]>
Commit | Line | Data |
---|---|---|
f78f51ea | 1 | # TODO |
078f5547 | 2 | # - REVIEW patches and configuration |
1d9fd646 | 3 | # - use /usr/lib/cgi-bin instead of /home/services |
59113687 | 4 | # - ZPH TOS - |
5 | # For this to work correctly, you will need to patch your linux | |
6 | # kernel with the TOS preserving ZPH patch. | |
7 | # The kernel patch can be downloaded from http://zph.bratcheda.org | |
9f399e60 | 8 | # |
9 | # Conditional build: | |
632c8533 | 10 | %bcond_with combined_log # enables apache-like combined log format |
9f399e60 | 11 | # |
bbd3a6ea | 12 | Summary: SQUID Internet Object Cache |
42b7bd48 ER |
13 | Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher |
14 | Summary(pl.UTF-8): Uniwersalny serwer proxy-cache | |
15 | Summary(pt_BR.UTF-8): Cache Squid de objetos Internet | |
16 | Summary(ru.UTF-8): Squid - кэш объектов Internet | |
17 | Summary(uk.UTF-8): Squid - кеш об'єктів Internet | |
18 | Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器 | |
bbd3a6ea | 19 | Name: squid |
d0943e21 | 20 | Version: 3.0.STABLE9 |
078f5547 AM |
21 | # review patches before stable release |
22 | Release: 0.1 | |
80d0d8a3 | 23 | Epoch: 7 |
c0986f46 | 24 | License: GPL v2 |
36fddb2a | 25 | Group: Networking/Daemons |
078f5547 | 26 | Source0: http://www.squid-cache.org/Versions/v3/3.0/%{name}-%{version}.tar.bz2 |
d0943e21 | 27 | # Source0-md5: 4009abfbf33d86f40db3ec4280716a0e |
d114d8e2 JB |
28 | # http://www.squid-cache.org/Doc/FAQ/FAQ.tar.gz |
29 | Source1: %{name}-FAQ.tar.gz | |
30 | # Source1-md5: cb9a955f8cda9cc166e086fccd412a43 | |
bbd3a6ea | 31 | Source2: %{name}.init |
29ca562c | 32 | Source3: %{name}.sysconfig |
d114d8e2 | 33 | # http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip |
078f5547 | 34 | Source4: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip |
d114d8e2 | 35 | # Source4-md5: 4f3b6dab1de9cbb847df89d8b417378a |
590e6457 | 36 | Source5: %{name}.conf.patch |
27a7ed0d | 37 | Source6: %{name}.logrotate |
3c0645bd | 38 | Source7: %{name}.pamd |
f1c5f539 | 39 | # Bug fixes from Squid home page, please include URL |
68f70685 | 40 | # lets have fun - there is no patches... yet:) |
8f8faf3f | 41 | # Other patches: |
59113687 | 42 | # http://zph.bratcheda.org/ |
68f70685 ER |
43 | Patch0: %{name}_hit_miss_mark.patch |
44 | Patch1: %{name}-fhs.patch | |
45 | Patch2: %{name}-location.patch | |
68f70685 ER |
46 | Patch4: %{name}-libnsl_fixes.patch |
47 | Patch5: %{name}-crash-on-ENOSPC.patch | |
68f70685 ER |
48 | Patch7: %{name}-empty-referer.patch |
49 | Patch8: %{name}-2.5.STABLE4-apache-like-combined-log.patch | |
50 | Patch9: %{name}-auth_on_acceleration.patch | |
2655eecf | 51 | Patch10: %{name}-ppc-m32.patch |
f0a5f35f | 52 | URL: http://www.squid-cache.org/ |
7488bd27 | 53 | BuildRequires: autoconf |
4b4ba0a1 | 54 | BuildRequires: automake |
0f1815c6 | 55 | BuildRequires: cyrus-sasl-devel >= 2.1.0 |
427f606c | 56 | BuildRequires: db-devel |
f89ac51f | 57 | BuildRequires: libltdl-devel |
0542d8f7 | 58 | BuildRequires: openldap-devel >= 2.3.0 |
63e75b9c | 59 | BuildRequires: openssl-devel >= 0.9.7d |
29294f93 | 60 | BuildRequires: pam-devel |
7de7a1e8 | 61 | BuildRequires: perl-base |
2210ba0e | 62 | BuildRequires: rpmbuild(macros) >= 1.268 |
349b995c | 63 | BuildRequires: sed >= 4.0 |
115a61f1 | 64 | BuildRequires: unzip |
2a8ec884 | 65 | Requires(post): /bin/hostname |
b3a4b715 JB |
66 | Requires(post): fileutils |
67 | Requires(post): findutils | |
d6013865 | 68 | Requires(post): grep |
2a8ec884 | 69 | Requires(post,preun): /sbin/chkconfig |
b3a4b715 JB |
70 | Requires(postun): /usr/sbin/groupdel |
71 | Requires(postun): /usr/sbin/userdel | |
2a8ec884 ER |
72 | Requires(pre): /bin/id |
73 | Requires(pre): /usr/bin/getgid | |
74 | Requires(pre): /usr/lib/rpm/user_group.sh | |
75 | Requires(pre): /usr/sbin/groupadd | |
76 | Requires(pre): /usr/sbin/useradd | |
77 | Requires: rc-scripts >= 0.2.0 | |
78 | Requires: setup >= 2.4.6 | |
93090cc0 | 79 | Provides: group(squid) |
c93c3680 | 80 | # epoll enabled by default: |
d765f971 | 81 | Requires: uname(release) >= 2.6 |
93090cc0 | 82 | Provides: user(squid) |
5e26975c | 83 | Conflicts: logrotate < 3.7-4 |
f01c9d57 | 84 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
e1baf3c8 | 85 | |
7480ed4d AF |
86 | %define _libexecdir %{_libdir}/%{name} |
87 | %define _sysconfdir /etc/%{name} | |
e986fc96 | 88 | %define _cgidir /home/services/httpd/cgi-bin |
7480ed4d | 89 | |
e1baf3c8 | 90 | %description |
36fddb2a | 91 | Squid is a high-performance proxy caching server for web clients, |
92 | supporting FTP, gopher, and HTTP data objects. Unlike traditional | |
93 | caching software, Squid handles all requests in a single, | |
94 | non-blocking, I/O-driven process. Squid keeps meta data and especially | |
95 | hot objects cached in RAM, caches DNS lookups, supports non-blocking | |
96 | DNS lookups, and implements negative caching of failed requests. If | |
97 | you are tight on memory, check out the NOVM version of this package. | |
98 | Squid supports SSL, extensive access controls, and full request | |
99 | logging. By using the lightweight Internet Cache Protocol, Squid | |
8f00d34a | 100 | caches can be arranged in a hierarchy or mesh for additional bandwidth |
36fddb2a | 101 | savings. Squid consists of a main server program squid, a Domain Name |
102 | System lookup program dnsserver, a program for retrieving FTP data | |
103 | ftpget, and some management and client tools. When squid starts up, it | |
104 | spawns a configurable number of dnsserver processes, each of which can | |
105 | perform a single, blocking Domain Name System (DNS) lookup. This | |
106 | reduces the amount of time the cache waits for DNS lookups. Squid is | |
107 | derived from the ARPA-funded Harvest project. | |
e1baf3c8 | 108 | |
1cf03309 JR |
109 | %description -l es.UTF-8 |
110 | Squid es un servidor proxy con caché de alto desempeño para clientes | |
4b571a16 | 111 | web, soportando FTP, gopher y HTTP. Diferentemente de softwares |
1cf03309 JR |
112 | tradicionales de caché squid manipula todas las requisiciones en un |
113 | único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y | |
114 | objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché | |
4b571a16 | 115 | de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa |
1cf03309 JR |
116 | un caché negativo de requisiciones que fallen. Si tiene poca memoria |
117 | da un vistazo en la versión NOVM de este paquete. También soporta SSL, | |
4b571a16 | 118 | controles extensivos de acceso y registro (log) completo de las |
119 | requisiciones. Usando el ligero Protocolo de Caches Internet (ICP) | |
1cf03309 JR |
120 | puede ser usado en una jerarquía de servidores para mayor ahorro de la |
121 | banda de comunicación. Está compuesto del programa squid (servidor | |
122 | principal), del programa dnsserver (para resolución DNS), del programa | |
4b571a16 | 123 | ftpget (para transmisiones ftp) y otras herramientas clientes y para |
1cf03309 | 124 | administración. Cuando squid se inicia, dispara un número configurable |
4b571a16 | 125 | de procesos dnsserver, cada uno pudiendo ejecutar solamente una |
1cf03309 JR |
126 | resolución DNS con poder de bloquear. Esto reduce el tiempo que el |
127 | caché espera por resoluciones DNS. Fue derivado del proyecto Harvest, | |
4b571a16 | 128 | financiado por la ARPA. |
129 | ||
1cf03309 JR |
130 | %description -l pl.UTF-8 |
131 | Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW, | |
132 | klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w | |
133 | pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla | |
134 | SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych | |
135 | danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer | |
136 | squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet | |
137 | squid obejmuje: główny program serwera squid, program dostarczający | |
138 | informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz | |
139 | pomocnicze programy do zarządzania. Squid wywodzi się ze | |
36fddb2a | 140 | sponsorowanego przez ARPA projektu Harvest. |
e1baf3c8 | 141 | |
1cf03309 JR |
142 | %description -l pt_BR.UTF-8 |
143 | O Squid é um servidor proxy com cache de alta performance para | |
4b571a16 | 144 | clientes web, suportando FTP, gopher e HTTP. Diferentemente de |
1cf03309 JR |
145 | softwares tradicionais de cache o squid manipula todas as requisições |
146 | em um único processo sem bloqueios, direcionado a E/S. | |
4b571a16 | 147 | |
1cf03309 JR |
148 | Mantém meta dados e objetos freqüentemente pedidos num cache em |
149 | memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem | |
150 | bloqueio e implementa um cache negativo de requisições que falharem. | |
151 | Se você tem pouca memória dê uma olhada na versão NOVM deste pacote. | |
4b571a16 | 152 | |
1cf03309 JR |
153 | Também suporta SSL, controles extensivos de acesso e registro (log) |
154 | completo das requisições. Usando o leve Protocolo de Caches Internet | |
4b571a16 | 155 | (ICP) ele pode ser usado em uma hierarquia de servidores para maior |
1cf03309 | 156 | economia de banda de comunicação. |
4b571a16 | 157 | |
158 | Ele consiste do programa squid (servidor principal), do programa | |
1cf03309 | 159 | dnsserver (para resolução DNS), do programa ftpget (para transmissões |
4b571a16 | 160 | ftp) e outras ferramentas clientes e para gerenciamento. Quando o |
1cf03309 JR |
161 | squid é inicializado ele dispara um número configurável de processos |
162 | dnsserver, cada um podendo executar somente uma resolução DNS | |
163 | bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS. | |
4b571a16 | 164 | |
165 | Foi derivado do projeto Harvest, financiado pela ARPA. | |
166 | ||
1cf03309 JR |
167 | %description -l ru.UTF-8 |
168 | Squid - это высокопроизводительный кэширующий прокси-сервер для | |
169 | клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В | |
170 | отличие от традиционных кэширующих программ, Squid обрабатывает все | |
171 | запросы при помощи одного неблокирующегося, управляемого | |
172 | вводом-выводом процесса. | |
735979dc | 173 | |
1cf03309 | 174 | Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб |
735979dc | 175 | (Netdb). |
176 | ||
1cf03309 JR |
177 | %description -l uk.UTF-8 |
178 | Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує | |
179 | об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних | |
180 | кешуючих програм, Squid обробляє всі запити за допомогою одного | |
181 | неблокуючого, керованого вводом-виводом процесу. | |
735979dc | 182 | |
1cf03309 | 183 | Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб |
735979dc | 184 | (Netdb). |
185 | ||
29ca562c | 186 | %package cachemgr |
187 | Summary: CGI script for Squid management | |
42b7bd48 | 188 | Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW |
29ca562c | 189 | Group: Networking/Admin |
f0a5f35f | 190 | Requires: %{name} = %{epoch}:%{version}-%{release} |
79634bd7 | 191 | Requires: webserver |
29ca562c | 192 | |
193 | %description cachemgr | |
36fddb2a | 194 | Cachemgr.cgi is a CGI script that allows administrator to chceck |
195 | various informations about Squid via WWW. | |
29ca562c | 196 | |
1cf03309 JR |
197 | %description cachemgr -l pl.UTF-8 |
198 | Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi | |
199 | zapoznać się z informacjami o pracy Squida poprzez WWW. | |
29ca562c | 200 | |
ce1cc056 | 201 | %package ldap_auth |
8acaa3f5 | 202 | Summary: LDAP authentication helper for Squid |
42b7bd48 | 203 | Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida |
ce1cc056 | 204 | Group: Networking/Admin |
f0a5f35f | 205 | Requires: %{name} = %{epoch}:%{version}-%{release} |
ce1cc056 | 206 | |
207 | %description ldap_auth | |
208 | This Squid helper allows authentication against LDAP directories using | |
209 | the "simple authentication" (plain-text). | |
210 | ||
1cf03309 JR |
211 | %description ldap_auth -l pl.UTF-8 |
212 | Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego | |
632c8533 | 213 | uwierzytelniania (otwartym tekstem). |
8acaa3f5 | 214 | |
ce1cc056 | 215 | %package pam_auth |
8acaa3f5 | 216 | Summary: PAM authentication helper for Squid |
42b7bd48 | 217 | Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida |
ce1cc056 | 218 | Group: Networking/Admin |
f0a5f35f | 219 | Requires: %{name} = %{epoch}:%{version}-%{release} |
891c08b7 | 220 | Requires: pam >= 0.77.3 |
ce1cc056 | 221 | |
222 | %description pam_auth | |
223 | This program authenticates users against a PAM configured | |
224 | authentication service "squid". This allows you to authenticate Squid | |
225 | users to any authentication source for which you have a PAM module. | |
226 | ||
1cf03309 JR |
227 | %description pam_auth -l pl.UTF-8 |
228 | Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym | |
229 | źródle posiadającym moduł PAM. | |
8acaa3f5 | 230 | |
ce1cc056 | 231 | %package smb_auth |
8acaa3f5 | 232 | Summary: SMB authentication helper for Squid |
42b7bd48 | 233 | Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida |
ce1cc056 | 234 | Group: Networking/Admin |
f0a5f35f | 235 | Requires: %{name} = %{epoch}:%{version}-%{release} |
ce1cc056 | 236 | |
237 | %description smb_auth | |
238 | This is a proxy authentication module. With smb_auth you can | |
239 | authenticate proxy users against an SMB server like Windows NT or | |
240 | Samba. | |
241 | ||
1cf03309 JR |
242 | %description smb_auth -l pl.UTF-8 |
243 | To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można | |
244 | uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy | |
632c8533 | 245 | Samba. |
8acaa3f5 | 246 | |
7140e072 PG |
247 | %package msnt_auth |
248 | Summary: MSNT domain authentication helper for Squid | |
42b7bd48 | 249 | Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida |
7140e072 | 250 | Group: Networking/Admin |
f0a5f35f | 251 | Requires: %{name} = %{epoch}:%{version}-%{release} |
7140e072 PG |
252 | |
253 | %description msnt_auth | |
5f1d3951 | 254 | This is an authentication module for the Squid proxy server to |
7140e072 PG |
255 | authenticate users on an NT domain. |
256 | ||
1cf03309 JR |
257 | %description msnt_auth -l pl.UTF-8 |
258 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
259 | uwierzytelnianie użytkowników proxy w domenie NT. | |
7140e072 PG |
260 | |
261 | %package yp_auth | |
262 | Summary: YP authentication helper for Squid | |
42b7bd48 | 263 | Summary(pl.UTF-8): Obsługa uwierzytelniania YP dla squida |
7140e072 | 264 | Group: Networking/Admin |
f0a5f35f | 265 | Requires: %{name} = %{epoch}:%{version}-%{release} |
7140e072 PG |
266 | |
267 | %description yp_auth | |
268 | This is an authentication module for the Squid proxy server to | |
269 | authenticate users on YP. | |
270 | ||
1cf03309 JR |
271 | %description yp_auth -l pl.UTF-8 |
272 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
273 | uwierzytelnianie użytkowników proxy poprzez YP. | |
7140e072 | 274 | |
84c99453 JR |
275 | %package ncsa_auth |
276 | Summary: NCSA httpd style authentication helper for Squid | |
42b7bd48 | 277 | Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida |
84c99453 | 278 | Group: Networking/Admin |
f0a5f35f | 279 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
280 | |
281 | %description ncsa_auth | |
282 | This module uses a NCSA httpd style password file for authentication. | |
283 | ||
1cf03309 JR |
284 | %description ncsa_auth -l pl.UTF-8 |
285 | Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd. | |
84c99453 JR |
286 | |
287 | %package sasl_auth | |
288 | Summary: SASL authentication helper for Squid | |
42b7bd48 | 289 | Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida |
84c99453 | 290 | Group: Networking/Admin |
f0a5f35f | 291 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
292 | |
293 | %description sasl_auth | |
294 | This is an authentication module for the Squid proxy server to | |
295 | authenticate users via SASL. | |
296 | ||
1cf03309 JR |
297 | %description sasl_auth -l pl.UTF-8 |
298 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
299 | uwierzytelnianie użytkowników proxy poprzez SASL. | |
84c99453 | 300 | |
84c99453 JR |
301 | %package getpwname_auth |
302 | Summary: getpwname authentication helper for Squid | |
42b7bd48 | 303 | Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida |
84c99453 | 304 | Group: Networking/Admin |
f0a5f35f | 305 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
306 | |
307 | %description getpwname_auth | |
308 | This is an authentication module for the Squid proxy server to | |
309 | authenticate users using getpwname. | |
310 | ||
1cf03309 JR |
311 | %description getpwname_auth -l pl.UTF-8 |
312 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
313 | uwierzytelnianie użytkowników proxy poprzez getpwname. | |
84c99453 JR |
314 | |
315 | %package passwd_auth | |
316 | Summary: passwd authentication helper for Squid | |
42b7bd48 | 317 | Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida |
84c99453 | 318 | Group: Networking/Admin |
f0a5f35f | 319 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
320 | |
321 | %description passwd_auth | |
322 | This is an authentication module for the Squid proxy server to | |
323 | authenticate users with separate passwd file. | |
324 | ||
1cf03309 JR |
325 | %description passwd_auth -l pl.UTF-8 |
326 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
327 | uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd. | |
84c99453 JR |
328 | |
329 | %package ntlm_auth | |
330 | Summary: NTLM authentication helper for Squid | |
42b7bd48 | 331 | Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida |
84c99453 | 332 | Group: Networking/Admin |
f0a5f35f | 333 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
334 | |
335 | %description ntlm_auth | |
336 | This is an authentication module for the Squid proxy server to | |
337 | authenticate users on NTLM. | |
338 | ||
1cf03309 JR |
339 | %description ntlm_auth -l pl.UTF-8 |
340 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
341 | uwierzytelnianie użytkowników proxy poprzez NTLM. | |
84c99453 | 342 | |
39607b78 | 343 | %package digest_ldap_auth |
344 | Summary: LDAP authentication helper for Squid | |
42b7bd48 | 345 | Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida |
39607b78 | 346 | Group: Networking/Admin |
347 | Requires: %{name} = %{epoch}:%{version}-%{release} | |
348 | ||
349 | %description digest_ldap_auth | |
350 | This is an authentication module for the Squid proxy server to | |
351 | authenticate users on LDAP. | |
352 | ||
1cf03309 JR |
353 | %description digest_ldap_auth -l pl.UTF-8 |
354 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
355 | uwierzytelnianie użytkowników proxy poprzez LDAP. | |
39607b78 | 356 | |
84c99453 JR |
357 | %package ip_acl |
358 | Summary: IP external ACL helper for Squid | |
42b7bd48 | 359 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida |
84c99453 | 360 | Group: Networking/Admin |
f0a5f35f | 361 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
362 | |
363 | %description ip_acl | |
f0a5f35f | 364 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 365 | access for users based on IP address. |
84c99453 | 366 | |
1cf03309 JR |
367 | %description ip_acl -l pl.UTF-8 |
368 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
369 | ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP. | |
84c99453 JR |
370 | |
371 | %package ldap_acl | |
372 | Summary: LDAP group external ACL helper for Squid | |
42b7bd48 | 373 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida |
84c99453 | 374 | Group: Networking/Admin |
f0a5f35f | 375 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
376 | |
377 | %description ldap_acl | |
f0a5f35f | 378 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 379 | access for users based on LDAP group membership. |
84c99453 | 380 | |
1cf03309 JR |
381 | %description ldap_acl -l pl.UTF-8 |
382 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
383 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
384 | przynależności do grup LDAP. | |
84c99453 JR |
385 | |
386 | %package unix_acl | |
387 | Summary: UNIX group external ACL helper for Squid | |
42b7bd48 | 388 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida |
84c99453 | 389 | Group: Networking/Admin |
f0a5f35f | 390 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
391 | |
392 | %description unix_acl | |
f0a5f35f | 393 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 394 | access for users based on UNIX group membership. |
84c99453 | 395 | |
1cf03309 JR |
396 | %description unix_acl -l pl.UTF-8 |
397 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
398 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
399 | przynależności do grup UNIX. | |
84c99453 JR |
400 | |
401 | %package wbinfo_acl | |
402 | Summary: NT domain group external ACL helper for Squid | |
42b7bd48 | 403 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida |
84c99453 | 404 | Group: Networking/Admin |
f0a5f35f | 405 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
406 | |
407 | %description wbinfo_acl | |
f0a5f35f | 408 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 409 | access for users based on NT domain group membership using wbinfo. |
84c99453 | 410 | |
1cf03309 JR |
411 | %description wbinfo_acl -l pl.UTF-8 |
412 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
413 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
414 | przynależności do grup w domenie NT przy użyciu wbinfo. | |
84c99453 | 415 | |
39607b78 | 416 | %package session_acl |
417 | Summary: Squid session tracking external acl group helper | |
84c99453 | 418 | Group: Networking/Admin |
f0a5f35f | 419 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 | 420 | |
39607b78 | 421 | %description session_acl |
68f70685 ER |
422 | This helper maintains a concept of sessions by monitoring requests and |
423 | timing out sessions if no requests have been seen for the idle timeout | |
39607b78 | 424 | timer. |
84c99453 | 425 | |
4c0ef65a | 426 | %package scripts |
c8e93bac | 427 | Summary: Perl scripts for Squid |
42b7bd48 | 428 | Summary(pl.UTF-8): Skrypty perlowe dla Squida |
4c0ef65a ER |
429 | Group: Networking/Admin |
430 | Requires: %{name} = %{epoch}:%{version}-%{release} | |
431 | ||
432 | %description scripts | |
c8e93bac JB |
433 | This package contains Perl scripts and contributed programs for Squid. |
434 | ||
1cf03309 | 435 | %description scripts -l pl.UTF-8 |
c8e93bac | 436 | Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida. |
4c0ef65a | 437 | |
e1baf3c8 | 438 | %prep |
d114d8e2 | 439 | %setup -q -a1 -a4 |
8f8faf3f | 440 | # Bug fixes from Squid home page: |
960d91d2 | 441 | |
3de753ac | 442 | # Other patches: |
59113687 | 443 | %patch0 -p1 |
2655eecf | 444 | %patch1 -p1 |
1b310cfb | 445 | %patch2 -p1 |
dc28faf5 | 446 | %patch4 -p1 |
447 | %patch5 -p1 | |
078f5547 | 448 | #%patch7 -p1 |
2655eecf | 449 | %{?with_combined_log:%patch8 -p1} |
450 | %patch9 -p1 | |
7b66d9b5 | 451 | %ifarch ppc |
2655eecf | 452 | %patch10 -p1 |
7b66d9b5 | 453 | %endif |
dae9f88a | 454 | |
349b995c ER |
455 | %{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts,helpers/*/*}/*.pl |
456 | ||
e1baf3c8 | 457 | %build |
dc28faf5 | 458 | %{__libtoolize} |
3de753ac | 459 | %{__aclocal} |
da6a399a | 460 | %{__autoconf} |
e5759917 | 461 | %{__autoheader} |
3de753ac | 462 | %{__automake} |
7480ed4d | 463 | %configure \ |
194fe678 | 464 | --datadir=%{_datadir}/squid \ |
03ee6af7 | 465 | --enable-arp-acl \ |
f48cdc06 | 466 | --enable-auth="basic,digest,negotiate,ntlm" \ |
467 | --enable-basic-auth-helpers="LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,getpwnam,multi-domain-NTLM" \ | |
078f5547 AM |
468 | --enable-cache-digests \ |
469 | --enable-coss-aio-ops \ | |
470 | --enable-delay-pools \ | |
f48cdc06 | 471 | --enable-digest-auth-helpers="ldap,password" \ |
078f5547 AM |
472 | --enable-err-language=English \ |
473 | --enable-esi \ | |
f48cdc06 | 474 | --enable-external-acl-helpers="ip_user,ldap_group,session,unix_group,wbinfo_group" \ |
078f5547 AM |
475 | --enable-follow-x-forwarded-for \ |
476 | --enable-forward-log \ | |
477 | --enable-forw-via-db \ | |
478 | --enable-htcp \ | |
479 | --enable-icap-client \ | |
480 | --enable-icmp \ | |
481 | --enable-kill-parent-hack \ | |
482 | --enable-large-cache-files \ | |
483 | --enable-linux-netfilter \ | |
484 | --enable-linux-tproxy \ | |
485 | --enable-multicast-miss \ | |
f48cdc06 | 486 | --enable-ntlm-auth-helpers="SMB,fakeauth,no_check" \ |
487 | --enable-ntlm-fail-open \ | |
078f5547 AM |
488 | --enable-referer-log \ |
489 | --enable-removal-policies="heap,lru" \ | |
490 | --enable-snmp \ | |
491 | --enable-ssl \ | |
dc28faf5 | 492 | --enable-storeio="aufs,diskd,null,ufs" \ |
078f5547 | 493 | --enable-useragent-log \ |
194fe678 | 494 | --enable-x-accelerator-vary \ |
68c5bbf6 PG |
495 | --localstatedir=/var \ |
496 | --sysconfdir=%{_sysconfdir} \ | |
e5759917 | 497 | --with-auth-on-acceleration \ |
4dcb690c | 498 | --with-large-files \ |
078f5547 | 499 | --with-maxfd=32768 \ |
59113687 | 500 | --with-pthreads \ |
501 | --enable-zph-qos | |
e1baf3c8 | 502 | |
8acaa3f5 | 503 | %{__make} |
e1baf3c8 | 504 | |
505 | %install | |
506 | rm -rf $RPM_BUILD_ROOT | |
e986fc96 | 507 | install -d $RPM_BUILD_ROOT%{_cgidir} \ |
3c0645bd | 508 | $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \ |
24c96395 | 509 | $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \ |
f0a5f35f | 510 | $RPM_BUILD_ROOT%{_mandir}/man8 \ |
29ca562c | 511 | $RPM_BUILD_ROOT%{_datadir}/squid \ |
e62e100a | 512 | $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid |
e1baf3c8 | 513 | |
77f75ffe | 514 | %{__make} install \ |
3de753ac | 515 | DESTDIR=$RPM_BUILD_ROOT |
e1baf3c8 | 516 | |
daed1adf | 517 | cp -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib |
2fe495a6 | 518 | install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir} |
29ca562c | 519 | |
24c96395 | 520 | install %{SOURCE7} $RPM_BUILD_ROOT/etc/pam.d/squid |
3c0645bd | 521 | touch $RPM_BUILD_ROOT/etc/security/blacklist.squid |
ce1cc056 | 522 | |
e986fc96 | 523 | mv -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir} |
e1baf3c8 | 524 | |
590e6457 | 525 | cd $RPM_BUILD_ROOT/etc/squid |
fde47eed | 526 | cp -f squid.conf{,.default} |
0542d8f7 ER |
527 | %{__patch} -p0 < %{SOURCE5} |
528 | rm -f *~ *.orig | |
590e6457 | 529 | cd - |
530 | ||
29ca562c | 531 | install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid |
532 | install %{SOURCE3} $RPM_BUILD_ROOT/etc/sysconfig/squid | |
29ca562c | 533 | install %{SOURCE6} $RPM_BUILD_ROOT/etc/logrotate.d/squid |
e1baf3c8 | 534 | |
29ca562c | 535 | touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log |
bbd3a6ea | 536 | |
29ca562c | 537 | # These two files start squid. They are replaced by /etc/rc.d/init.d script. |
0d89ccc2 | 538 | rm -f $RPM_BUILD_ROOT%{_bindir}/R* |
e1baf3c8 | 539 | |
1c1894b4 ER |
540 | # cp, to have re-entrant install |
541 | rm -rf docs | |
542 | cp -a doc docs | |
68c5bbf6 | 543 | # dunno why, but manual is not installed |
1c1894b4 | 544 | mv docs/squid.8 $RPM_BUILD_ROOT%{_mandir}/man8 |
68c5bbf6 | 545 | # We don't want Makefiles as docs... |
1c1894b4 | 546 | rm -f docs/Makefile* |
68c5bbf6 | 547 | |
f0a5f35f | 548 | # We don't like message: rpm found unpackaged files ... |
acf3cdb9 TP |
549 | rm -f $RPM_BUILD_ROOT/etc/squid/msntauth.conf.default \ |
550 | $RPM_BUILD_ROOT/etc/squid/squid.conf.orig | |
f0a5f35f | 551 | |
1c1894b4 ER |
552 | > $RPM_BUILD_ROOT/var/cache/squid/netdb_state |
553 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state | |
554 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean | |
555 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean | |
556 | ||
fde47eed | 557 | %clean |
7140e072 | 558 | rm -rf $RPM_BUILD_ROOT |
fde47eed | 559 | |
3e5c79df | 560 | %pre |
9cc7d20f ER |
561 | %groupadd -g 91 squid |
562 | %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid | |
563 | %addusertogroup stats squid | |
564 | ||
349b995c | 565 | [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || : |
3e5c79df | 566 | |
e1baf3c8 | 567 | %post |
1e0573f8 | 568 | if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then |
b47ca9e4 ER |
569 | hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost' |
570 | echo visible_hostname $hostname >> /etc/squid/squid.conf | |
1e0573f8 | 571 | fi |
572 | ||
2210ba0e | 573 | /sbin/chkconfig --add squid |
c98ab205 | 574 | if [ "$1" = "1" ]; then |
9cac9077 | 575 | /sbin/service squid init >&2 |
c98ab205 | 576 | fi |
2210ba0e | 577 | %service squid restart |
29ca562c | 578 | |
579 | %preun | |
688434c4 | 580 | if [ "$1" = "0" ]; then |
c98ab205 | 581 | /sbin/chkconfig --del squid |
2210ba0e | 582 | %service squid stop |
1c1894b4 ER |
583 | |
584 | # nuke squid cache if uninstalling | |
585 | rm -rf /var/cache/squid/?? | |
e1baf3c8 | 586 | fi |
587 | ||
b3a4b715 JB |
588 | %postun |
589 | if [ "$1" = "0" ]; then | |
93090cc0 | 590 | %userremove squid |
591 | %groupremove squid | |
b3a4b715 | 592 | fi |
5f1d3951 | 593 | |
9cac9077 ER |
594 | %triggerpostun -- squid < 7:2.5.STABLE7-5 |
595 | %addusertogroup stats squid | |
596 | ||
e1baf3c8 | 597 | %files |
598 | %defattr(644,root,root,755) | |
d114d8e2 | 599 | %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART RELEASENOTES.html SPONSORS |
1c1894b4 | 600 | %doc docs/* src/mib.txt FAQ*.html book-full.html |
194fe678 | 601 | %attr(755,root,root) %{_bindir}/squidclient |
078f5547 | 602 | %attr(755,root,root) %{_libexecdir}/diskd |
dad16a56 | 603 | # YES, it has to be suid root, it sends ICMP packets. |
194fe678 AM |
604 | %attr(4754,root,squid) %{_libexecdir}/pinger |
605 | %attr(755,root,root) %{_libexecdir}/unlinkd | |
f0a5f35f | 606 | %attr(755,root,root) %{_libexecdir}/fakeauth_auth |
3ef3ad78 | 607 | %attr(755,root,root) %{_sbindir}/* |
bbd3a6ea | 608 | |
d765f971 | 609 | %dir %{_sysconfdir} |
e1baf3c8 | 610 | |
e0a16a3e | 611 | %attr(754,root,root) /etc/rc.d/init.d/squid |
8d2e1c07 | 612 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid |
6b2e091c | 613 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid |
dad16a56 | 614 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf |
3e5c79df | 615 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf |
29ca562c | 616 | %attr(640,root,root) %{_sysconfdir}/mime.conf.default |
617 | %attr(640,root,root) %{_sysconfdir}/squid.conf.default | |
618 | ||
7134c92f | 619 | %dir %{_datadir}/squid |
56db77a9 | 620 | %dir %{_datadir}/squid/errors |
29ca562c | 621 | %{_datadir}/squid/icons |
622 | %{_datadir}/squid/mib.txt | |
6ac74d17 | 623 | %lang(am) %{_datadir}/squid/errors/Armenian |
39607b78 | 624 | %lang(az) %{_datadir}/squid/errors/Azerbaijani |
daed1adf | 625 | %lang(bg) %{_datadir}/squid/errors/Bulgarian |
260e8a82 | 626 | %lang(ca) %{_datadir}/squid/errors/Catalan |
daed1adf JR |
627 | %lang(cs) %{_datadir}/squid/errors/Czech |
628 | %lang(da) %{_datadir}/squid/errors/Danish | |
629 | %lang(nl) %{_datadir}/squid/errors/Dutch | |
630 | %{_datadir}/squid/errors/English | |
631 | %lang(et) %{_datadir}/squid/errors/Estonian | |
632 | %lang(fi) %{_datadir}/squid/errors/Finnish | |
633 | %lang(fr) %{_datadir}/squid/errors/French | |
634 | %lang(de) %{_datadir}/squid/errors/German | |
2011b5a0 | 635 | %lang(el) %{_datadir}/squid/errors/Greek |
2e235151 | 636 | %lang(he) %{_datadir}/squid/errors/Hebrew |
daed1adf JR |
637 | %lang(hu) %{_datadir}/squid/errors/Hungarian |
638 | %lang(it) %{_datadir}/squid/errors/Italian | |
639 | %lang(ja) %{_datadir}/squid/errors/Japanese | |
640 | %lang(ko) %{_datadir}/squid/errors/Korean | |
acd983a2 | 641 | %lang(lt) %{_datadir}/squid/errors/Lithuanian |
daed1adf JR |
642 | %lang(pl) %{_datadir}/squid/errors/Polish |
643 | %lang(pt) %{_datadir}/squid/errors/Portuguese | |
644 | %lang(ro) %{_datadir}/squid/errors/Romanian | |
645 | %lang(ru) %{_datadir}/squid/errors/Russian-1251 | |
646 | %lang(ru) %{_datadir}/squid/errors/Russian-koi8-r | |
b56dd683 | 647 | %lang(zh_CN) %{_datadir}/squid/errors/Simplify_Chinese |
daed1adf JR |
648 | %lang(sk) %{_datadir}/squid/errors/Slovak |
649 | %lang(es) %{_datadir}/squid/errors/Spanish | |
2e235151 | 650 | %lang(sr) %{_datadir}/squid/errors/Serbian |
daed1adf | 651 | %lang(sv) %{_datadir}/squid/errors/Swedish |
b56dd683 | 652 | %lang(zh_TW) %{_datadir}/squid/errors/Traditional_Chinese |
daed1adf | 653 | %lang(tr) %{_datadir}/squid/errors/Turkish |
078f5547 | 654 | %lang(uk) %{_datadir}/squid/errors/Ukrainian* |
d765f971 | 655 | %dir %{_libexecdir} |
29ca562c | 656 | |
e62e100a | 657 | %attr(770,root,squid) %dir /var/log/archive/squid |
3e5c79df JK |
658 | %attr(770,root,squid) %dir /var/log/squid |
659 | %attr(660,root,squid) %ghost /var/log/squid/* | |
e1baf3c8 | 660 | |
3e5c79df | 661 | %attr(770,root,squid) %dir /var/cache/squid |
1c1894b4 ER |
662 | %ghost /var/cache/squid/netdb_state |
663 | %ghost /var/cache/squid/swap.state | |
664 | %ghost /var/cache/squid/swap.state.clean | |
665 | %ghost /var/cache/squid/swap.state.last-clean | |
68c5bbf6 | 666 | %{_mandir}/man8/squid.8* |
29ca562c | 667 | |
668 | %files cachemgr | |
36fddb2a | 669 | %defattr(644,root,root,755) |
2011b5a0 | 670 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/cachemgr.conf |
e986fc96 | 671 | %attr(755,root,root) %{_cgidir}/* |
2011b5a0 | 672 | %{_mandir}/man8/cachemgr.cgi.8* |
ce1cc056 | 673 | |
674 | %files ldap_auth | |
675 | %defattr(644,root,root,755) | |
84c99453 JR |
676 | %doc helpers/basic_auth/LDAP/README |
677 | %attr(755,root,root) %{_libexecdir}/%{name}_ldap_auth | |
0a79ee40 | 678 | %{_mandir}/man8/%{name}_ldap_auth.* |
ce1cc056 | 679 | |
680 | %files pam_auth | |
681 | %defattr(644,root,root,755) | |
84c99453 | 682 | %doc helpers/basic_auth/PAM/pam_auth.c |
3c0645bd | 683 | %config(noreplace) /etc/pam.d/squid |
684 | %config(noreplace) /etc/security/blacklist.squid | |
84c99453 | 685 | %attr(755,root,root) %{_libexecdir}/pam_auth |
f0a5f35f | 686 | %{_mandir}/man8/pam_auth.8* |
ce1cc056 | 687 | |
688 | %files smb_auth | |
689 | %defattr(644,root,root,755) | |
68b6c6ad | 690 | %doc helpers/basic_auth/SMB/{README,ChangeLog,smb_auth.sh} |
84c99453 | 691 | %doc helpers/basic_auth/multi-domain-NTLM/* |
24c96395 | 692 | %attr(755,root,root) %{_libexecdir}/smb_auth* |
7140e072 PG |
693 | |
694 | %files msnt_auth | |
695 | %defattr(644,root,root,755) | |
84c99453 JR |
696 | %doc helpers/basic_auth/MSNT/README* |
697 | %attr(755,root,root) %{_libexecdir}/msnt_auth | |
b2aa8620 | 698 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf |
7140e072 PG |
699 | |
700 | %files yp_auth | |
701 | %defattr(644,root,root,755) | |
84c99453 JR |
702 | %attr(755,root,root) %{_libexecdir}/yp_auth |
703 | ||
704 | %files ncsa_auth | |
705 | %defattr(644,root,root,755) | |
706 | %attr(755,root,root) %{_libexecdir}/ncsa_auth | |
39607b78 | 707 | %{_mandir}/man8/ncsa_auth.8* |
84c99453 JR |
708 | |
709 | %files sasl_auth | |
710 | %defattr(644,root,root,755) | |
711 | %doc helpers/basic_auth/SASL/{README,squid_sasl*} | |
712 | %attr(755,root,root) %{_libexecdir}/sasl_auth | |
713 | ||
84c99453 JR |
714 | %files getpwname_auth |
715 | %defattr(644,root,root,755) | |
716 | %attr(755,root,root) %{_libexecdir}/getpwname_auth | |
717 | ||
718 | %files passwd_auth | |
719 | %defattr(644,root,root,755) | |
720 | %attr(755,root,root) %{_libexecdir}/digest_pw_auth | |
721 | ||
722 | %files ntlm_auth | |
723 | %defattr(644,root,root,755) | |
724 | %doc helpers/ntlm_auth/no_check/{README*,no_check.pl} | |
84c99453 JR |
725 | %attr(755,root,root) %{_libexecdir}/ntlm_auth |
726 | ||
39607b78 | 727 | %files digest_ldap_auth |
728 | %defattr(644,root,root,755) | |
729 | %attr(755,root,root) %{_libexecdir}/digest_ldap_auth | |
730 | ||
84c99453 JR |
731 | %files ip_acl |
732 | %defattr(644,root,root,755) | |
733 | %doc helpers/external_acl/ip_user/{README,example*} | |
734 | %attr(755,root,root) %{_libexecdir}/ip_user_check | |
735 | ||
736 | %files ldap_acl | |
737 | %defattr(644,root,root,755) | |
738 | %attr(755,root,root) %{_libexecdir}/squid_ldap_group | |
0a79ee40 | 739 | %{_mandir}/man8/%{name}_ldap_group.* |
84c99453 JR |
740 | |
741 | %files unix_acl | |
742 | %defattr(644,root,root,755) | |
743 | %doc helpers/external_acl/unix_group/README | |
24c96395 | 744 | %attr(755,root,root) %{_libexecdir}/squid_unix_group |
0a79ee40 | 745 | %{_mandir}/man8/%{name}_unix_group.* |
84c99453 JR |
746 | |
747 | %files wbinfo_acl | |
748 | %defattr(644,root,root,755) | |
749 | %attr(755,root,root) %{_libexecdir}/wbinfo_group.pl | |
750 | ||
39607b78 | 751 | %files session_acl |
84c99453 | 752 | %defattr(644,root,root,755) |
39607b78 | 753 | %attr(755,root,root) %{_libexecdir}/squid_session |
754 | %{_mandir}/man8/%{name}_session.8* | |
4c0ef65a ER |
755 | |
756 | %files scripts | |
757 | %defattr(644,root,root,755) | |
758 | %attr(755,root,root) %{_libexecdir}/*.pl | |
759 | %attr(755,root,root) %{_libexecdir}/contrib |