2 # - REVIEW patches and configuration
4 # For this to work correctly, you will need to patch your linux
5 # kernel with the TOS preserving ZPH patch.
6 # The kernel patch can be downloaded from http://zph.bratcheda.org
9 %bcond_with combined_log # enables apache-like combined log format
11 Summary: SQUID Internet Object Cache
12 Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher
13 Summary(pl.UTF-8): Uniwersalny serwer proxy-cache
14 Summary(pt_BR.UTF-8): Cache Squid de objetos Internet
15 Summary(ru.UTF-8): Squid - кэш объектов Internet
16 Summary(uk.UTF-8): Squid - кеш об'єктів Internet
17 Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器
23 Group: Networking/Daemons
24 Source0: http://www.squid-cache.org/Versions/v3/3.3/%{name}-%{version}.tar.bz2
25 # Source0-md5: f08bffe795260cecca828331c579e0c4
27 Source2: %{name}.sysconfig
28 Source3: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip
29 # Source3-md5: 4f3b6dab1de9cbb847df89d8b417378a
30 Source4: %{name}.conf.patch
31 Source5: %{name}.logrotate
33 Source7: %{name}-cachemgr-apache.conf
34 Source8: %{name}.tmpfiles
35 Source9: %{name}-cachemgr-httpd.conf
36 Patch0: %{name}-fhs.patch
37 Patch1: %{name}-location.patch
38 Patch2: %{name}-crash-on-ENOSPC.patch
39 Patch4: %{name}-2.5.STABLE4-apache-like-combined-log.patch
40 Patch5: %{name}-ppc-m32.patch
41 Patch6: %{name}-cachemgr-webapp.patch
42 # http://www.squid-cache.org/mail-archive/squid-dev/201207/0099.html
43 # http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-cache-1.patch
44 Patch7: squidv3-vary-cache-1.patch
45 # http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-headers-shm-hack.patch
46 Patch8: squidv3-vary-headers-shm-hack.patch
47 Patch9: perl-5.18.patch
48 URL: http://www.squid-cache.org/
49 BuildRequires: autoconf
50 BuildRequires: automake
51 BuildRequires: cppunit-devel
52 BuildRequires: cyrus-sasl-devel >= 2.1.0
53 BuildRequires: db-devel
54 BuildRequires: expat-devel
55 BuildRequires: heimdal-devel
56 BuildRequires: libcap-devel >= 1:2.09
57 BuildRequires: libecap-devel >= 0.2.0
58 BuildRequires: libltdl-devel
59 BuildRequires: libnetfilter_conntrack-devel
60 BuildRequires: libstdc++-devel
61 BuildRequires: libtool
62 BuildRequires: libxml2-devel
63 BuildRequires: openldap-devel >= 2.3.0
64 BuildRequires: openssl-devel >= 0.9.7d
65 BuildRequires: pam-devel
66 BuildRequires: perl-base
67 BuildRequires: rpmbuild(macros) >= 1.268
68 BuildRequires: sed >= 4.0
70 Requires(post): /bin/hostname
71 Requires(post): fileutils
72 Requires(post): findutils
74 Requires(post,preun): /sbin/chkconfig
75 Requires(postun): /usr/sbin/groupdel
76 Requires(postun): /usr/sbin/userdel
77 Requires(pre): /usr/bin/getgid
78 Requires(pre): /usr/lib/rpm/user_group.sh
79 Requires(pre): /usr/sbin/groupadd
80 Requires(pre): /usr/sbin/useradd
81 Requires(pre,triggerpostun): /bin/id
82 Requires(pre,triggerpostun): /usr/sbin/usermod
83 Requires: rc-scripts >= 0.2.0
84 Requires: setup >= 2.4.6
85 Provides: group(squid)
86 # epoll enabled by default:
87 Requires: uname(release) >= 2.6
88 # TPROXYv4 (v2 disabled b/c it breaks v4)
89 #Suggests: uname(release) >= 2.6.28.3
91 Conflicts: logrotate < 3.8.0
92 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
94 %define _webapps /etc/webapps
95 %define _webapp cachemgr
96 %define _libexecdir %{_libdir}/%{name}
97 %define _sysconfdir /etc/%{name}
98 %define _cgidir %{_prefix}/lib/cgi-bin/%{_webapp}
101 Squid is a high-performance proxy caching server for web clients,
102 supporting FTP, gopher, and HTTP data objects. Unlike traditional
103 caching software, Squid handles all requests in a single,
104 non-blocking, I/O-driven process. Squid keeps meta data and especially
105 hot objects cached in RAM, caches DNS lookups, supports non-blocking
106 DNS lookups, and implements negative caching of failed requests. If
107 you are tight on memory, check out the NOVM version of this package.
108 Squid supports SSL, extensive access controls, and full request
109 logging. By using the lightweight Internet Cache Protocol, Squid
110 caches can be arranged in a hierarchy or mesh for additional bandwidth
111 savings. Squid consists of a main server program squid, a Domain Name
112 System lookup program dnsserver, a program for retrieving FTP data
113 ftpget, and some management and client tools. When squid starts up, it
114 spawns a configurable number of dnsserver processes, each of which can
115 perform a single, blocking Domain Name System (DNS) lookup. This
116 reduces the amount of time the cache waits for DNS lookups. Squid is
117 derived from the ARPA-funded Harvest project.
119 %description -l es.UTF-8
120 Squid es un servidor proxy con caché de alto desempeño para clientes
121 web, soportando FTP, gopher y HTTP. Diferentemente de softwares
122 tradicionales de caché squid manipula todas las requisiciones en un
123 único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y
124 objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché
125 de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa
126 un caché negativo de requisiciones que fallen. Si tiene poca memoria
127 da un vistazo en la versión NOVM de este paquete. También soporta SSL,
128 controles extensivos de acceso y registro (log) completo de las
129 requisiciones. Usando el ligero Protocolo de Caches Internet (ICP)
130 puede ser usado en una jerarquía de servidores para mayor ahorro de la
131 banda de comunicación. Está compuesto del programa squid (servidor
132 principal), del programa dnsserver (para resolución DNS), del programa
133 ftpget (para transmisiones ftp) y otras herramientas clientes y para
134 administración. Cuando squid se inicia, dispara un número configurable
135 de procesos dnsserver, cada uno pudiendo ejecutar solamente una
136 resolución DNS con poder de bloquear. Esto reduce el tiempo que el
137 caché espera por resoluciones DNS. Fue derivado del proyecto Harvest,
138 financiado por la ARPA.
140 %description -l pl.UTF-8
141 Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW,
142 klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w
143 pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla
144 SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych
145 danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer
146 squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet
147 squid obejmuje: główny program serwera squid, program dostarczający
148 informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz
149 pomocnicze programy do zarządzania. Squid wywodzi się ze
150 sponsorowanego przez ARPA projektu Harvest.
152 %description -l pt_BR.UTF-8
153 O Squid é um servidor proxy com cache de alta performance para
154 clientes web, suportando FTP, gopher e HTTP. Diferentemente de
155 softwares tradicionais de cache o squid manipula todas as requisições
156 em um único processo sem bloqueios, direcionado a E/S.
158 Mantém meta dados e objetos freqüentemente pedidos num cache em
159 memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem
160 bloqueio e implementa um cache negativo de requisições que falharem.
161 Se você tem pouca memória dê uma olhada na versão NOVM deste pacote.
163 Também suporta SSL, controles extensivos de acesso e registro (log)
164 completo das requisições. Usando o leve Protocolo de Caches Internet
165 (ICP) ele pode ser usado em uma hierarquia de servidores para maior
166 economia de banda de comunicação.
168 Ele consiste do programa squid (servidor principal), do programa
169 dnsserver (para resolução DNS), do programa ftpget (para transmissões
170 ftp) e outras ferramentas clientes e para gerenciamento. Quando o
171 squid é inicializado ele dispara um número configurável de processos
172 dnsserver, cada um podendo executar somente uma resolução DNS
173 bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS.
175 Foi derivado do projeto Harvest, financiado pela ARPA.
177 %description -l ru.UTF-8
178 Squid - это высокопроизводительный кэширующий прокси-сервер для
179 клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В
180 отличие от традиционных кэширующих программ, Squid обрабатывает все
181 запросы при помощи одного неблокирующегося, управляемого
182 вводом-выводом процесса.
184 Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб
187 %description -l uk.UTF-8
188 Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує
189 об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних
190 кешуючих програм, Squid обробляє всі запити за допомогою одного
191 неблокуючого, керованого вводом-виводом процесу.
193 Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб
197 Summary: CGI script for Squid management
198 Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW
199 Group: Applications/WWW
200 # does not require squid locally
201 Requires: group(http)
204 Requires: webserver(access)
205 Requires: webserver(alias)
206 Requires: webserver(cgi)
207 Conflicts: apache-base < 2.4.0-1
209 %description cachemgr
210 Cachemgr.cgi is a CGI script that allows administrator to check
211 various informations about Squid via WWW.
213 %description cachemgr -l pl.UTF-8
214 Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi
215 zapoznać się z informacjami o pracy Squida poprzez WWW.
217 %package kerberos_auth
218 Summary: Authentication via the Negotiate RFC 4559 for proxies
219 Summary(pl.UTF-8): Uwierzytelnianie przez negocjację RFC 4559 dla serwerów proxy
220 Group: Networking/Admin
221 Requires: %{name} = %{epoch}:%{version}-%{release}
222 Provides: squid-kerb_auth = %{epoch}:%{version}-%{release}
223 Obsoletes: squid-kerb_auth < %{epoch}:%{version}-%{release}
225 %description kerberos_auth
226 This squid helper is a reference implementation that supports
227 authentication via the Negotiate RFC 4559 for proxies. It decodes RFC
228 2478 SPNEGO GSS-API tokens from IE7 either through helper functions or
229 via SPNEGO supporting Kerberos libraries and RFC 1964 Kerberos tokens
230 from Firefox on Linux.
232 %description kerberos_auth -l pl.UTF-8
233 Pakiet ten jest implementacją uwierzytelniania przez negocjacji RFC
234 4559 dla serwerów proxy. Dekoduje żetony SPNEGO GSS-API RFC 2478 z IE7
235 poprzez funkcje pomocnicze lub przez biblioteki Kerberos wspierające
236 SPNEGO i żetony Kerberos RFC 1964 z Firefoksa w Linuksie.
239 Summary: LDAP authentication helper for Squid
240 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
241 Group: Networking/Admin
242 Requires: %{name} = %{epoch}:%{version}-%{release}
244 %description ldap_auth
245 This Squid helper allows authentication against LDAP directories using
246 the "simple authentication" (plain-text).
248 %description ldap_auth -l pl.UTF-8
249 Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego
250 uwierzytelniania (otwartym tekstem).
253 Summary: PAM authentication helper for Squid
254 Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida
255 Group: Networking/Admin
256 Requires: %{name} = %{epoch}:%{version}-%{release}
257 Requires: pam >= 0.77.3
259 %description pam_auth
260 This program authenticates users against a PAM configured
261 authentication service "squid". This allows you to authenticate Squid
262 users to any authentication source for which you have a PAM module.
264 %description pam_auth -l pl.UTF-8
265 Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym
266 źródle posiadającym moduł PAM.
269 Summary: SMB authentication helper for Squid
270 Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida
271 Group: Networking/Admin
272 Requires: %{name} = %{epoch}:%{version}-%{release}
274 %description smb_auth
275 This is a proxy authentication module. With smb_auth you can
276 authenticate proxy users against an SMB server like Windows NT or
279 %description smb_auth -l pl.UTF-8
280 To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można
281 uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy
285 Summary: MSNT domain authentication helper for Squid
286 Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida
287 Group: Networking/Admin
288 Requires: %{name} = %{epoch}:%{version}-%{release}
290 %description msnt_auth
291 This is an authentication module for the Squid proxy server to
292 authenticate users on an NT domain.
294 %description msnt_auth -l pl.UTF-8
295 Jest to moduł uwierzytelniania proxy, który pozwala na
296 uwierzytelnianie użytkowników proxy w domenie NT.
299 Summary: NIS authentication helper for Squid
300 Summary(pl.UTF-8): Obsługa uwierzytelniania NIS dla squida
301 Group: Networking/Admin
302 Requires: %{name} = %{epoch}:%{version}-%{release}
303 Provides: squid-yp_auth = %{epoch}:%{version}-%{release}
304 Obsoletes: squid-yp_auth < %{epoch}:%{version}-%{release}
306 %description nis_auth
307 This is an authentication module for the Squid proxy server to
308 authenticate users on NIS.
310 %description nis_auth -l pl.UTF-8
311 Jest to moduł uwierzytelniania proxy, który pozwala na
312 uwierzytelnianie użytkowników proxy poprzez NIS.
315 Summary: NCSA httpd style authentication helper for Squid
316 Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida
317 Group: Networking/Admin
318 Requires: %{name} = %{epoch}:%{version}-%{release}
320 %description ncsa_auth
321 This module uses a NCSA httpd style password file for authentication.
323 %description ncsa_auth -l pl.UTF-8
324 Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd.
327 Summary: SASL authentication helper for Squid
328 Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida
329 Group: Networking/Admin
330 Requires: %{name} = %{epoch}:%{version}-%{release}
332 %description sasl_auth
333 This is an authentication module for the Squid proxy server to
334 authenticate users via SASL.
336 %description sasl_auth -l pl.UTF-8
337 Jest to moduł uwierzytelniania proxy, który pozwala na
338 uwierzytelnianie użytkowników proxy poprzez SASL.
340 %package getpwname_auth
341 Summary: getpwname authentication helper for Squid
342 Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida
343 Group: Networking/Admin
344 Requires: %{name} = %{epoch}:%{version}-%{release}
346 %description getpwname_auth
347 This is an authentication module for the Squid proxy server to
348 authenticate users using getpwname.
350 %description getpwname_auth -l pl.UTF-8
351 Jest to moduł uwierzytelniania proxy, który pozwala na
352 uwierzytelnianie użytkowników proxy poprzez getpwname.
355 Summary: passwd authentication helper for Squid
356 Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida
357 Group: Networking/Admin
358 Requires: %{name} = %{epoch}:%{version}-%{release}
360 %description passwd_auth
361 This is an authentication module for the Squid proxy server to
362 authenticate users with separate passwd file.
364 %description passwd_auth -l pl.UTF-8
365 Jest to moduł uwierzytelniania proxy, który pozwala na
366 uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd.
369 Summary: NTLM authentication helper for Squid
370 Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida
371 Group: Networking/Admin
372 Requires: %{name} = %{epoch}:%{version}-%{release}
374 %description ntlm_auth
375 This is an authentication module for the Squid proxy server to
376 authenticate users on NTLM.
378 %description ntlm_auth -l pl.UTF-8
379 Jest to moduł uwierzytelniania proxy, który pozwala na
380 uwierzytelnianie użytkowników proxy poprzez NTLM.
383 Summary: RADIUS authentication helper for Squid
384 Summary(pl.UTF-8): Obsługa uwierzytelniania RADIUS dla squida
385 Group: Networking/Admin
386 Requires: %{name} = %{epoch}:%{version}-%{release}
388 %description radius_auth
389 This helper allows Squid to connect to a RADIUS server to validate the
390 user name and password of Basic HTTP authentication.
392 %description radius_auth -l pl.UTF-8
393 Program ten pozwala na uwierzytelnianie użytkowników squida przez
397 Summary: Database authentication helper for Squid
398 Summary(pl.UTF-8): Obsługa uwierzytelniania przez bazę danych dla squida
399 Group: Networking/Admin
400 Requires: %{name} = %{epoch}:%{version}-%{release}
402 Suggests: perl-DBD-mysql
405 This is an authentication module for the Squid proxy server to
406 authenticate users againsta a database.
408 %description db_auth -l pl.UTF-8
409 Jest to moduł uwierzytelniania proxy, który pozwala na
410 uwierzytelnianie użytkowników proxy poprzez bazę danych.
413 Summary: POP3 authentication helper for Squid
414 Summary(pl.UTF-8): Obsługa uwierzytelniania POP3 dla squida
415 Group: Networking/Admin
416 Requires: %{name} = %{epoch}:%{version}-%{release}
418 %description pop3_auth
419 This is an authentication module for the Squid proxy server to
420 authenticate users on POP3.
422 %description pop3_auth -l pl.UTF-8
423 Jest to moduł uwierzytelniania proxy, który pozwala na
424 uwierzytelnianie użytkowników proxy poprzez POP3.
426 %package negotiate_wrapper_auth
427 Summary: Kerberos authentication helper for Squid
428 Summary(pl.UTF-8): Obsługa uwierzytelniania Kerberos dla squida
429 Group: Networking/Admin
430 Requires: %{name} = %{epoch}:%{version}-%{release}
431 Requires: %{name}-kerberos_auth = %{epoch}:%{version}-%{release}
432 Requires: %{name}-ntlm_auth = %{epoch}:%{version}-%{release}
434 %description negotiate_wrapper_auth
435 This is an authentication module for the Squid proxy server to
436 authenticate users on Kerberos.
438 %description negotiate_wrapper_auth -l pl.UTF-8
439 Jest to moduł uwierzytelniania proxy, który pozwala na
440 uwierzytelnianie użytkowników proxy poprzez Kerberosa.
442 %package digest_edirectory_auth
443 Summary: eDirectory authentication helper for Squid
444 Summary(pl.UTF-8): Obsługa uwierzytelniania eDirectory dla squida
445 Group: Networking/Admin
446 Requires: %{name} = %{epoch}:%{version}-%{release}
448 %description digest_edirectory_auth
449 This is an authentication module for the Squid proxy server to
450 authenticate users on eDirectory.
452 %description digest_edirectory_auth -l pl.UTF-8
453 Jest to moduł uwierzytelniania proxy, który pozwala na
454 uwierzytelnianie użytkowników proxy poprzez eDirectory.
456 %package digest_ldap_auth
457 Summary: LDAP authentication helper for Squid
458 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
459 Group: Networking/Admin
460 Requires: %{name} = %{epoch}:%{version}-%{release}
462 %description digest_ldap_auth
463 This is an authentication module for the Squid proxy server to
464 authenticate users on LDAP.
466 %description digest_ldap_auth -l pl.UTF-8
467 Jest to moduł uwierzytelniania proxy, który pozwala na
468 uwierzytelnianie użytkowników proxy poprzez LDAP.
471 Summary: IP external ACL helper for Squid
472 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida
473 Group: Networking/Admin
474 Requires: %{name} = %{epoch}:%{version}-%{release}
477 This is an external ACL module for the Squid proxy server to limit
478 access for users based on IP address.
480 %description ip_acl -l pl.UTF-8
481 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
482 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP.
485 Summary: LDAP group external ACL helper for Squid
486 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida
487 Group: Networking/Admin
488 Requires: %{name} = %{epoch}:%{version}-%{release}
490 %description ldap_acl
491 This is an external ACL module for the Squid proxy server to limit
492 access for users based on LDAP group membership.
494 %description ldap_acl -l pl.UTF-8
495 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
496 ograniczenie dostępu użytkowników proxy na podstawie ich
497 przynależności do grup LDAP.
500 Summary: UNIX group external ACL helper for Squid
501 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida
502 Group: Networking/Admin
503 Requires: %{name} = %{epoch}:%{version}-%{release}
505 %description unix_acl
506 This is an external ACL module for the Squid proxy server to limit
507 access for users based on UNIX group membership.
509 %description unix_acl -l pl.UTF-8
510 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
511 ograniczenie dostępu użytkowników proxy na podstawie ich
512 przynależności do grup UNIX.
515 Summary: NT domain group external ACL helper for Squid
516 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida
517 Group: Networking/Admin
518 Requires: %{name} = %{epoch}:%{version}-%{release}
520 %description wbinfo_acl
521 This is an external ACL module for the Squid proxy server to limit
522 access for users based on NT domain group membership using wbinfo.
524 %description wbinfo_acl -l pl.UTF-8
525 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
526 ograniczenie dostępu użytkowników proxy na podstawie ich
527 przynależności do grup w domenie NT przy użyciu wbinfo.
530 Summary: Squid session tracking external ACL group helper
531 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez śledzenie sesji
532 Group: Networking/Admin
533 Requires: %{name} = %{epoch}:%{version}-%{release}
535 %description session_acl
536 This helper maintains a concept of sessions by monitoring requests and
537 timing out sessions if no requests have been seen for the idle timeout
540 %description session_acl -l pl.UTF-8
541 Moduł oparty na koncepcji sesji, śledzący zapytania i wygaszający
542 sesje jeśli w określonym czasie nie widziano w ich obrębie kolejnych
545 %package edirectory_userip_acl
546 Summary: Squid eDirectory IP Lookup Helper
547 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez eDirectory
548 Group: Networking/Admin
549 Requires: %{name} = %{epoch}:%{version}-%{release}
551 %description edirectory_userip_acl
552 This is an external ACL module for the Squid proxy server to limit
553 access for users based on IP address lookup in eDirectory.
555 %description edirectory_userip_acl -l pl.UTF-8
556 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
557 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP
558 popranego z eDirectory.
560 %package kerberos_ldap_group_acl
561 Summary: Squid LDAP external acl group helper for Kerberos or NTLM credentials
562 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP/Kerberos/NTLM dla squida
563 Group: Networking/Admin
564 Requires: %{name} = %{epoch}:%{version}-%{release}
566 %description kerberos_ldap_group_acl
567 This is an external ACL module for the Squid proxy server to limit
568 access for users based on LDAP Kerberos or NTLM credentials.
570 %description kerberos_ldap_group_acl -l pl.UTF-8
571 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
572 ograniczenie dostępu użytkowników proxy na podstawie ich uprawnień
573 Kerberosowych lub NTLM-owych w LDAP.
575 %package sql_session_acl
576 Summary: SQL Database session lookup helper for Squid
577 Group: Networking/Admin
578 Requires: %{name} = %{epoch}:%{version}-%{release}
580 %description sql_session_acl
581 Validates an HTTP requests access authorization with a session
584 %package time_quota_acl
585 Summary: Squid time quota external acl helper
586 Group: Networking/Admin
587 Requires: %{name} = %{epoch}:%{version}-%{release}
589 %description time_quota_acl
590 This extension allows an administrator to define time budgets for
591 the users of squid to limit the time using squid.
593 %package log_db_daemon
594 Summary: Database logging daemon for Squid
595 Group: Networking/Admin
596 Requires: %{name} = %{epoch}:%{version}-%{release}
598 %description log_db_daemon
599 This program writes Squid access.log entries to a database.
600 Presently only accepts the squid native format.
603 Summary: Perl scripts for Squid
604 Summary(pl.UTF-8): Skrypty perlowe dla Squida
605 Group: Networking/Admin
606 Requires: %{name} = %{epoch}:%{version}-%{release}
609 This package contains Perl scripts and contributed programs for Squid.
611 %description scripts -l pl.UTF-8
612 Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida.
619 %{?with_combined_log:%patch4 -p1}
628 %{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts}/*.pl
637 --disable-strict-error-checking \
638 --with-default-user=squid \
639 --with-logdir=/var/log/squid \
640 --with-swapdir=/var/cache/squid \
641 --with-pidfile=/var/run/squid.pid \
642 --datadir=%{_datadir}/squid \
645 --enable-basic-auth-helpers \
646 --enable-ntlm-auth-helpers \
647 --enable-negotiate-auth-helpers \
648 --enable-digest-auth-helpers \
649 --enable-external-acl-helpers \
650 --enable-url-rewrite-helpers \
651 --enable-ntlm-fail-open \
652 --enable-cache-digests \
653 --enable-coss-aio-ops \
654 --enable-delay-pools \
655 --enable-err-language=English \
657 --enable-follow-x-forwarded-for \
658 --enable-forward-log \
659 --enable-forw-via-db \
663 --enable-icap-client \
666 --enable-kill-parent-hack \
667 --enable-large-cache-files \
668 --enable-linux-netfilter \
669 --disable-linux-tproxy \
670 --enable-multicast-miss \
671 --enable-referer-log \
672 --enable-removal-policies="heap,lru" \
673 --enable-storeio="aufs,diskd,rock,ufs" \
677 --enable-useragent-log \
678 --enable-x-accelerator-vary \
679 --localstatedir=/var \
680 --sysconfdir=%{_sysconfdir} \
681 --with-auth-on-acceleration \
690 rm -rf $RPM_BUILD_ROOT
691 install -d $RPM_BUILD_ROOT{%{_cgidir},%{_webapps}/%{_webapp}} \
692 $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \
693 $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \
694 $RPM_BUILD_ROOT%{_mandir}/man8 \
695 $RPM_BUILD_ROOT%{_datadir}/squid \
696 $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid \
697 $RPM_BUILD_ROOT%{systemdtmpfilesdir}
700 DESTDIR=$RPM_BUILD_ROOT
702 %{__cp} -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib
703 install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir}
705 install %{SOURCE6} $RPM_BUILD_ROOT/etc/pam.d/squid
706 touch $RPM_BUILD_ROOT/etc/security/blacklist.squid
708 install %{SOURCE8} $RPM_BUILD_ROOT%{systemdtmpfilesdir}/squid.conf
710 %{__mv} -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir}
711 %{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/apache.conf
712 %{__cp} -a %{SOURCE9} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/httpd.conf
713 %{__rm} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/cachemgr.conf.default
715 cd $RPM_BUILD_ROOT/etc/squid
716 %{__patch} -p0 < %{SOURCE4}
717 %{__rm} *.default squid.conf.documented
720 install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid
721 install %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/squid
722 install %{SOURCE5} $RPM_BUILD_ROOT/etc/logrotate.d/squid
724 touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log
726 %{__rm} $RPM_BUILD_ROOT%{_datadir}/squid/errors/{COPYRIGHT,TRANSLATORS}
728 # cp, to have re-entrant install
731 # We don't want Makefiles as docs...
732 %{__rm} docs/Makefile*
734 :> $RPM_BUILD_ROOT/var/cache/squid/netdb_state
735 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state
736 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean
737 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean
740 rm -rf $RPM_BUILD_ROOT
743 %groupadd -g 91 squid
744 %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid
745 %addusertogroup stats squid
747 [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || :
750 if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then
751 hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost'
752 echo visible_hostname $hostname >> /etc/squid/squid.conf
755 /sbin/chkconfig --add squid
756 if [ "$1" = "1" ]; then
757 /sbin/service squid init >&2
759 %service squid restart
762 if [ "$1" = "0" ]; then
763 /sbin/chkconfig --del squid
766 # nuke squid cache if uninstalling
767 rm -rf /var/cache/squid/??
771 if [ "$1" = "0" ]; then
776 %triggerpostun -- squid < 7:2.5.STABLE7-5
777 %addusertogroup stats squid
779 %triggerin cachemgr -- apache1 < 1.3.37-3, apache1-base
780 %webapp_register apache %{_webapp}
782 %triggerun cachemgr -- apache1 < 1.3.37-3, apache1-base
783 %webapp_unregister apache %{_webapp}
785 %triggerin cachemgr -- apache-base
786 %webapp_register httpd %{_webapp}
788 %triggerun cachemgr -- apache-base
789 %webapp_unregister httpd %{_webapp}
791 %triggerpostun -- cachemgr < 7:3.0.STABLE10-0.2
792 if [ -f %{_sysconfdir}/cachemgr.conf.rpmsave ]; then
793 cp -f %{_webapps}/%{_webapp}/cachemgr.conf{,.rpmsave}
794 mv -f %{_sysconfdir}/cachemgr.conf.rpmsave %{_webapps}/%{_webapp}/cachemgr.conf
798 %defattr(644,root,root,755)
799 %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART
800 %doc RELEASENOTES.html SPONSORS docs/* src/mib.txt book-full.html
801 %doc src/squid.conf.default src/squid.conf.documented src/mime.conf.default
802 %doc errors/TRANSLATORS
803 %attr(755,root,root) %{_bindir}/purge
804 %attr(755,root,root) %{_bindir}/squidclient
807 %attr(755,root,root) %{_libexecdir}/diskd
808 # YES, it has to be suid root, it sends ICMP packets.
809 %attr(4754,root,squid) %{_libexecdir}/pinger
810 %attr(755,root,root) %{_libexecdir}/unlinkd
811 %attr(755,root,root) %{_libexecdir}/ntlm_fake_auth
812 %attr(755,root,root) %{_libexecdir}/basic_fake_auth
813 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite
814 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite.sh
815 %attr(755,root,root) %{_libexecdir}/log_file_daemon
816 %attr(755,root,root) %{_sbindir}/squid
818 %attr(754,root,root) /etc/rc.d/init.d/squid
819 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid
820 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid
823 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf
824 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf
825 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/errorpage.css
827 %dir %{_datadir}/squid
828 %dir %{_datadir}/squid/errors
829 %{_datadir}/squid/icons
830 %{_datadir}/squid/mib.txt
831 %{_datadir}/squid/errors/templates
832 %lang(af) %{_datadir}/squid/errors/af
833 %lang(ar) %{_datadir}/squid/errors/ar
834 %lang(ar) %{_datadir}/squid/errors/ar-*
835 %lang(az) %{_datadir}/squid/errors/az
836 %lang(az) %{_datadir}/squid/errors/az-*
837 %lang(bg) %{_datadir}/squid/errors/bg
838 %lang(bg) %{_datadir}/squid/errors/bg-*
839 %lang(ca) %{_datadir}/squid/errors/ca
840 %lang(cs) %{_datadir}/squid/errors/cs
841 %lang(cs) %{_datadir}/squid/errors/cs-*
842 %lang(da) %{_datadir}/squid/errors/da
843 %lang(da) %{_datadir}/squid/errors/da-*
844 %lang(de) %{_datadir}/squid/errors/de
845 %lang(de) %{_datadir}/squid/errors/de-*
846 %lang(el) %{_datadir}/squid/errors/el
847 %lang(el) %{_datadir}/squid/errors/el-*
848 %{_datadir}/squid/errors/en
849 %{_datadir}/squid/errors/en-*
850 %lang(es) %{_datadir}/squid/errors/es
851 %lang(es) %{_datadir}/squid/errors/es-*
852 %lang(et) %{_datadir}/squid/errors/et
853 %lang(et) %{_datadir}/squid/errors/et-*
854 %lang(fa) %{_datadir}/squid/errors/fa
855 %lang(fa) %{_datadir}/squid/errors/fa-*
856 %lang(fi) %{_datadir}/squid/errors/fi
857 %lang(fi) %{_datadir}/squid/errors/fi-*
858 %lang(fr) %{_datadir}/squid/errors/fr
859 %lang(fr) %{_datadir}/squid/errors/fr-*
860 %lang(he) %{_datadir}/squid/errors/he
861 %lang(he) %{_datadir}/squid/errors/he-*
862 %lang(hu) %{_datadir}/squid/errors/hu
863 %lang(hu) %{_datadir}/squid/errors/hu-*
864 %lang(hy) %{_datadir}/squid/errors/hy
865 %lang(hy) %{_datadir}/squid/errors/hy-*
866 %lang(id) %{_datadir}/squid/errors/id
867 %lang(id) %{_datadir}/squid/errors/id-*
868 %lang(it) %{_datadir}/squid/errors/it
869 %lang(it) %{_datadir}/squid/errors/it-*
870 %lang(ja) %{_datadir}/squid/errors/ja
871 %lang(ja) %{_datadir}/squid/errors/ja-*
872 %lang(ko) %{_datadir}/squid/errors/ko
873 %lang(ko) %{_datadir}/squid/errors/ko-*
874 %lang(lt) %{_datadir}/squid/errors/lt
875 %lang(lt) %{_datadir}/squid/errors/lt-*
876 %lang(lv) %{_datadir}/squid/errors/lv
877 %lang(lv) %{_datadir}/squid/errors/lv-*
878 %lang(ms) %{_datadir}/squid/errors/ms
879 %lang(ms) %{_datadir}/squid/errors/ms-*
880 %lang(nl) %{_datadir}/squid/errors/nl
881 %lang(nl) %{_datadir}/squid/errors/nl-*
882 %lang(oc) %{_datadir}/squid/errors/oc
883 %lang(pl) %{_datadir}/squid/errors/pl
884 %lang(pl) %{_datadir}/squid/errors/pl-*
885 %lang(pt) %{_datadir}/squid/errors/pt
886 %lang(pt) %{_datadir}/squid/errors/pt-pt
887 %lang(pt_BR) %{_datadir}/squid/errors/pt-br
888 %lang(ro) %{_datadir}/squid/errors/ro
889 %lang(ro) %{_datadir}/squid/errors/ro-*
890 %lang(ru) %{_datadir}/squid/errors/ru
891 %lang(ru) %{_datadir}/squid/errors/ru-*
892 %lang(sk) %{_datadir}/squid/errors/sk
893 %lang(sk) %{_datadir}/squid/errors/sk-*
894 %lang(sk) %{_datadir}/squid/errors/sl
895 %lang(sk) %{_datadir}/squid/errors/sl-*
896 %lang(sr) %{_datadir}/squid/errors/sr
897 %lang(sr) %{_datadir}/squid/errors/sr-*
898 %lang(sv) %{_datadir}/squid/errors/sv
899 %lang(sv) %{_datadir}/squid/errors/sv-*
900 %lang(th) %{_datadir}/squid/errors/th
901 %lang(th) %{_datadir}/squid/errors/th-*
902 %lang(tr) %{_datadir}/squid/errors/tr
903 %lang(tr) %{_datadir}/squid/errors/tr-*
904 %lang(uk) %{_datadir}/squid/errors/uk
905 %lang(uk) %{_datadir}/squid/errors/uk-*
906 %lang(uz) %{_datadir}/squid/errors/uz
907 %lang(vi) %{_datadir}/squid/errors/vi
908 %lang(vi) %{_datadir}/squid/errors/vi-*
909 %lang(zh_CN) %{_datadir}/squid/errors/zh-cn
910 %lang(zh_CN) %{_datadir}/squid/errors/zh-sg
911 %lang(zh_CN) %{_datadir}/squid/errors/zh-tw
912 %lang(zh_TW) %{_datadir}/squid/errors/zh-hk
913 %lang(zh_TW) %{_datadir}/squid/errors/zh-mo
915 %{systemdtmpfilesdir}/squid.conf
916 %attr(770,root,squid) %dir /var/run/squid
918 %attr(770,root,squid) %dir /var/log/archive/squid
919 %attr(770,root,squid) %dir /var/log/squid
920 %attr(660,root,squid) %ghost /var/log/squid/*
922 %attr(770,root,squid) %dir /var/cache/squid
923 %ghost /var/cache/squid/netdb_state
924 %ghost /var/cache/squid/swap.state
925 %ghost /var/cache/squid/swap.state.clean
926 %ghost /var/cache/squid/swap.state.last-clean
927 %{_mandir}/man1/squidclient.1*
928 %{_mandir}/man8/squid.8*
931 %defattr(644,root,root,755)
932 %dir %attr(750,root,http) %{_webapps}/%{_webapp}
933 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/apache.conf
934 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/httpd.conf
935 %attr(640,root,http) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/cachemgr.conf
937 %attr(755,root,root) %{_cgidir}/cachemgr.cgi
938 %{_mandir}/man8/cachemgr.cgi.8*
941 %defattr(644,root,root,755)
942 %doc helpers/basic_auth/LDAP/README
943 %attr(755,root,root) %{_libexecdir}/basic_ldap_auth
944 %{_mandir}/man8/basic_ldap_auth.*
947 %defattr(644,root,root,755)
948 %config(noreplace) /etc/pam.d/squid
949 %config(noreplace) /etc/security/blacklist.squid
950 # it has to be suid root to access /etc/shadow
951 %attr(4755,root,root) %{_libexecdir}/basic_pam_auth
952 %{_mandir}/man8/basic_pam_auth.8*
955 %defattr(644,root,root,755)
956 %doc helpers/basic_auth/SMB/ChangeLog
957 %attr(755,root,root) %{_libexecdir}/basic_smb_auth*
960 %defattr(644,root,root,755)
961 %doc helpers/basic_auth/MSNT/README*
962 %doc helpers/basic_auth/MSNT-multi-domain/README*
963 %attr(755,root,root) %{_libexecdir}/basic_msnt_auth
964 %attr(755,root,root) %{_libexecdir}/basic_msnt_multi_domain_auth
965 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf
968 %defattr(644,root,root,755)
969 %attr(755,root,root) %{_libexecdir}/basic_nis_auth
972 %defattr(644,root,root,755)
973 %attr(755,root,root) %{_libexecdir}/basic_ncsa_auth
974 %{_mandir}/man8/basic_ncsa_auth.8*
977 %defattr(644,root,root,755)
978 %doc helpers/basic_auth/SASL/basic_sasl_auth.{conf,pam}
979 %attr(755,root,root) %{_libexecdir}/basic_sasl_auth
980 %{_mandir}/man8/basic_sasl_auth.8*
982 %files getpwname_auth
983 %defattr(644,root,root,755)
984 %attr(755,root,root) %{_libexecdir}/basic_getpwnam_auth
985 %{_mandir}/man8/basic_getpwnam_auth.8*
988 %defattr(644,root,root,755)
989 %attr(755,root,root) %{_libexecdir}/digest_file_auth
990 %{_mandir}/man8/digest_file_auth.8*
993 %defattr(644,root,root,755)
994 %doc helpers/negotiate_auth/kerberos/README
995 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth
996 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth_test
997 %{_mandir}/man8/negotiate_kerberos_auth.8*
1000 %defattr(644,root,root,755)
1001 %attr(755,root,root) %{_libexecdir}/ntlm_smb_lm_auth
1004 %defattr(644,root,root,755)
1005 %doc helpers/basic_auth/RADIUS/README
1006 %attr(755,root,root) %{_libexecdir}/basic_radius_auth
1007 %{_mandir}/man8/basic_radius_auth.8*
1009 %files digest_ldap_auth
1010 %defattr(644,root,root,755)
1011 %attr(755,root,root) %{_libexecdir}/digest_ldap_auth
1014 %defattr(644,root,root,755)
1015 %attr(755,root,root) %{_libexecdir}/basic_db_auth
1016 %{_mandir}/man8/basic_db_auth.8*
1019 %defattr(644,root,root,755)
1020 %{_libexecdir}/basic_pop3_auth
1022 %files digest_edirectory_auth
1023 %defattr(644,root,root,755)
1024 %{_libexecdir}/digest_edirectory_auth
1026 %files negotiate_wrapper_auth
1027 %defattr(644,root,root,755)
1028 %{_libexecdir}/negotiate_wrapper_auth
1031 %defattr(644,root,root,755)
1032 %doc helpers/external_acl/file_userip/example*
1033 %attr(755,root,root) %{_libexecdir}/ext_file_userip_acl
1034 %{_mandir}/man8/ext_file_userip_acl.*
1037 %defattr(644,root,root,755)
1038 %attr(755,root,root) %{_libexecdir}/ext_ldap_group_acl
1039 %{_mandir}/man8/ext_ldap_group_acl.*
1042 %defattr(644,root,root,755)
1043 %attr(755,root,root) %{_libexecdir}/ext_unix_group_acl
1044 %{_mandir}/man8/ext_unix_group_acl.*
1047 %defattr(644,root,root,755)
1048 %attr(755,root,root) %{_libexecdir}/ext_wbinfo_group_acl
1049 %{_mandir}/man8/ext_wbinfo_group_acl.8*
1052 %defattr(644,root,root,755)
1053 %attr(755,root,root) %{_libexecdir}/ext_session_acl
1054 %{_mandir}/man8/ext_session_acl.8*
1056 %files edirectory_userip_acl
1057 %defattr(644,root,root,755)
1058 %{_libexecdir}/ext_edirectory_userip_acl
1059 %{_mandir}/man8/ext_edirectory_userip_acl.8*
1061 %files kerberos_ldap_group_acl
1062 %defattr(644,root,root,755)
1063 %{_libexecdir}/ext_kerberos_ldap_group_acl
1065 %files sql_session_acl
1066 %defattr(644,root,root,755)
1067 %{_libexecdir}/ext_sql_session_acl
1068 %{_mandir}/man8/ext_sql_session_acl.8.gz
1070 %files time_quota_acl
1071 %defattr(644,root,root,755)
1072 %{_libexecdir}/ext_time_quota_acl
1073 %{_mandir}/man8/ext_time_quota_acl.8.gz
1075 %files log_db_daemon
1076 %defattr(644,root,root,755)
1077 %{_libexecdir}/log_db_daemon
1078 %{_mandir}/man8/log_db_daemon.8.gz
1081 %defattr(644,root,root,755)
1082 %attr(755,root,root) %{_libexecdir}/contrib
1083 %attr(755,root,root) %{_libexecdir}/AnnounceCache.pl
1084 %attr(755,root,root) %{_libexecdir}/access-log-matrix.pl
1085 %attr(755,root,root) %{_libexecdir}/cache-compare.pl
1086 %attr(755,root,root) %{_libexecdir}/cachetrace.pl
1087 %attr(755,root,root) %{_libexecdir}/calc-must-ids.pl
1088 %attr(755,root,root) %{_libexecdir}/cert_tool
1089 %attr(755,root,root) %{_libexecdir}/check_cache.pl
1090 %attr(755,root,root) %{_libexecdir}/fileno-to-pathname.pl
1091 %attr(755,root,root) %{_libexecdir}/find-alive.pl
1092 %attr(755,root,root) %{_libexecdir}/flag_truncs.pl
1093 %attr(755,root,root) %{_libexecdir}/helper-mux.pl
1094 %attr(755,root,root) %{_libexecdir}/icpserver.pl
1095 %attr(755,root,root) %{_libexecdir}/icp-test.pl
1096 %attr(755,root,root) %{_libexecdir}/tcp-banger.pl
1097 %attr(755,root,root) %{_libexecdir}/trace-job.pl
1098 %attr(755,root,root) %{_libexecdir}/trace-master.pl
1099 %attr(755,root,root) %{_libexecdir}/udp-banger.pl
1100 %attr(755,root,root) %{_libexecdir}/upgrade-1.0-store.pl