp}
723 %triggerun cachemgr -- apache1 < 1.3.37-3, apache1-base
724 %webapp_unregister apache %{_webapp}
726 %triggerin cachemgr -- apache < 2.2.0, apache-base
727 %webapp_register httpd %{_webapp}
729 %triggerun cachemgr -- apache < 2.2.0, apache-base
730 %webapp_unregister httpd %{_webapp}
732 %triggerpostun -- cachemgr < 7:3.0.STABLE10-0.2
733 if [ -f %{_sysconfdir}/cachemgr.conf.rpmsave ]; then
734 cp -f %{_webapps}/%{_webapp}/cachemgr.conf{,.rpmsave}
735 mv -f %{_sysconfdir}/cachemgr.conf.rpmsave %{_webapps}/%{_webapp}/cachemgr.conf
739 %defattr(644,root,root,755)
740 %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART
741 %doc RELEASENOTES.html SPONSORS docs/* src/mib.txt book-full.html
742 %doc src/squid.conf.default src/squid.conf.documented src/mime.conf.default
743 %doc errors/TRANSLATORS
744 %attr(755,root,root) %{_bindir}/purge
745 %attr(755,root,root) %{_bindir}/squidclient
748 %attr(755,root,root) %{_libexecdir}/diskd
749 # YES, it has to be suid root, it sends ICMP packets.
750 %attr(4754,root,squid) %{_libexecdir}/pinger
751 %attr(755,root,root) %{_libexecdir}/unlinkd
752 %attr(755,root,root) %{_libexecdir}/ntlm_fake_auth
753 %attr(755,root,root) %{_libexecdir}/basic_fake_auth
754 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite
755 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite.sh
756 %attr(755,root,root) %{_libexecdir}/log_file_daemon
757 %attr(755,root,root) %{_sbindir}/squid
759 %attr(754,root,root) /etc/rc.d/init.d/squid
760 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid
761 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid
764 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf
765 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf
766 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/errorpage.css
768 %dir %{_datadir}/squid
769 %dir %{_datadir}/squid/errors
770 %{_datadir}/squid/icons
771 %{_datadir}/squid/mib.txt
772 %{_datadir}/squid/errors/templates
773 %lang(af) %{_datadir}/squid/errors/af
774 %lang(ar) %{_datadir}/squid/errors/ar
775 %lang(ar) %{_datadir}/squid/errors/ar-*
776 %lang(az) %{_datadir}/squid/errors/az
777 %lang(az) %{_datadir}/squid/errors/az-*
778 %lang(bg) %{_datadir}/squid/errors/bg
779 %lang(bg) %{_datadir}/squid/errors/bg-*
780 %lang(ca) %{_datadir}/squid/errors/ca
781 %lang(cs) %{_datadir}/squid/errors/cs
782 %lang(cs) %{_datadir}/squid/errors/cs-*
783 %lang(da) %{_datadir}/squid/errors/da
784 %lang(da) %{_datadir}/squid/errors/da-*
785 %lang(de) %{_datadir}/squid/errors/de
786 %lang(de) %{_datadir}/squid/errors/de-*
787 %lang(el) %{_datadir}/squid/errors/el
788 %lang(el) %{_datadir}/squid/errors/el-*
789 %{_datadir}/squid/errors/en
790 %{_datadir}/squid/errors/en-*
791 %lang(es) %{_datadir}/squid/errors/es
792 %lang(es) %{_datadir}/squid/errors/es-*
793 %lang(et) %{_datadir}/squid/errors/et
794 %lang(et) %{_datadir}/squid/errors/et-*
795 %lang(fa) %{_datadir}/squid/errors/fa
796 %lang(fa) %{_datadir}/squid/errors/fa-*
797 %lang(fi) %{_datadir}/squid/errors/fi
798 %lang(fi) %{_datadir}/squid/errors/fi-*
799 %lang(fr) %{_datadir}/squid/errors/fr
800 %lang(fr) %{_datadir}/squid/errors/fr-*
801 %lang(he) %{_datadir}/squid/errors/he
802 %lang(he) %{_datadir}/squid/errors/he-*
803 %lang(hu) %{_datadir}/squid/errors/hu
804 %lang(hu) %{_datadir}/squid/errors/hu-*
805 %lang(hy) %{_datadir}/squid/errors/hy
806 %lang(hy) %{_datadir}/squid/errors/hy-*
807 %lang(id) %{_datadir}/squid/errors/id
808 %lang(id) %{_datadir}/squid/errors/id-*
809 %lang(it) %{_datadir}/squid/errors/it
810 %lang(it) %{_datadir}/squid/errors/it-*
811 %lang(ja) %{_datadir}/squid/errors/ja
812 %lang(ja) %{_datadir}/squid/errors/ja-*
813 %lang(ko) %{_datadir}/squid/errors/ko
814 %lang(ko) %{_datadir}/squid/errors/ko-*
815 %lang(lt) %{_datadir}/squid/errors/lt
816 %lang(lt) %{_datadir}/squid/errors/lt-*
817 %lang(lv) %{_datadir}/squid/errors/lv
818 %lang(lv) %{_datadir}/squid/errors/lv-*
819 %lang(ms) %{_datadir}/squid/errors/ms
820 %lang(ms) %{_datadir}/squid/errors/ms-*
821 %lang(nl) %{_datadir}/squid/errors/nl
822 %lang(nl) %{_datadir}/squid/errors/nl-*
823 %lang(oc) %{_datadir}/squid/errors/oc
824 %lang(pl) %{_datadir}/squid/errors/pl
825 %lang(pl) %{_datadir}/squid/errors/pl-*
826 %lang(pt) %{_datadir}/squid/errors/pt
827 %lang(pt) %{_datadir}/squid/errors/pt-pt
828 %lang(pt_BR) %{_datadir}/squid/errors/pt-br
829 %lang(ro) %{_datadir}/squid/errors/ro
830 %lang(ro) %{_datadir}/squid/errors/ro-*
831 %lang(ru) %{_datadir}/squid/errors/ru
832 %lang(ru) %{_datadir}/squid/errors/ru-*
833 %lang(sk) %{_datadir}/squid/errors/sk
834 %lang(sk) %{_datadir}/squid/errors/sk-*
835 %lang(sk) %{_datadir}/squid/errors/sl
836 %lang(sk) %{_datadir}/squid/errors/sl-*
837 %lang(sr) %{_datadir}/squid/errors/sr
838 %lang(sr) %{_datadir}/squid/errors/sr-*
839 %lang(sv) %{_datadir}/squid/errors/sv
840 %lang(sv) %{_datadir}/squid/errors/sv-*
841 %lang(th) %{_datadir}/squid/errors/th
842 %lang(th) %{_datadir}/squid/errors/th-*
843 %lang(tr) %{_datadir}/squid/errors/tr
844 %lang(tr) %{_datadir}/squid/errors/tr-*
845 %lang(uk) %{_datadir}/squid/errors/uk
846 %lang(uk) %{_datadir}/squid/errors/uk-*
847 %lang(uz) %{_datadir}/squid/errors/uz
848 %lang(vi) %{_datadir}/squid/errors/vi
849 %lang(vi) %{_datadir}/squid/errors/vi-*
850 %lang(zh_CN) %{_datadir}/squid/errors/zh-cn
851 %lang(zh_CN) %{_datadir}/squid/errors/zh-sg
852 %lang(zh_CN) %{_datadir}/squid/errors/zh-tw
853 %lang(zh_TW) %{_datadir}/squid/errors/zh-hk
854 %lang(zh_TW) %{_datadir}/squid/errors/zh-mo
856 %{systemdtmpfilesdir}/squid.conf
857 %attr(770,root,squid) %dir /var/run/squid
859 %attr(770,root,squid) %dir /var/log/archive/squid
860 %attr(770,root,squid) %dir /var/log/squid
861 %attr(660,root,squid) %ghost /var/log/squid/*
863 %attr(770,root,squid) %dir /var/cache/squid
864 %ghost /var/cache/squid/netdb_state
865 %ghost /var/cache/squid/swap.state
866 %ghost /var/cache/squid/swap.state.clean
867 %ghost /var/cache/squid/swap.state.last-clean
868 %{_mandir}/man1/squidclient.1*
869 %{_mandir}/man8/squid.8*
872 %defattr(644,root,root,755)
873 %dir %attr(750,root,http) %{_webapps}/%{_webapp}
874 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/apache.conf
875 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/httpd.conf
876 %attr(640,root,http) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/cachemgr.conf
878 %attr(755,root,root) %{_cgidir}/cachemgr.cgi
879 %{_mandir}/man8/cachemgr.cgi.8*
882 %defattr(644,root,root,755)
883 %doc helpers/basic_auth/LDAP/README
884 %attr(755,root,root) %{_libexecdir}/basic_ldap_auth
885 %{_mandir}/man8/basic_ldap_auth.*
888 %defattr(644,root,root,755)
889 %config(noreplace) /etc/pam.d/squid
890 %config(noreplace) /etc/security/blacklist.squid
891 %attr(755,root,root) %{_libexecdir}/basic_pam_auth
892 %{_mandir}/man8/basic_pam_auth.8*
895 %defattr(644,root,root,755)
896 %doc helpers/basic_auth/SMB/ChangeLog
897 %attr(755,root,root) %{_libexecdir}/basic_smb_auth*
900 %defattr(644,root,root,755)
901 %doc helpers/basic_auth/MSNT/README*
902 %doc helpers/basic_auth/MSNT-multi-domain/README*
903 %attr(755,root,root) %{_libexecdir}/basic_msnt_auth
904 %attr(755,root,root) %{_libexecdir}/basic_msnt_multi_domain_auth
905 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf
908 %defattr(644,root,root,755)
909 %attr(755,root,root) %{_libexecdir}/basic_nis_auth
912 %defattr(644,root,root,755)
913 %attr(755,root,root) %{_libexecdir}/basic_ncsa_auth
914 %{_mandir}/man8/basic_ncsa_auth.8*
917 %defattr(644,root,root,755)
918 %doc helpers/basic_auth/SASL/basic_sasl_auth.{conf,pam}
919 %attr(755,root,root) %{_libexecdir}/basic_sasl_auth
920 %{_mandir}/man8/basic_sasl_auth.8*
922 %files getpwname_auth
923 %defattr(644,root,root,755)
924 %attr(755,root,root) %{_libexecdir}/basic_getpwnam_auth
925 %{_mandir}/man8/basic_getpwnam_auth.8*
928 %defattr(644,root,root,755)
929 %attr(755,root,root) %{_libexecdir}/digest_file_auth
930 %{_mandir}/man8/digest_file_auth.8*
933 %defattr(644,root,root,755)
934 %doc helpers/negotiate_auth/kerberos/README
935 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth
936 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth_test
937 %{_mandir}/man8/negotiate_kerberos_auth.8*
940 %defattr(644,root,root,755)
941 %attr(755,root,root) %{_libexecdir}/ntlm_smb_lm_auth
944 %defattr(644,root,root,755)
945 %doc helpers/basic_auth/RADIUS/README
946 %attr(755,root,root) %{_libexecdir}/basic_radius_auth
947 %{_mandir}/man8/basic_radius_auth.8*
949 %files digest_ldap_auth
950 %defattr(644,root,root,755)
951 %attr(755,root,root) %{_libexecdir}/digest_ldap_auth
954 %defattr(644,root,root,755)
955 %{_libexecdir}/basic_db_auth
956 %{_mandir}/man8/basic_db_auth.8*
959 %defattr(644,root,root,755)
960 %{_libexecdir}/basic_pop3_auth
962 %files digest_edirectory_auth
963 %defattr(644,root,root,755)
964 %{_libexecdir}/digest_edirectory_auth
966 %files negotiate_wrapper_auth
967 %defattr(644,root,root,755)
968 %{_libexecdir}/negotiate_wrapper_auth
971 %defattr(644,root,root,755)
972 %doc helpers/external_acl/file_userip/example*
973 %attr(755,root,root) %{_libexecdir}/ext_file_userip_acl
974 %{_mandir}/man8/ext_file_userip_acl.*
977 %defattr(644,root,root,755)
978 %attr(755,root,root) %{_libexecdir}/ext_ldap_group_acl
979 %{_mandir}/man8/ext_ldap_group_acl.*
982 %defattr(644,root,root,755)
983 %attr(755,root,root) %{_libexecdir}/ext_unix_group_acl
984 %{_mandir}/man8/ext_unix_group_acl.*
987 %defattr(644,root,root,755)
988 %attr(755,root,root) %{_libexecdir}/ext_wbinfo_group_acl
989 %{_mandir}/man8/ext_wbinfo_group_acl.8*
992 %defattr(644,root,root,755)
993 %attr(755,root,root) %{_libexecdir}/ext_session_acl
994 %{_mandir}/man8/ext_session_acl.8*
996 %files edirectory_userip_acl
997 %defattr(644,root,root,755)
998 %{_libexecdir}/ext_edirectory_userip_acl
999 %{_mandir}/man8/ext_edirectory_userip_acl.8*
1001 %files kerberos_ldap_group_acl
1002 %defattr(644,root,root,755)
1003 %{_libexecdir}/ext_kerberos_ldap_group_acl
1006 %defattr(644,root,root,755)
1007 %attr(755,root,root) %{_libexecdir}/contrib
1008 %attr(755,root,root) %{_libexecdir}/AnnounceCache.pl
1009 %attr(755,root,root) %{_libexecdir}/access-log-matrix.pl
1010 %attr(755,root,root) %{_libexecdir}/cache-compare.pl
1011 %attr(755,root,root) %{_libexecdir}/cachetrace.pl
1012 %attr(755,root,root) %{_libexecdir}/calc-must-ids.pl
1013 %attr(755,root,root) %{_libexecdir}/cert_tool
1014 %attr(755,root,root) %{_libexecdir}/check_cache.pl
1015 %attr(755,root,root) %{_libexecdir}/fileno-to-pathname.pl
1016 %attr(755,root,root) %{_libexecdir}/find-alive.pl
1017 %attr(755,root,root) %{_libexecdir}/flag_truncs.pl
1018 %attr(755,root,root) %{_libexecdir}/helper-mux.pl
1019 %attr(755,root,root) %{_libexecdir}/icpserver.pl
1020 %attr(755,root,root) %{_libexecdir}/icp-test.pl
1021 %attr(755,root,root) %{_libexecdir}/tcp-banger.pl
1022 %attr(755,root,root) %{_libexecdir}/trace-job.pl
1023 %attr(755,root,root) %{_libexecdir}/trace-master.pl
1024 %attr(755,root,root) %{_libexecdir}/udp-banger.pl
1025 %attr(755,root,root) %{_libexecdir}/upgrade-1.0-store.pl