2 # - REVIEW patches and configuration
4 # For this to work correctly, you will need to patch your linux
5 # kernel with the TOS preserving ZPH patch.
6 # The kernel patch can be downloaded from http://zph.bratcheda.org
9 %bcond_with combined_log # enables apache-like combined log format
11 Summary: SQUID Internet Object Cache
12 Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher
13 Summary(pl.UTF-8): Uniwersalny serwer proxy-cache
14 Summary(pt_BR.UTF-8): Cache Squid de objetos Internet
15 Summary(ru.UTF-8): Squid - кэш объектов Internet
16 Summary(uk.UTF-8): Squid - кеш об'єктів Internet
17 Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器
23 Group: Networking/Daemons
24 Source0: http://www.squid-cache.org/Versions/v3/3.2/%{name}-%{version}.tar.bz2
25 # Source0-md5: 367e59c9c25da7ebbfbf7cbc36d2444e
27 Source2: %{name}.sysconfig
28 Source3: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip
29 # Source3-md5: 4f3b6dab1de9cbb847df89d8b417378a
30 Source4: %{name}.conf.patch
31 Source5: %{name}.logrotate
33 Source7: %{name}-cachemgr-apache.conf
34 Source8: %{name}.tmpfiles
35 Source9: %{name}-cachemgr-httpd.conf
36 Patch0: %{name}-fhs.patch
37 Patch1: %{name}-location.patch
38 Patch2: %{name}-crash-on-ENOSPC.patch
39 Patch4: %{name}-2.5.STABLE4-apache-like-combined-log.patch
40 Patch5: %{name}-ppc-m32.patch
41 Patch6: %{name}-cachemgr-webapp.patch
42 # http://www.squid-cache.org/mail-archive/squid-dev/201207/0099.html
43 # http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-cache-1.patch
44 Patch7: squidv3-vary-cache-1.patch
45 # http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-headers-shm-hack.patch
46 Patch8: squidv3-vary-headers-shm-hack.patch
47 URL: http://www.squid-cache.org/
48 BuildRequires: autoconf
49 BuildRequires: automake
50 BuildRequires: cppunit-devel
51 BuildRequires: cyrus-sasl-devel >= 2.1.0
52 BuildRequires: db-devel
53 BuildRequires: expat-devel
54 BuildRequires: heimdal-devel
55 BuildRequires: libcap-devel >= 1:2.09
56 BuildRequires: libecap-devel >= 0.2.0
57 BuildRequires: libltdl-devel
58 BuildRequires: libnetfilter_conntrack-devel
59 BuildRequires: libstdc++-devel
60 BuildRequires: libtool
61 BuildRequires: libxml2-devel
62 BuildRequires: openldap-devel >= 2.3.0
63 BuildRequires: openssl-devel >= 0.9.7d
64 BuildRequires: pam-devel
65 BuildRequires: perl-base
66 BuildRequires: rpmbuild(macros) >= 1.268
67 BuildRequires: sed >= 4.0
69 Requires(post): /bin/hostname
70 Requires(post): fileutils
71 Requires(post): findutils
73 Requires(post,preun): /sbin/chkconfig
74 Requires(postun): /usr/sbin/groupdel
75 Requires(postun): /usr/sbin/userdel
76 Requires(pre): /usr/bin/getgid
77 Requires(pre): /usr/lib/rpm/user_group.sh
78 Requires(pre): /usr/sbin/groupadd
79 Requires(pre): /usr/sbin/useradd
80 Requires(pre,triggerpostun): /bin/id
81 Requires(pre,triggerpostun): /usr/sbin/usermod
82 Requires: rc-scripts >= 0.2.0
83 Requires: setup >= 2.4.6
84 Provides: group(squid)
85 # epoll enabled by default:
86 Requires: uname(release) >= 2.6
87 # TPROXYv4 (v2 disabled b/c it breaks v4)
88 #Suggests: uname(release) >= 2.6.28.3
90 Conflicts: logrotate < 3.8.0
91 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
93 %define _webapps /etc/webapps
94 %define _webapp cachemgr
95 %define _libexecdir %{_libdir}/%{name}
96 %define _sysconfdir /etc/%{name}
97 %define _cgidir %{_prefix}/lib/cgi-bin/%{_webapp}
100 Squid is a high-performance proxy caching server for web clients,
101 supporting FTP, gopher, and HTTP data objects. Unlike traditional
102 caching software, Squid handles all requests in a single,
103 non-blocking, I/O-driven process. Squid keeps meta data and especially
104 hot objects cached in RAM, caches DNS lookups, supports non-blocking
105 DNS lookups, and implements negative caching of failed requests. If
106 you are tight on memory, check out the NOVM version of this package.
107 Squid supports SSL, extensive access controls, and full request
108 logging. By using the lightweight Internet Cache Protocol, Squid
109 caches can be arranged in a hierarchy or mesh for additional bandwidth
110 savings. Squid consists of a main server program squid, a Domain Name
111 System lookup program dnsserver, a program for retrieving FTP data
112 ftpget, and some management and client tools. When squid starts up, it
113 spawns a configurable number of dnsserver processes, each of which can
114 perform a single, blocking Domain Name System (DNS) lookup. This
115 reduces the amount of time the cache waits for DNS lookups. Squid is
116 derived from the ARPA-funded Harvest project.
118 %description -l es.UTF-8
119 Squid es un servidor proxy con caché de alto desempeño para clientes
120 web, soportando FTP, gopher y HTTP. Diferentemente de softwares
121 tradicionales de caché squid manipula todas las requisiciones en un
122 único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y
123 objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché
124 de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa
125 un caché negativo de requisiciones que fallen. Si tiene poca memoria
126 da un vistazo en la versión NOVM de este paquete. También soporta SSL,
127 controles extensivos de acceso y registro (log) completo de las
128 requisiciones. Usando el ligero Protocolo de Caches Internet (ICP)
129 puede ser usado en una jerarquía de servidores para mayor ahorro de la
130 banda de comunicación. Está compuesto del programa squid (servidor
131 principal), del programa dnsserver (para resolución DNS), del programa
132 ftpget (para transmisiones ftp) y otras herramientas clientes y para
133 administración. Cuando squid se inicia, dispara un número configurable
134 de procesos dnsserver, cada uno pudiendo ejecutar solamente una
135 resolución DNS con poder de bloquear. Esto reduce el tiempo que el
136 caché espera por resoluciones DNS. Fue derivado del proyecto Harvest,
137 financiado por la ARPA.
139 %description -l pl.UTF-8
140 Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW,
141 klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w
142 pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla
143 SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych
144 danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer
145 squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet
146 squid obejmuje: główny program serwera squid, program dostarczający
147 informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz
148 pomocnicze programy do zarządzania. Squid wywodzi się ze
149 sponsorowanego przez ARPA projektu Harvest.
151 %description -l pt_BR.UTF-8
152 O Squid é um servidor proxy com cache de alta performance para
153 clientes web, suportando FTP, gopher e HTTP. Diferentemente de
154 softwares tradicionais de cache o squid manipula todas as requisições
155 em um único processo sem bloqueios, direcionado a E/S.
157 Mantém meta dados e objetos freqüentemente pedidos num cache em
158 memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem
159 bloqueio e implementa um cache negativo de requisições que falharem.
160 Se você tem pouca memória dê uma olhada na versão NOVM deste pacote.
162 Também suporta SSL, controles extensivos de acesso e registro (log)
163 completo das requisições. Usando o leve Protocolo de Caches Internet
164 (ICP) ele pode ser usado em uma hierarquia de servidores para maior
165 economia de banda de comunicação.
167 Ele consiste do programa squid (servidor principal), do programa
168 dnsserver (para resolução DNS), do programa ftpget (para transmissões
169 ftp) e outras ferramentas clientes e para gerenciamento. Quando o
170 squid é inicializado ele dispara um número configurável de processos
171 dnsserver, cada um podendo executar somente uma resolução DNS
172 bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS.
174 Foi derivado do projeto Harvest, financiado pela ARPA.
176 %description -l ru.UTF-8
177 Squid - это высокопроизводительный кэширующий прокси-сервер для
178 клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В
179 отличие от традиционных кэширующих программ, Squid обрабатывает все
180 запросы при помощи одного неблокирующегося, управляемого
181 вводом-выводом процесса.
183 Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб
186 %description -l uk.UTF-8
187 Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує
188 об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних
189 кешуючих програм, Squid обробляє всі запити за допомогою одного
190 неблокуючого, керованого вводом-виводом процесу.
192 Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб
196 Summary: CGI script for Squid management
197 Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW
198 Group: Applications/WWW
199 # does not require squid locally
200 Requires: group(http)
203 Requires: webserver(access)
204 Requires: webserver(alias)
205 Requires: webserver(cgi)
206 Conflicts: apache-base < 2.4.0-1
208 %description cachemgr
209 Cachemgr.cgi is a CGI script that allows administrator to check
210 various informations about Squid via WWW.
212 %description cachemgr -l pl.UTF-8
213 Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi
214 zapoznać się z informacjami o pracy Squida poprzez WWW.
216 %package kerberos_auth
217 Summary: Authentication via the Negotiate RFC 4559 for proxies
218 Summary(pl.UTF-8): Uwierzytelnianie przez negocjację RFC 4559 dla serwerów proxy
219 Group: Networking/Admin
220 Requires: %{name} = %{epoch}:%{version}-%{release}
221 Provides: squid-kerb_auth = %{epoch}:%{version}-%{release}
222 Obsoletes: squid-kerb_auth < %{epoch}:%{version}-%{release}
224 %description kerberos_auth
225 This squid helper is a reference implementation that supports
226 authentication via the Negotiate RFC 4559 for proxies. It decodes RFC
227 2478 SPNEGO GSS-API tokens from IE7 either through helper functions or
228 via SPNEGO supporting Kerberos libraries and RFC 1964 Kerberos tokens
229 from Firefox on Linux.
231 %description kerberos_auth -l pl.UTF-8
232 Pakiet ten jest implementacją uwierzytelniania przez negocjacji RFC
233 4559 dla serwerów proxy. Dekoduje żetony SPNEGO GSS-API RFC 2478 z IE7
234 poprzez funkcje pomocnicze lub przez biblioteki Kerberos wspierające
235 SPNEGO i żetony Kerberos RFC 1964 z Firefoksa w Linuksie.
238 Summary: LDAP authentication helper for Squid
239 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
240 Group: Networking/Admin
241 Requires: %{name} = %{epoch}:%{version}-%{release}
243 %description ldap_auth
244 This Squid helper allows authentication against LDAP directories using
245 the "simple authentication" (plain-text).
247 %description ldap_auth -l pl.UTF-8
248 Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego
249 uwierzytelniania (otwartym tekstem).
252 Summary: PAM authentication helper for Squid
253 Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida
254 Group: Networking/Admin
255 Requires: %{name} = %{epoch}:%{version}-%{release}
256 Requires: pam >= 0.77.3
258 %description pam_auth
259 This program authenticates users against a PAM configured
260 authentication service "squid". This allows you to authenticate Squid
261 users to any authentication source for which you have a PAM module.
263 %description pam_auth -l pl.UTF-8
264 Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym
265 źródle posiadającym moduł PAM.
268 Summary: SMB authentication helper for Squid
269 Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida
270 Group: Networking/Admin
271 Requires: %{name} = %{epoch}:%{version}-%{release}
273 %description smb_auth
274 This is a proxy authentication module. With smb_auth you can
275 authenticate proxy users against an SMB server like Windows NT or
278 %description smb_auth -l pl.UTF-8
279 To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można
280 uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy
284 Summary: MSNT domain authentication helper for Squid
285 Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida
286 Group: Networking/Admin
287 Requires: %{name} = %{epoch}:%{version}-%{release}
289 %description msnt_auth
290 This is an authentication module for the Squid proxy server to
291 authenticate users on an NT domain.
293 %description msnt_auth -l pl.UTF-8
294 Jest to moduł uwierzytelniania proxy, który pozwala na
295 uwierzytelnianie użytkowników proxy w domenie NT.
298 Summary: NIS authentication helper for Squid
299 Summary(pl.UTF-8): Obsługa uwierzytelniania NIS dla squida
300 Group: Networking/Admin
301 Requires: %{name} = %{epoch}:%{version}-%{release}
302 Provides: squid-yp_auth = %{epoch}:%{version}-%{release}
303 Obsoletes: squid-yp_auth < %{epoch}:%{version}-%{release}
305 %description nis_auth
306 This is an authentication module for the Squid proxy server to
307 authenticate users on NIS.
309 %description nis_auth -l pl.UTF-8
310 Jest to moduł uwierzytelniania proxy, który pozwala na
311 uwierzytelnianie użytkowników proxy poprzez NIS.
314 Summary: NCSA httpd style authentication helper for Squid
315 Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida
316 Group: Networking/Admin
317 Requires: %{name} = %{epoch}:%{version}-%{release}
319 %description ncsa_auth
320 This module uses a NCSA httpd style password file for authentication.
322 %description ncsa_auth -l pl.UTF-8
323 Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd.
326 Summary: SASL authentication helper for Squid
327 Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida
328 Group: Networking/Admin
329 Requires: %{name} = %{epoch}:%{version}-%{release}
331 %description sasl_auth
332 This is an authentication module for the Squid proxy server to
333 authenticate users via SASL.
335 %description sasl_auth -l pl.UTF-8
336 Jest to moduł uwierzytelniania proxy, który pozwala na
337 uwierzytelnianie użytkowników proxy poprzez SASL.
339 %package getpwname_auth
340 Summary: getpwname authentication helper for Squid
341 Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida
342 Group: Networking/Admin
343 Requires: %{name} = %{epoch}:%{version}-%{release}
345 %description getpwname_auth
346 This is an authentication module for the Squid proxy server to
347 authenticate users using getpwname.
349 %description getpwname_auth -l pl.UTF-8
350 Jest to moduł uwierzytelniania proxy, który pozwala na
351 uwierzytelnianie użytkowników proxy poprzez getpwname.
354 Summary: passwd authentication helper for Squid
355 Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida
356 Group: Networking/Admin
357 Requires: %{name} = %{epoch}:%{version}-%{release}
359 %description passwd_auth
360 This is an authentication module for the Squid proxy server to
361 authenticate users with separate passwd file.
363 %description passwd_auth -l pl.UTF-8
364 Jest to moduł uwierzytelniania proxy, który pozwala na
365 uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd.
368 Summary: NTLM authentication helper for Squid
369 Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida
370 Group: Networking/Admin
371 Requires: %{name} = %{epoch}:%{version}-%{release}
373 %description ntlm_auth
374 This is an authentication module for the Squid proxy server to
375 authenticate users on NTLM.
377 %description ntlm_auth -l pl.UTF-8
378 Jest to moduł uwierzytelniania proxy, który pozwala na
379 uwierzytelnianie użytkowników proxy poprzez NTLM.
382 Summary: RADIUS authentication helper for Squid
383 Summary(pl.UTF-8): Obsługa uwierzytelniania RADIUS dla squida
384 Group: Networking/Admin
385 Requires: %{name} = %{epoch}:%{version}-%{release}
387 %description radius_auth
388 This helper allows Squid to connect to a RADIUS server to validate the
389 user name and password of Basic HTTP authentication.
391 %description radius_auth -l pl.UTF-8
392 Program ten pozwala na uwierzytelnianie użytkowników squida przez
396 Summary: Database authentication helper for Squid
397 Summary(pl.UTF-8): Obsługa uwierzytelniania przez bazę danych dla squida
398 Group: Networking/Admin
399 Requires: %{name} = %{epoch}:%{version}-%{release}
401 Suggests: perl-DBD-mysql
404 This is an authentication module for the Squid proxy server to
405 authenticate users againsta a database.
407 %description db_auth -l pl.UTF-8
408 Jest to moduł uwierzytelniania proxy, który pozwala na
409 uwierzytelnianie użytkowników proxy poprzez bazę danych.
412 Summary: POP3 authentication helper for Squid
413 Summary(pl.UTF-8): Obsługa uwierzytelniania POP3 dla squida
414 Group: Networking/Admin
415 Requires: %{name} = %{epoch}:%{version}-%{release}
417 %description pop3_auth
418 This is an authentication module for the Squid proxy server to
419 authenticate users on POP3.
421 %description pop3_auth -l pl.UTF-8
422 Jest to moduł uwierzytelniania proxy, który pozwala na
423 uwierzytelnianie użytkowników proxy poprzez POP3.
425 %package negotiate_wrapper_auth
426 Summary: Kerberos authentication helper for Squid
427 Summary(pl.UTF-8): Obsługa uwierzytelniania Kerberos dla squida
428 Group: Networking/Admin
429 Requires: %{name} = %{epoch}:%{version}-%{release}
430 Requires: %{name}-kerberos_auth = %{epoch}:%{version}-%{release}
431 Requires: %{name}-ntlm_auth = %{epoch}:%{version}-%{release}
433 %description negotiate_wrapper_auth
434 This is an authentication module for the Squid proxy server to
435 authenticate users on Kerberos.
437 %description negotiate_wrapper_auth -l pl.UTF-8
438 Jest to moduł uwierzytelniania proxy, który pozwala na
439 uwierzytelnianie użytkowników proxy poprzez Kerberosa.
441 %package digest_edirectory_auth
442 Summary: eDirectory authentication helper for Squid
443 Summary(pl.UTF-8): Obsługa uwierzytelniania eDirectory dla squida
444 Group: Networking/Admin
445 Requires: %{name} = %{epoch}:%{version}-%{release}
447 %description digest_edirectory_auth
448 This is an authentication module for the Squid proxy server to
449 authenticate users on eDirectory.
451 %description digest_edirectory_auth -l pl.UTF-8
452 Jest to moduł uwierzytelniania proxy, który pozwala na
453 uwierzytelnianie użytkowników proxy poprzez eDirectory.
455 %package digest_ldap_auth
456 Summary: LDAP authentication helper for Squid
457 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
458 Group: Networking/Admin
459 Requires: %{name} = %{epoch}:%{version}-%{release}
461 %description digest_ldap_auth
462 This is an authentication module for the Squid proxy server to
463 authenticate users on LDAP.
465 %description digest_ldap_auth -l pl.UTF-8
466 Jest to moduł uwierzytelniania proxy, który pozwala na
467 uwierzytelnianie użytkowników proxy poprzez LDAP.
470 Summary: IP external ACL helper for Squid
471 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida
472 Group: Networking/Admin
473 Requires: %{name} = %{epoch}:%{version}-%{release}
476 This is an external ACL module for the Squid proxy server to limit
477 access for users based on IP address.
479 %description ip_acl -l pl.UTF-8
480 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
481 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP.
484 Summary: LDAP group external ACL helper for Squid
485 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida
486 Group: Networking/Admin
487 Requires: %{name} = %{epoch}:%{version}-%{release}
489 %description ldap_acl
490 This is an external ACL module for the Squid proxy server to limit
491 access for users based on LDAP group membership.
493 %description ldap_acl -l pl.UTF-8
494 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
495 ograniczenie dostępu użytkowników proxy na podstawie ich
496 przynależności do grup LDAP.
499 Summary: UNIX group external ACL helper for Squid
500 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida
501 Group: Networking/Admin
502 Requires: %{name} = %{epoch}:%{version}-%{release}
504 %description unix_acl
505 This is an external ACL module for the Squid proxy server to limit
506 access for users based on UNIX group membership.
508 %description unix_acl -l pl.UTF-8
509 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
510 ograniczenie dostępu użytkowników proxy na podstawie ich
511 przynależności do grup UNIX.
514 Summary: NT domain group external ACL helper for Squid
515 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida
516 Group: Networking/Admin
517 Requires: %{name} = %{epoch}:%{version}-%{release}
519 %description wbinfo_acl
520 This is an external ACL module for the Squid proxy server to limit
521 access for users based on NT domain group membership using wbinfo.
523 %description wbinfo_acl -l pl.UTF-8
524 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
525 ograniczenie dostępu użytkowników proxy na podstawie ich
526 przynależności do grup w domenie NT przy użyciu wbinfo.
529 Summary: Squid session tracking external ACL group helper
530 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez śledzenie sesji
531 Group: Networking/Admin
532 Requires: %{name} = %{epoch}:%{version}-%{release}
534 %description session_acl
535 This helper maintains a concept of sessions by monitoring requests and
536 timing out sessions if no requests have been seen for the idle timeout
539 %description session_acl -l pl.UTF-8
540 Moduł oparty na koncepcji sesji, śledzący zapytania i wygaszający
541 sesje jeśli w określonym czasie nie widziano w ich obrębie kolejnych
544 %package edirectory_userip_acl
545 Summary: Squid eDirectory IP Lookup Helper
546 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez eDirectory
547 Group: Networking/Admin
548 Requires: %{name} = %{epoch}:%{version}-%{release}
550 %description edirectory_userip_acl
551 This is an external ACL module for the Squid proxy server to limit
552 access for users based on IP address lookup in eDirectory.
554 %description edirectory_userip_acl -l pl.UTF-8
555 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
556 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP
557 popranego z eDirectory.
559 %package kerberos_ldap_group_acl
560 Summary: Squid LDAP external acl group helper for Kerberos or NTLM credentials
561 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP/Kerberos/NTLM dla squida
562 Group: Networking/Admin
563 Requires: %{name} = %{epoch}:%{version}-%{release}
565 %description kerberos_ldap_group_acl
566 This is an external ACL module for the Squid proxy server to limit
567 access for users based on LDAP Kerberos or NTLM credentials.
569 %description kerberos_ldap_group_acl -l pl.UTF-8
570 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
571 ograniczenie dostępu użytkowników proxy na podstawie ich uprawnień
572 Kerberosowych lub NTLM-owych w LDAP.
575 Summary: Perl scripts for Squid
576 Summary(pl.UTF-8): Skrypty perlowe dla Squida
577 Group: Networking/Admin
578 Requires: %{name} = %{epoch}:%{version}-%{release}
581 This package contains Perl scripts and contributed programs for Squid.
583 %description scripts -l pl.UTF-8
584 Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida.
591 %{?with_combined_log:%patch4 -p1}
599 %{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts}/*.pl
608 --disable-strict-error-checking \
609 --with-default-user=squid \
610 --with-logdir=/var/log/squid \
611 --with-swapdir=/var/cache/squid \
612 --with-pidfile=/var/run/squid.pid \
613 --datadir=%{_datadir}/squid \
616 --enable-basic-auth-helpers \
617 --enable-ntlm-auth-helpers \
618 --enable-negotiate-auth-helpers \
619 --enable-digest-auth-helpers \
620 --enable-external-acl-helpers \
621 --enable-url-rewrite-helpers \
622 --enable-ntlm-fail-open \
623 --enable-cache-digests \
624 --enable-coss-aio-ops \
625 --enable-delay-pools \
626 --enable-err-language=English \
628 --enable-follow-x-forwarded-for \
629 --enable-forward-log \
630 --enable-forw-via-db \
634 --enable-icap-client \
637 --enable-kill-parent-hack \
638 --enable-large-cache-files \
639 --enable-linux-netfilter \
640 --disable-linux-tproxy \
641 --enable-multicast-miss \
642 --enable-referer-log \
643 --enable-removal-policies="heap,lru" \
644 --enable-storeio="aufs,diskd,rock,ufs" \
648 --enable-useragent-log \
649 --enable-x-accelerator-vary \
650 --localstatedir=/var \
651 --sysconfdir=%{_sysconfdir} \
652 --with-auth-on-acceleration \
661 rm -rf $RPM_BUILD_ROOT
662 install -d $RPM_BUILD_ROOT{%{_cgidir},%{_webapps}/%{_webapp}} \
663 $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \
664 $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \
665 $RPM_BUILD_ROOT%{_mandir}/man8 \
666 $RPM_BUILD_ROOT%{_datadir}/squid \
667 $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid \
668 $RPM_BUILD_ROOT%{systemdtmpfilesdir}
671 DESTDIR=$RPM_BUILD_ROOT
673 %{__cp} -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib
674 install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir}
676 install %{SOURCE6} $RPM_BUILD_ROOT/etc/pam.d/squid
677 touch $RPM_BUILD_ROOT/etc/security/blacklist.squid
679 install %{SOURCE8} $RPM_BUILD_ROOT%{systemdtmpfilesdir}/squid.conf
681 %{__mv} -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir}
682 %{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/apache.conf
683 %{__cp} -a %{SOURCE9} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/httpd.conf
684 %{__rm} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/cachemgr.conf.default
686 cd $RPM_BUILD_ROOT/etc/squid
687 %{__patch} -p0 < %{SOURCE4}
688 %{__rm} *.default squid.conf.documented
691 install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid
692 install %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/squid
693 install %{SOURCE5} $RPM_BUILD_ROOT/etc/logrotate.d/squid
695 touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log
697 %{__rm} $RPM_BUILD_ROOT%{_datadir}/squid/errors/{COPYRIGHT,TRANSLATORS}
699 # cp, to have re-entrant install
702 # We don't want Makefiles as docs...
703 %{__rm} docs/Makefile*
705 :> $RPM_BUILD_ROOT/var/cache/squid/netdb_state
706 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state
707 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean
708 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean
711 rm -rf $RPM_BUILD_ROOT
714 %groupadd -g 91 squid
715 %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid
716 %addusertogroup stats squid
718 [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || :
721 if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then
722 hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost'
723 echo visible_hostname $hostname >> /etc/squid/squid.conf
726 /sbin/chkconfig --add squid
727 if [ "$1" = "1" ]; then
728 /sbin/service squid init >&2
730 %service squid restart
733 if [ "$1" = "0" ]; then
734 /sbin/chkconfig --del squid
737 # nuke squid cache if uninstalling
738 rm -rf /var/cache/squid/??
742 if [ "$1" = "0" ]; then
747 %triggerpostun -- squid < 7:2.5.STABLE7-5
748 %addusertogroup stats squid
750 %triggerin cachemgr -- apache1 < 1.3.37-3, apache1-base
751 %webapp_register apache %{_webapp}
753 %triggerun cachemgr -- apache1 < 1.3.37-3, apache1-base
754 %webapp_unregister apache %{_webapp}
756 %triggerin cachemgr -- apache-base
757 %webapp_register httpd %{_webapp}
759 %triggerun cachemgr -- apache-base
760 %webapp_unregister httpd %{_webapp}
762 %triggerpostun -- cachemgr < 7:3.0.STABLE10-0.2
763 if [ -f %{_sysconfdir}/cachemgr.conf.rpmsave ]; then
764 cp -f %{_webapps}/%{_webapp}/cachemgr.conf{,.rpmsave}
765 mv -f %{_sysconfdir}/cachemgr.conf.rpmsave %{_webapps}/%{_webapp}/cachemgr.conf
769 %defattr(644,root,root,755)
770 %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART
771 %doc RELEASENOTES.html SPONSORS docs/* src/mib.txt book-full.html
772 %doc src/squid.conf.default src/squid.conf.documented src/mime.conf.default
773 %doc errors/TRANSLATORS
774 %attr(755,root,root) %{_bindir}/purge
775 %attr(755,root,root) %{_bindir}/squidclient
778 %attr(755,root,root) %{_libexecdir}/diskd
779 # YES, it has to be suid root, it sends ICMP packets.
780 %attr(4754,root,squid) %{_libexecdir}/pinger
781 %attr(755,root,root) %{_libexecdir}/unlinkd
782 %attr(755,root,root) %{_libexecdir}/ntlm_fake_auth
783 %attr(755,root,root) %{_libexecdir}/basic_fake_auth
784 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite
785 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite.sh
786 %attr(755,root,root) %{_libexecdir}/log_file_daemon
787 %attr(755,root,root) %{_sbindir}/squid
789 %attr(754,root,root) /etc/rc.d/init.d/squid
790 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid
791 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid
794 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf
795 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf
796 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/errorpage.css
798 %dir %{_datadir}/squid
799 %dir %{_datadir}/squid/errors
800 %{_datadir}/squid/icons
801 %{_datadir}/squid/mib.txt
802 %{_datadir}/squid/errors/templates
803 %lang(af) %{_datadir}/squid/errors/af
804 %lang(ar) %{_datadir}/squid/errors/ar
805 %lang(ar) %{_datadir}/squid/errors/ar-*
806 %lang(az) %{_datadir}/squid/errors/az
807 %lang(az) %{_datadir}/squid/errors/az-*
808 %lang(bg) %{_datadir}/squid/errors/bg
809 %lang(bg) %{_datadir}/squid/errors/bg-*
810 %lang(ca) %{_datadir}/squid/errors/ca
811 %lang(cs) %{_datadir}/squid/errors/cs
812 %lang(cs) %{_datadir}/squid/errors/cs-*
813 %lang(da) %{_datadir}/squid/errors/da
814 %lang(da) %{_datadir}/squid/errors/da-*
815 %lang(de) %{_datadir}/squid/errors/de
816 %lang(de) %{_datadir}/squid/errors/de-*
817 %lang(el) %{_datadir}/squid/errors/el
818 %lang(el) %{_datadir}/squid/errors/el-*
819 %{_datadir}/squid/errors/en
820 %{_datadir}/squid/errors/en-*
821 %lang(es) %{_datadir}/squid/errors/es
822 %lang(es) %{_datadir}/squid/errors/es-*
823 %lang(et) %{_datadir}/squid/errors/et
824 %lang(et) %{_datadir}/squid/errors/et-*
825 %lang(fa) %{_datadir}/squid/errors/fa
826 %lang(fa) %{_datadir}/squid/errors/fa-*
827 %lang(fi) %{_datadir}/squid/errors/fi
828 %lang(fi) %{_datadir}/squid/errors/fi-*
829 %lang(fr) %{_datadir}/squid/errors/fr
830 %lang(fr) %{_datadir}/squid/errors/fr-*
831 %lang(he) %{_datadir}/squid/errors/he
832 %lang(he) %{_datadir}/squid/errors/he-*
833 %lang(hu) %{_datadir}/squid/errors/hu
834 %lang(hu) %{_datadir}/squid/errors/hu-*
835 %lang(hy) %{_datadir}/squid/errors/hy
836 %lang(hy) %{_datadir}/squid/errors/hy-*
837 %lang(id) %{_datadir}/squid/errors/id
838 %lang(id) %{_datadir}/squid/errors/id-*
839 %lang(it) %{_datadir}/squid/errors/it
840 %lang(it) %{_datadir}/squid/errors/it-*
841 %lang(ja) %{_datadir}/squid/errors/ja
842 %lang(ja) %{_datadir}/squid/errors/ja-*
843 %lang(ko) %{_datadir}/squid/errors/ko
844 %lang(ko) %{_datadir}/squid/errors/ko-*
845 %lang(lt) %{_datadir}/squid/errors/lt
846 %lang(lt) %{_datadir}/squid/errors/lt-*
847 %lang(lv) %{_datadir}/squid/errors/lv
848 %lang(lv) %{_datadir}/squid/errors/lv-*
849 %lang(ms) %{_datadir}/squid/errors/ms
850 %lang(ms) %{_datadir}/squid/errors/ms-*
851 %lang(nl) %{_datadir}/squid/errors/nl
852 %lang(nl) %{_datadir}/squid/errors/nl-*
853 %lang(oc) %{_datadir}/squid/errors/oc
854 %lang(pl) %{_datadir}/squid/errors/pl
855 %lang(pl) %{_datadir}/squid/errors/pl-*
856 %lang(pt) %{_datadir}/squid/errors/pt
857 %lang(pt) %{_datadir}/squid/errors/pt-pt
858 %lang(pt_BR) %{_datadir}/squid/errors/pt-br
859 %lang(ro) %{_datadir}/squid/errors/ro
860 %lang(ro) %{_datadir}/squid/errors/ro-*
861 %lang(ru) %{_datadir}/squid/errors/ru
862 %lang(ru) %{_datadir}/squid/errors/ru-*
863 %lang(sk) %{_datadir}/squid/errors/sk
864 %lang(sk) %{_datadir}/squid/errors/sk-*
865 %lang(sk) %{_datadir}/squid/errors/sl
866 %lang(sk) %{_datadir}/squid/errors/sl-*
867 %lang(sr) %{_datadir}/squid/errors/sr
868 %lang(sr) %{_datadir}/squid/errors/sr-*
869 %lang(sv) %{_datadir}/squid/errors/sv
870 %lang(sv) %{_datadir}/squid/errors/sv-*
871 %lang(th) %{_datadir}/squid/errors/th
872 %lang(th) %{_datadir}/squid/errors/th-*
873 %lang(tr) %{_datadir}/squid/errors/tr
874 %lang(tr) %{_datadir}/squid/errors/tr-*
875 %lang(uk) %{_datadir}/squid/errors/uk
876 %lang(uk) %{_datadir}/squid/errors/uk-*
877 %lang(uz) %{_datadir}/squid/errors/uz
878 %lang(vi) %{_datadir}/squid/errors/vi
879 %lang(vi) %{_datadir}/squid/errors/vi-*
880 %lang(zh_CN) %{_datadir}/squid/errors/zh-cn
881 %lang(zh_CN) %{_datadir}/squid/errors/zh-sg
882 %lang(zh_CN) %{_datadir}/squid/errors/zh-tw
883 %lang(zh_TW) %{_datadir}/squid/errors/zh-hk
884 %lang(zh_TW) %{_datadir}/squid/errors/zh-mo
886 %{systemdtmpfilesdir}/squid.conf
887 %attr(770,root,squid) %dir /var/run/squid
889 %attr(770,root,squid) %dir /var/log/archive/squid
890 %attr(770,root,squid) %dir /var/log/squid
891 %attr(660,root,squid) %ghost /var/log/squid/*
893 %attr(770,root,squid) %dir /var/cache/squid
894 %ghost /var/cache/squid/netdb_state
895 %ghost /var/cache/squid/swap.state
896 %ghost /var/cache/squid/swap.state.clean
897 %ghost /var/cache/squid/swap.state.last-clean
898 %{_mandir}/man1/squidclient.1*
899 %{_mandir}/man8/squid.8*
902 %defattr(644,root,root,755)
903 %dir %attr(750,root,http) %{_webapps}/%{_webapp}
904 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/apache.conf
905 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/httpd.conf
906 %attr(640,root,http) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/cachemgr.conf
908 %attr(755,root,root) %{_cgidir}/cachemgr.cgi
909 %{_mandir}/man8/cachemgr.cgi.8*
912 %defattr(644,root,root,755)
913 %doc helpers/basic_auth/LDAP/README
914 %attr(755,root,root) %{_libexecdir}/basic_ldap_auth
915 %{_mandir}/man8/basic_ldap_auth.*
918 %defattr(644,root,root,755)
919 %config(noreplace) /etc/pam.d/squid
920 %config(noreplace) /etc/security/blacklist.squid
921 # it has to be suid root to access /etc/shadow
922 %attr(4755,root,root) %{_libexecdir}/basic_pam_auth
923 %{_mandir}/man8/basic_pam_auth.8*
926 %defattr(644,root,root,755)
927 %doc helpers/basic_auth/SMB/ChangeLog
928 %attr(755,root,root) %{_libexecdir}/basic_smb_auth*
931 %defattr(644,root,root,755)
932 %doc helpers/basic_auth/MSNT/README*
933 %doc helpers/basic_auth/MSNT-multi-domain/README*
934 %attr(755,root,root) %{_libexecdir}/basic_msnt_auth
935 %attr(755,root,root) %{_libexecdir}/basic_msnt_multi_domain_auth
936 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf
939 %defattr(644,root,root,755)
940 %attr(755,root,root) %{_libexecdir}/basic_nis_auth
943 %defattr(644,root,root,755)
944 %attr(755,root,root) %{_libexecdir}/basic_ncsa_auth
945 %{_mandir}/man8/basic_ncsa_auth.8*
948 %defattr(644,root,root,755)
949 %doc helpers/basic_auth/SASL/basic_sasl_auth.{conf,pam}
950 %attr(755,root,root) %{_libexecdir}/basic_sasl_auth
951 %{_mandir}/man8/basic_sasl_auth.8*
953 %files getpwname_auth
954 %defattr(644,root,root,755)
955 %attr(755,root,root) %{_libexecdir}/basic_getpwnam_auth
956 %{_mandir}/man8/basic_getpwnam_auth.8*
959 %defattr(644,root,root,755)
960 %attr(755,root,root) %{_libexecdir}/digest_file_auth
961 %{_mandir}/man8/digest_file_auth.8*
964 %defattr(644,root,root,755)
965 %doc helpers/negotiate_auth/kerberos/README
966 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth
967 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth_test
968 %{_mandir}/man8/negotiate_kerberos_auth.8*
971 %defattr(644,root,root,755)
972 %attr(755,root,root) %{_libexecdir}/ntlm_smb_lm_auth
975 %defattr(644,root,root,755)
976 %doc helpers/basic_auth/RADIUS/README
977 %attr(755,root,root) %{_libexecdir}/basic_radius_auth
978 %{_mandir}/man8/basic_radius_auth.8*
980 %files digest_ldap_auth
981 %defattr(644,root,root,755)
982 %attr(755,root,root) %{_libexecdir}/digest_ldap_auth
985 %defattr(644,root,root,755)
986 %attr(755,root,root) %{_libexecdir}/basic_db_auth
987 %{_mandir}/man8/basic_db_auth.8*
990 %defattr(644,root,root,755)
991 %{_libexecdir}/basic_pop3_auth
993 %files digest_edirectory_auth
994 %defattr(644,root,root,755)
995 %{_libexecdir}/digest_edirectory_auth
997 %files negotiate_wrapper_auth
998 %defattr(644,root,root,755)
999 %{_libexecdir}/negotiate_wrapper_auth
1002 %defattr(644,root,root,755)
1003 %doc helpers/external_acl/file_userip/example*
1004 %attr(755,root,root) %{_libexecdir}/ext_file_userip_acl
1005 %{_mandir}/man8/ext_file_userip_acl.*
1008 %defattr(644,root,root,755)
1009 %attr(755,root,root) %{_libexecdir}/ext_ldap_group_acl
1010 %{_mandir}/man8/ext_ldap_group_acl.*
1013 %defattr(644,root,root,755)
1014 %attr(755,root,root) %{_libexecdir}/ext_unix_group_acl
1015 %{_mandir}/man8/ext_unix_group_acl.*
1018 %defattr(644,root,root,755)
1019 %attr(755,root,root) %{_libexecdir}/ext_wbinfo_group_acl
1020 %{_mandir}/man8/ext_wbinfo_group_acl.8*
1023 %defattr(644,root,root,755)
1024 %attr(755,root,root) %{_libexecdir}/ext_session_acl
1025 %{_mandir}/man8/ext_session_acl.8*
1027 %files edirectory_userip_acl
1028 %defattr(644,root,root,755)
1029 %{_libexecdir}/ext_edirectory_userip_acl
1030 %{_mandir}/man8/ext_edirectory_userip_acl.8*
1032 %files kerberos_ldap_group_acl
1033 %defattr(644,root,root,755)
1034 %{_libexecdir}/ext_kerberos_ldap_group_acl
1037 %defattr(644,root,root,755)
1038 %attr(755,root,root) %{_libexecdir}/contrib
1039 %attr(755,root,root) %{_libexecdir}/AnnounceCache.pl
1040 %attr(755,root,root) %{_libexecdir}/access-log-matrix.pl
1041 %attr(755,root,root) %{_libexecdir}/cache-compare.pl
1042 %attr(755,root,root) %{_libexecdir}/cachetrace.pl
1043 %attr(755,root,root) %{_libexecdir}/calc-must-ids.pl
1044 %attr(755,root,root) %{_libexecdir}/cert_tool
1045 %attr(755,root,root) %{_libexecdir}/check_cache.pl
1046 %attr(755,root,root) %{_libexecdir}/fileno-to-pathname.pl
1047 %attr(755,root,root) %{_libexecdir}/find-alive.pl
1048 %attr(755,root,root) %{_libexecdir}/flag_truncs.pl
1049 %attr(755,root,root) %{_libexecdir}/helper-mux.pl
1050 %attr(755,root,root) %{_libexecdir}/icpserver.pl
1051 %attr(755,root,root) %{_libexecdir}/icp-test.pl
1052 %attr(755,root,root) %{_libexecdir}/tcp-banger.pl
1053 %attr(755,root,root) %{_libexecdir}/trace-job.pl
1054 %attr(755,root,root) %{_libexecdir}/trace-master.pl
1055 %attr(755,root,root) %{_libexecdir}/udp-banger.pl
1056 %attr(755,root,root) %{_libexecdir}/upgrade-1.0-store.pl