]>
Commit | Line | Data |
---|---|---|
f78f51ea | 1 | # TODO |
078f5547 | 2 | # - REVIEW patches and configuration |
1d9fd646 | 3 | # - use /usr/lib/cgi-bin instead of /home/services |
59113687 | 4 | # - ZPH TOS - |
5 | # For this to work correctly, you will need to patch your linux | |
6 | # kernel with the TOS preserving ZPH patch. | |
7 | # The kernel patch can be downloaded from http://zph.bratcheda.org | |
9f399e60 | 8 | # |
9 | # Conditional build: | |
632c8533 | 10 | %bcond_with combined_log # enables apache-like combined log format |
9f399e60 | 11 | # |
bbd3a6ea | 12 | Summary: SQUID Internet Object Cache |
42b7bd48 ER |
13 | Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher |
14 | Summary(pl.UTF-8): Uniwersalny serwer proxy-cache | |
15 | Summary(pt_BR.UTF-8): Cache Squid de objetos Internet | |
16 | Summary(ru.UTF-8): Squid - кэш объектов Internet | |
17 | Summary(uk.UTF-8): Squid - кеш об'єктів Internet | |
18 | Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器 | |
bbd3a6ea | 19 | Name: squid |
59113687 | 20 | Version: 3.0.STABLE5 |
078f5547 AM |
21 | # review patches before stable release |
22 | Release: 0.1 | |
80d0d8a3 | 23 | Epoch: 7 |
c0986f46 | 24 | License: GPL v2 |
36fddb2a | 25 | Group: Networking/Daemons |
078f5547 | 26 | Source0: http://www.squid-cache.org/Versions/v3/3.0/%{name}-%{version}.tar.bz2 |
59113687 | 27 | # Source0-md5: 60255e66bca8203afb9a635f318b9c65 |
d114d8e2 JB |
28 | # http://www.squid-cache.org/Doc/FAQ/FAQ.tar.gz |
29 | Source1: %{name}-FAQ.tar.gz | |
30 | # Source1-md5: cb9a955f8cda9cc166e086fccd412a43 | |
bbd3a6ea | 31 | Source2: %{name}.init |
29ca562c | 32 | Source3: %{name}.sysconfig |
d114d8e2 | 33 | # http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip |
078f5547 | 34 | Source4: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip |
d114d8e2 | 35 | # Source4-md5: 4f3b6dab1de9cbb847df89d8b417378a |
590e6457 | 36 | Source5: %{name}.conf.patch |
27a7ed0d | 37 | Source6: %{name}.logrotate |
3c0645bd | 38 | Source7: %{name}.pamd |
f1c5f539 | 39 | # Bug fixes from Squid home page, please include URL |
68f70685 | 40 | # lets have fun - there is no patches... yet:) |
8f8faf3f | 41 | # Other patches: |
59113687 | 42 | # http://zph.bratcheda.org/ |
68f70685 ER |
43 | Patch0: %{name}_hit_miss_mark.patch |
44 | Patch1: %{name}-fhs.patch | |
45 | Patch2: %{name}-location.patch | |
46 | Patch3: %{name}-domainmatch.patch | |
47 | Patch4: %{name}-libnsl_fixes.patch | |
48 | Patch5: %{name}-crash-on-ENOSPC.patch | |
49 | Patch6: %{name}-newssl.patch | |
50 | Patch7: %{name}-empty-referer.patch | |
51 | Patch8: %{name}-2.5.STABLE4-apache-like-combined-log.patch | |
52 | Patch9: %{name}-auth_on_acceleration.patch | |
2655eecf | 53 | Patch10: %{name}-ppc-m32.patch |
f0a5f35f | 54 | URL: http://www.squid-cache.org/ |
7488bd27 | 55 | BuildRequires: autoconf |
4b4ba0a1 | 56 | BuildRequires: automake |
0f1815c6 | 57 | BuildRequires: cyrus-sasl-devel >= 2.1.0 |
427f606c | 58 | BuildRequires: db-devel |
0542d8f7 | 59 | BuildRequires: openldap-devel >= 2.3.0 |
63e75b9c | 60 | BuildRequires: openssl-devel >= 0.9.7d |
29294f93 | 61 | BuildRequires: pam-devel |
7de7a1e8 | 62 | BuildRequires: perl-base |
2210ba0e | 63 | BuildRequires: rpmbuild(macros) >= 1.268 |
349b995c | 64 | BuildRequires: sed >= 4.0 |
115a61f1 | 65 | BuildRequires: unzip |
2a8ec884 | 66 | Requires(post): /bin/hostname |
b3a4b715 JB |
67 | Requires(post): fileutils |
68 | Requires(post): findutils | |
d6013865 | 69 | Requires(post): grep |
2a8ec884 | 70 | Requires(post,preun): /sbin/chkconfig |
b3a4b715 JB |
71 | Requires(postun): /usr/sbin/groupdel |
72 | Requires(postun): /usr/sbin/userdel | |
2a8ec884 ER |
73 | Requires(pre): /bin/id |
74 | Requires(pre): /usr/bin/getgid | |
75 | Requires(pre): /usr/lib/rpm/user_group.sh | |
76 | Requires(pre): /usr/sbin/groupadd | |
77 | Requires(pre): /usr/sbin/useradd | |
78 | Requires: rc-scripts >= 0.2.0 | |
79 | Requires: setup >= 2.4.6 | |
93090cc0 | 80 | Provides: group(squid) |
c93c3680 | 81 | # epoll enabled by default: |
d765f971 | 82 | Requires: uname(release) >= 2.6 |
93090cc0 | 83 | Provides: user(squid) |
5e26975c | 84 | Conflicts: logrotate < 3.7-4 |
f01c9d57 | 85 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
e1baf3c8 | 86 | |
7480ed4d AF |
87 | %define _libexecdir %{_libdir}/%{name} |
88 | %define _sysconfdir /etc/%{name} | |
e986fc96 | 89 | %define _cgidir /home/services/httpd/cgi-bin |
7480ed4d | 90 | |
e1baf3c8 | 91 | %description |
36fddb2a | 92 | Squid is a high-performance proxy caching server for web clients, |
93 | supporting FTP, gopher, and HTTP data objects. Unlike traditional | |
94 | caching software, Squid handles all requests in a single, | |
95 | non-blocking, I/O-driven process. Squid keeps meta data and especially | |
96 | hot objects cached in RAM, caches DNS lookups, supports non-blocking | |
97 | DNS lookups, and implements negative caching of failed requests. If | |
98 | you are tight on memory, check out the NOVM version of this package. | |
99 | Squid supports SSL, extensive access controls, and full request | |
100 | logging. By using the lightweight Internet Cache Protocol, Squid | |
8f00d34a | 101 | caches can be arranged in a hierarchy or mesh for additional bandwidth |
36fddb2a | 102 | savings. Squid consists of a main server program squid, a Domain Name |
103 | System lookup program dnsserver, a program for retrieving FTP data | |
104 | ftpget, and some management and client tools. When squid starts up, it | |
105 | spawns a configurable number of dnsserver processes, each of which can | |
106 | perform a single, blocking Domain Name System (DNS) lookup. This | |
107 | reduces the amount of time the cache waits for DNS lookups. Squid is | |
108 | derived from the ARPA-funded Harvest project. | |
e1baf3c8 | 109 | |
1cf03309 JR |
110 | %description -l es.UTF-8 |
111 | Squid es un servidor proxy con caché de alto desempeño para clientes | |
4b571a16 | 112 | web, soportando FTP, gopher y HTTP. Diferentemente de softwares |
1cf03309 JR |
113 | tradicionales de caché squid manipula todas las requisiciones en un |
114 | único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y | |
115 | objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché | |
4b571a16 | 116 | de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa |
1cf03309 JR |
117 | un caché negativo de requisiciones que fallen. Si tiene poca memoria |
118 | da un vistazo en la versión NOVM de este paquete. También soporta SSL, | |
4b571a16 | 119 | controles extensivos de acceso y registro (log) completo de las |
120 | requisiciones. Usando el ligero Protocolo de Caches Internet (ICP) | |
1cf03309 JR |
121 | puede ser usado en una jerarquía de servidores para mayor ahorro de la |
122 | banda de comunicación. Está compuesto del programa squid (servidor | |
123 | principal), del programa dnsserver (para resolución DNS), del programa | |
4b571a16 | 124 | ftpget (para transmisiones ftp) y otras herramientas clientes y para |
1cf03309 | 125 | administración. Cuando squid se inicia, dispara un número configurable |
4b571a16 | 126 | de procesos dnsserver, cada uno pudiendo ejecutar solamente una |
1cf03309 JR |
127 | resolución DNS con poder de bloquear. Esto reduce el tiempo que el |
128 | caché espera por resoluciones DNS. Fue derivado del proyecto Harvest, | |
4b571a16 | 129 | financiado por la ARPA. |
130 | ||
1cf03309 JR |
131 | %description -l pl.UTF-8 |
132 | Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW, | |
133 | klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w | |
134 | pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla | |
135 | SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych | |
136 | danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer | |
137 | squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet | |
138 | squid obejmuje: główny program serwera squid, program dostarczający | |
139 | informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz | |
140 | pomocnicze programy do zarządzania. Squid wywodzi się ze | |
36fddb2a | 141 | sponsorowanego przez ARPA projektu Harvest. |
e1baf3c8 | 142 | |
1cf03309 JR |
143 | %description -l pt_BR.UTF-8 |
144 | O Squid é um servidor proxy com cache de alta performance para | |
4b571a16 | 145 | clientes web, suportando FTP, gopher e HTTP. Diferentemente de |
1cf03309 JR |
146 | softwares tradicionais de cache o squid manipula todas as requisições |
147 | em um único processo sem bloqueios, direcionado a E/S. | |
4b571a16 | 148 | |
1cf03309 JR |
149 | Mantém meta dados e objetos freqüentemente pedidos num cache em |
150 | memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem | |
151 | bloqueio e implementa um cache negativo de requisições que falharem. | |
152 | Se você tem pouca memória dê uma olhada na versão NOVM deste pacote. | |
4b571a16 | 153 | |
1cf03309 JR |
154 | Também suporta SSL, controles extensivos de acesso e registro (log) |
155 | completo das requisições. Usando o leve Protocolo de Caches Internet | |
4b571a16 | 156 | (ICP) ele pode ser usado em uma hierarquia de servidores para maior |
1cf03309 | 157 | economia de banda de comunicação. |
4b571a16 | 158 | |
159 | Ele consiste do programa squid (servidor principal), do programa | |
1cf03309 | 160 | dnsserver (para resolução DNS), do programa ftpget (para transmissões |
4b571a16 | 161 | ftp) e outras ferramentas clientes e para gerenciamento. Quando o |
1cf03309 JR |
162 | squid é inicializado ele dispara um número configurável de processos |
163 | dnsserver, cada um podendo executar somente uma resolução DNS | |
164 | bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS. | |
4b571a16 | 165 | |
166 | Foi derivado do projeto Harvest, financiado pela ARPA. | |
167 | ||
1cf03309 JR |
168 | %description -l ru.UTF-8 |
169 | Squid - это высокопроизводительный кэширующий прокси-сервер для | |
170 | клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В | |
171 | отличие от традиционных кэширующих программ, Squid обрабатывает все | |
172 | запросы при помощи одного неблокирующегося, управляемого | |
173 | вводом-выводом процесса. | |
735979dc | 174 | |
1cf03309 | 175 | Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб |
735979dc | 176 | (Netdb). |
177 | ||
1cf03309 JR |
178 | %description -l uk.UTF-8 |
179 | Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує | |
180 | об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних | |
181 | кешуючих програм, Squid обробляє всі запити за допомогою одного | |
182 | неблокуючого, керованого вводом-виводом процесу. | |
735979dc | 183 | |
1cf03309 | 184 | Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб |
735979dc | 185 | (Netdb). |
186 | ||
29ca562c | 187 | %package cachemgr |
188 | Summary: CGI script for Squid management | |
42b7bd48 | 189 | Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW |
29ca562c | 190 | Group: Networking/Admin |
f0a5f35f | 191 | Requires: %{name} = %{epoch}:%{version}-%{release} |
79634bd7 | 192 | Requires: webserver |
29ca562c | 193 | |
194 | %description cachemgr | |
36fddb2a | 195 | Cachemgr.cgi is a CGI script that allows administrator to chceck |
196 | various informations about Squid via WWW. | |
29ca562c | 197 | |
1cf03309 JR |
198 | %description cachemgr -l pl.UTF-8 |
199 | Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi | |
200 | zapoznać się z informacjami o pracy Squida poprzez WWW. | |
29ca562c | 201 | |
ce1cc056 | 202 | %package ldap_auth |
8acaa3f5 | 203 | Summary: LDAP authentication helper for Squid |
42b7bd48 | 204 | Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida |
ce1cc056 | 205 | Group: Networking/Admin |
f0a5f35f | 206 | Requires: %{name} = %{epoch}:%{version}-%{release} |
ce1cc056 | 207 | |
208 | %description ldap_auth | |
209 | This Squid helper allows authentication against LDAP directories using | |
210 | the "simple authentication" (plain-text). | |
211 | ||
1cf03309 JR |
212 | %description ldap_auth -l pl.UTF-8 |
213 | Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego | |
632c8533 | 214 | uwierzytelniania (otwartym tekstem). |
8acaa3f5 | 215 | |
ce1cc056 | 216 | %package pam_auth |
8acaa3f5 | 217 | Summary: PAM authentication helper for Squid |
42b7bd48 | 218 | Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida |
ce1cc056 | 219 | Group: Networking/Admin |
f0a5f35f | 220 | Requires: %{name} = %{epoch}:%{version}-%{release} |
891c08b7 | 221 | Requires: pam >= 0.77.3 |
ce1cc056 | 222 | |
223 | %description pam_auth | |
224 | This program authenticates users against a PAM configured | |
225 | authentication service "squid". This allows you to authenticate Squid | |
226 | users to any authentication source for which you have a PAM module. | |
227 | ||
1cf03309 JR |
228 | %description pam_auth -l pl.UTF-8 |
229 | Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym | |
230 | źródle posiadającym moduł PAM. | |
8acaa3f5 | 231 | |
ce1cc056 | 232 | %package smb_auth |
8acaa3f5 | 233 | Summary: SMB authentication helper for Squid |
42b7bd48 | 234 | Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida |
ce1cc056 | 235 | Group: Networking/Admin |
f0a5f35f | 236 | Requires: %{name} = %{epoch}:%{version}-%{release} |
ce1cc056 | 237 | |
238 | %description smb_auth | |
239 | This is a proxy authentication module. With smb_auth you can | |
240 | authenticate proxy users against an SMB server like Windows NT or | |
241 | Samba. | |
242 | ||
1cf03309 JR |
243 | %description smb_auth -l pl.UTF-8 |
244 | To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można | |
245 | uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy | |
632c8533 | 246 | Samba. |
8acaa3f5 | 247 | |
7140e072 PG |
248 | %package msnt_auth |
249 | Summary: MSNT domain authentication helper for Squid | |
42b7bd48 | 250 | Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida |
7140e072 | 251 | Group: Networking/Admin |
f0a5f35f | 252 | Requires: %{name} = %{epoch}:%{version}-%{release} |
7140e072 PG |
253 | |
254 | %description msnt_auth | |
5f1d3951 | 255 | This is an authentication module for the Squid proxy server to |
7140e072 PG |
256 | authenticate users on an NT domain. |
257 | ||
1cf03309 JR |
258 | %description msnt_auth -l pl.UTF-8 |
259 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
260 | uwierzytelnianie użytkowników proxy w domenie NT. | |
7140e072 PG |
261 | |
262 | %package yp_auth | |
263 | Summary: YP authentication helper for Squid | |
42b7bd48 | 264 | Summary(pl.UTF-8): Obsługa uwierzytelniania YP dla squida |
7140e072 | 265 | Group: Networking/Admin |
f0a5f35f | 266 | Requires: %{name} = %{epoch}:%{version}-%{release} |
7140e072 PG |
267 | |
268 | %description yp_auth | |
269 | This is an authentication module for the Squid proxy server to | |
270 | authenticate users on YP. | |
271 | ||
1cf03309 JR |
272 | %description yp_auth -l pl.UTF-8 |
273 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
274 | uwierzytelnianie użytkowników proxy poprzez YP. | |
7140e072 | 275 | |
84c99453 JR |
276 | %package ncsa_auth |
277 | Summary: NCSA httpd style authentication helper for Squid | |
42b7bd48 | 278 | Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida |
84c99453 | 279 | Group: Networking/Admin |
f0a5f35f | 280 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
281 | |
282 | %description ncsa_auth | |
283 | This module uses a NCSA httpd style password file for authentication. | |
284 | ||
1cf03309 JR |
285 | %description ncsa_auth -l pl.UTF-8 |
286 | Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd. | |
84c99453 JR |
287 | |
288 | %package sasl_auth | |
289 | Summary: SASL authentication helper for Squid | |
42b7bd48 | 290 | Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida |
84c99453 | 291 | Group: Networking/Admin |
f0a5f35f | 292 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
293 | |
294 | %description sasl_auth | |
295 | This is an authentication module for the Squid proxy server to | |
296 | authenticate users via SASL. | |
297 | ||
1cf03309 JR |
298 | %description sasl_auth -l pl.UTF-8 |
299 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
300 | uwierzytelnianie użytkowników proxy poprzez SASL. | |
84c99453 | 301 | |
84c99453 JR |
302 | %package getpwname_auth |
303 | Summary: getpwname authentication helper for Squid | |
42b7bd48 | 304 | Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida |
84c99453 | 305 | Group: Networking/Admin |
f0a5f35f | 306 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
307 | |
308 | %description getpwname_auth | |
309 | This is an authentication module for the Squid proxy server to | |
310 | authenticate users using getpwname. | |
311 | ||
1cf03309 JR |
312 | %description getpwname_auth -l pl.UTF-8 |
313 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
314 | uwierzytelnianie użytkowników proxy poprzez getpwname. | |
84c99453 JR |
315 | |
316 | %package passwd_auth | |
317 | Summary: passwd authentication helper for Squid | |
42b7bd48 | 318 | Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida |
84c99453 | 319 | Group: Networking/Admin |
f0a5f35f | 320 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
321 | |
322 | %description passwd_auth | |
323 | This is an authentication module for the Squid proxy server to | |
324 | authenticate users with separate passwd file. | |
325 | ||
1cf03309 JR |
326 | %description passwd_auth -l pl.UTF-8 |
327 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
328 | uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd. | |
84c99453 JR |
329 | |
330 | %package ntlm_auth | |
331 | Summary: NTLM authentication helper for Squid | |
42b7bd48 | 332 | Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida |
84c99453 | 333 | Group: Networking/Admin |
f0a5f35f | 334 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
335 | |
336 | %description ntlm_auth | |
337 | This is an authentication module for the Squid proxy server to | |
338 | authenticate users on NTLM. | |
339 | ||
1cf03309 JR |
340 | %description ntlm_auth -l pl.UTF-8 |
341 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
342 | uwierzytelnianie użytkowników proxy poprzez NTLM. | |
84c99453 | 343 | |
39607b78 | 344 | %package digest_ldap_auth |
345 | Summary: LDAP authentication helper for Squid | |
42b7bd48 | 346 | Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida |
39607b78 | 347 | Group: Networking/Admin |
348 | Requires: %{name} = %{epoch}:%{version}-%{release} | |
349 | ||
350 | %description digest_ldap_auth | |
351 | This is an authentication module for the Squid proxy server to | |
352 | authenticate users on LDAP. | |
353 | ||
1cf03309 JR |
354 | %description digest_ldap_auth -l pl.UTF-8 |
355 | Jest to moduł uwierzytelniania proxy, który pozwala na | |
356 | uwierzytelnianie użytkowników proxy poprzez LDAP. | |
39607b78 | 357 | |
84c99453 JR |
358 | %package ip_acl |
359 | Summary: IP external ACL helper for Squid | |
42b7bd48 | 360 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida |
84c99453 | 361 | Group: Networking/Admin |
f0a5f35f | 362 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
363 | |
364 | %description ip_acl | |
f0a5f35f | 365 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 366 | access for users based on IP address. |
84c99453 | 367 | |
1cf03309 JR |
368 | %description ip_acl -l pl.UTF-8 |
369 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
370 | ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP. | |
84c99453 JR |
371 | |
372 | %package ldap_acl | |
373 | Summary: LDAP group external ACL helper for Squid | |
42b7bd48 | 374 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida |
84c99453 | 375 | Group: Networking/Admin |
f0a5f35f | 376 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
377 | |
378 | %description ldap_acl | |
f0a5f35f | 379 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 380 | access for users based on LDAP group membership. |
84c99453 | 381 | |
1cf03309 JR |
382 | %description ldap_acl -l pl.UTF-8 |
383 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
384 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
385 | przynależności do grup LDAP. | |
84c99453 JR |
386 | |
387 | %package unix_acl | |
388 | Summary: UNIX group external ACL helper for Squid | |
42b7bd48 | 389 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida |
84c99453 | 390 | Group: Networking/Admin |
f0a5f35f | 391 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
392 | |
393 | %description unix_acl | |
f0a5f35f | 394 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 395 | access for users based on UNIX group membership. |
84c99453 | 396 | |
1cf03309 JR |
397 | %description unix_acl -l pl.UTF-8 |
398 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
399 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
400 | przynależności do grup UNIX. | |
84c99453 JR |
401 | |
402 | %package wbinfo_acl | |
403 | Summary: NT domain group external ACL helper for Squid | |
42b7bd48 | 404 | Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida |
84c99453 | 405 | Group: Networking/Admin |
f0a5f35f | 406 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 JR |
407 | |
408 | %description wbinfo_acl | |
f0a5f35f | 409 | This is an external ACL module for the Squid proxy server to limit |
acf3cdb9 | 410 | access for users based on NT domain group membership using wbinfo. |
84c99453 | 411 | |
1cf03309 JR |
412 | %description wbinfo_acl -l pl.UTF-8 |
413 | Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na | |
414 | ograniczenie dostępu użytkowników proxy na podstawie ich | |
415 | przynależności do grup w domenie NT przy użyciu wbinfo. | |
84c99453 | 416 | |
39607b78 | 417 | %package session_acl |
418 | Summary: Squid session tracking external acl group helper | |
84c99453 | 419 | Group: Networking/Admin |
f0a5f35f | 420 | Requires: %{name} = %{epoch}:%{version}-%{release} |
84c99453 | 421 | |
39607b78 | 422 | %description session_acl |
68f70685 ER |
423 | This helper maintains a concept of sessions by monitoring requests and |
424 | timing out sessions if no requests have been seen for the idle timeout | |
39607b78 | 425 | timer. |
84c99453 | 426 | |
4c0ef65a | 427 | %package scripts |
c8e93bac | 428 | Summary: Perl scripts for Squid |
42b7bd48 | 429 | Summary(pl.UTF-8): Skrypty perlowe dla Squida |
4c0ef65a ER |
430 | Group: Networking/Admin |
431 | Requires: %{name} = %{epoch}:%{version}-%{release} | |
432 | ||
433 | %description scripts | |
c8e93bac JB |
434 | This package contains Perl scripts and contributed programs for Squid. |
435 | ||
1cf03309 | 436 | %description scripts -l pl.UTF-8 |
c8e93bac | 437 | Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida. |
4c0ef65a | 438 | |
e1baf3c8 | 439 | %prep |
d114d8e2 | 440 | %setup -q -a1 -a4 |
8f8faf3f | 441 | # Bug fixes from Squid home page: |
960d91d2 | 442 | |
3de753ac | 443 | # Other patches: |
59113687 | 444 | %patch0 -p1 |
2655eecf | 445 | %patch1 -p1 |
078f5547 AM |
446 | #%patch2 -p1 |
447 | #%patch3 -p1 | |
448 | #%patch4 -p1 | |
449 | #%patch5 -p1 | |
450 | #%patch6 -p1 | |
451 | #%patch7 -p1 | |
2655eecf | 452 | %{?with_combined_log:%patch8 -p1} |
453 | %patch9 -p1 | |
7b66d9b5 | 454 | %ifarch ppc |
2655eecf | 455 | %patch10 -p1 |
7b66d9b5 | 456 | %endif |
dae9f88a | 457 | |
349b995c ER |
458 | %{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts,helpers/*/*}/*.pl |
459 | ||
e1baf3c8 | 460 | %build |
3de753ac | 461 | %{__aclocal} |
da6a399a | 462 | %{__autoconf} |
e5759917 | 463 | %{__autoheader} |
3de753ac | 464 | %{__automake} |
7480ed4d | 465 | %configure \ |
194fe678 | 466 | --datadir=%{_datadir}/squid \ |
03ee6af7 | 467 | --enable-arp-acl \ |
f48cdc06 | 468 | --enable-auth="basic,digest,negotiate,ntlm" \ |
469 | --enable-basic-auth-helpers="LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,getpwnam,multi-domain-NTLM" \ | |
078f5547 AM |
470 | --enable-cache-digests \ |
471 | --enable-coss-aio-ops \ | |
472 | --enable-delay-pools \ | |
f48cdc06 | 473 | --enable-digest-auth-helpers="ldap,password" \ |
078f5547 AM |
474 | --enable-err-language=English \ |
475 | --enable-esi \ | |
f48cdc06 | 476 | --enable-external-acl-helpers="ip_user,ldap_group,session,unix_group,wbinfo_group" \ |
078f5547 AM |
477 | --enable-follow-x-forwarded-for \ |
478 | --enable-forward-log \ | |
479 | --enable-forw-via-db \ | |
480 | --enable-htcp \ | |
481 | --enable-icap-client \ | |
482 | --enable-icmp \ | |
483 | --enable-kill-parent-hack \ | |
484 | --enable-large-cache-files \ | |
485 | --enable-linux-netfilter \ | |
486 | --enable-linux-tproxy \ | |
487 | --enable-multicast-miss \ | |
f48cdc06 | 488 | --enable-ntlm-auth-helpers="SMB,fakeauth,no_check" \ |
489 | --enable-ntlm-fail-open \ | |
078f5547 AM |
490 | --enable-referer-log \ |
491 | --enable-removal-policies="heap,lru" \ | |
492 | --enable-snmp \ | |
493 | --enable-ssl \ | |
494 | --enable-storeio="aufs,coss,diskd,null,ufs" \ | |
495 | --enable-useragent-log \ | |
194fe678 | 496 | --enable-x-accelerator-vary \ |
68c5bbf6 PG |
497 | --localstatedir=/var \ |
498 | --sysconfdir=%{_sysconfdir} \ | |
e5759917 | 499 | --with-auth-on-acceleration \ |
4dcb690c | 500 | --with-large-files \ |
078f5547 | 501 | --with-maxfd=32768 \ |
59113687 | 502 | --with-pthreads \ |
503 | --enable-zph-qos | |
e1baf3c8 | 504 | |
8acaa3f5 | 505 | %{__make} |
e1baf3c8 | 506 | |
507 | %install | |
508 | rm -rf $RPM_BUILD_ROOT | |
e986fc96 | 509 | install -d $RPM_BUILD_ROOT%{_cgidir} \ |
3c0645bd | 510 | $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \ |
24c96395 | 511 | $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \ |
f0a5f35f | 512 | $RPM_BUILD_ROOT%{_mandir}/man8 \ |
29ca562c | 513 | $RPM_BUILD_ROOT%{_datadir}/squid \ |
e62e100a | 514 | $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid |
e1baf3c8 | 515 | |
77f75ffe | 516 | %{__make} install \ |
3de753ac | 517 | DESTDIR=$RPM_BUILD_ROOT |
e1baf3c8 | 518 | |
daed1adf | 519 | cp -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib |
2fe495a6 | 520 | install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir} |
29ca562c | 521 | |
24c96395 | 522 | install %{SOURCE7} $RPM_BUILD_ROOT/etc/pam.d/squid |
3c0645bd | 523 | touch $RPM_BUILD_ROOT/etc/security/blacklist.squid |
ce1cc056 | 524 | |
e986fc96 | 525 | mv -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir} |
e1baf3c8 | 526 | |
590e6457 | 527 | cd $RPM_BUILD_ROOT/etc/squid |
fde47eed | 528 | cp -f squid.conf{,.default} |
0542d8f7 ER |
529 | %{__patch} -p0 < %{SOURCE5} |
530 | rm -f *~ *.orig | |
590e6457 | 531 | cd - |
532 | ||
29ca562c | 533 | install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid |
534 | install %{SOURCE3} $RPM_BUILD_ROOT/etc/sysconfig/squid | |
29ca562c | 535 | install %{SOURCE6} $RPM_BUILD_ROOT/etc/logrotate.d/squid |
e1baf3c8 | 536 | |
29ca562c | 537 | touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log |
bbd3a6ea | 538 | |
29ca562c | 539 | # These two files start squid. They are replaced by /etc/rc.d/init.d script. |
0d89ccc2 | 540 | rm -f $RPM_BUILD_ROOT%{_bindir}/R* |
e1baf3c8 | 541 | |
1c1894b4 ER |
542 | # cp, to have re-entrant install |
543 | rm -rf docs | |
544 | cp -a doc docs | |
68c5bbf6 | 545 | # dunno why, but manual is not installed |
1c1894b4 | 546 | mv docs/squid.8 $RPM_BUILD_ROOT%{_mandir}/man8 |
68c5bbf6 | 547 | # We don't want Makefiles as docs... |
1c1894b4 | 548 | rm -f docs/Makefile* |
68c5bbf6 | 549 | |
f0a5f35f | 550 | # We don't like message: rpm found unpackaged files ... |
acf3cdb9 TP |
551 | rm -f $RPM_BUILD_ROOT/etc/squid/msntauth.conf.default \ |
552 | $RPM_BUILD_ROOT/etc/squid/squid.conf.orig | |
f0a5f35f | 553 | |
1c1894b4 ER |
554 | > $RPM_BUILD_ROOT/var/cache/squid/netdb_state |
555 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state | |
556 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean | |
557 | > $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean | |
558 | ||
fde47eed | 559 | %clean |
7140e072 | 560 | rm -rf $RPM_BUILD_ROOT |
fde47eed | 561 | |
3e5c79df | 562 | %pre |
9cc7d20f ER |
563 | %groupadd -g 91 squid |
564 | %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid | |
565 | %addusertogroup stats squid | |
566 | ||
349b995c | 567 | [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || : |
3e5c79df | 568 | |
e1baf3c8 | 569 | %post |
1e0573f8 | 570 | if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then |
b47ca9e4 ER |
571 | hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost' |
572 | echo visible_hostname $hostname >> /etc/squid/squid.conf | |
1e0573f8 | 573 | fi |
574 | ||
2210ba0e | 575 | /sbin/chkconfig --add squid |
c98ab205 | 576 | if [ "$1" = "1" ]; then |
9cac9077 | 577 | /sbin/service squid init >&2 |
c98ab205 | 578 | fi |
2210ba0e | 579 | %service squid restart |
29ca562c | 580 | |
581 | %preun | |
688434c4 | 582 | if [ "$1" = "0" ]; then |
c98ab205 | 583 | /sbin/chkconfig --del squid |
2210ba0e | 584 | %service squid stop |
1c1894b4 ER |
585 | |
586 | # nuke squid cache if uninstalling | |
587 | rm -rf /var/cache/squid/?? | |
e1baf3c8 | 588 | fi |
589 | ||
b3a4b715 JB |
590 | %postun |
591 | if [ "$1" = "0" ]; then | |
93090cc0 | 592 | %userremove squid |
593 | %groupremove squid | |
b3a4b715 | 594 | fi |
5f1d3951 | 595 | |
9cac9077 ER |
596 | %triggerpostun -- squid < 7:2.5.STABLE7-5 |
597 | %addusertogroup stats squid | |
598 | ||
e1baf3c8 | 599 | %files |
600 | %defattr(644,root,root,755) | |
d114d8e2 | 601 | %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART RELEASENOTES.html SPONSORS |
1c1894b4 | 602 | %doc docs/* src/mib.txt FAQ*.html book-full.html |
194fe678 | 603 | %attr(755,root,root) %{_bindir}/squidclient |
078f5547 | 604 | %attr(755,root,root) %{_libexecdir}/diskd |
dad16a56 | 605 | # YES, it has to be suid root, it sends ICMP packets. |
194fe678 AM |
606 | %attr(4754,root,squid) %{_libexecdir}/pinger |
607 | %attr(755,root,root) %{_libexecdir}/unlinkd | |
f0a5f35f | 608 | %attr(755,root,root) %{_libexecdir}/fakeauth_auth |
3ef3ad78 | 609 | %attr(755,root,root) %{_sbindir}/* |
bbd3a6ea | 610 | |
d765f971 | 611 | %dir %{_sysconfdir} |
e1baf3c8 | 612 | |
e0a16a3e | 613 | %attr(754,root,root) /etc/rc.d/init.d/squid |
8d2e1c07 | 614 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid |
6b2e091c | 615 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid |
dad16a56 | 616 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf |
3e5c79df | 617 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf |
29ca562c | 618 | %attr(640,root,root) %{_sysconfdir}/mime.conf.default |
619 | %attr(640,root,root) %{_sysconfdir}/squid.conf.default | |
620 | ||
7134c92f | 621 | %dir %{_datadir}/squid |
56db77a9 | 622 | %dir %{_datadir}/squid/errors |
29ca562c | 623 | %{_datadir}/squid/icons |
624 | %{_datadir}/squid/mib.txt | |
6ac74d17 | 625 | %lang(am) %{_datadir}/squid/errors/Armenian |
39607b78 | 626 | %lang(az) %{_datadir}/squid/errors/Azerbaijani |
daed1adf | 627 | %lang(bg) %{_datadir}/squid/errors/Bulgarian |
260e8a82 | 628 | %lang(ca) %{_datadir}/squid/errors/Catalan |
daed1adf JR |
629 | %lang(cs) %{_datadir}/squid/errors/Czech |
630 | %lang(da) %{_datadir}/squid/errors/Danish | |
631 | %lang(nl) %{_datadir}/squid/errors/Dutch | |
632 | %{_datadir}/squid/errors/English | |
633 | %lang(et) %{_datadir}/squid/errors/Estonian | |
634 | %lang(fi) %{_datadir}/squid/errors/Finnish | |
635 | %lang(fr) %{_datadir}/squid/errors/French | |
636 | %lang(de) %{_datadir}/squid/errors/German | |
2011b5a0 | 637 | %lang(el) %{_datadir}/squid/errors/Greek |
2e235151 | 638 | %lang(he) %{_datadir}/squid/errors/Hebrew |
daed1adf JR |
639 | %lang(hu) %{_datadir}/squid/errors/Hungarian |
640 | %lang(it) %{_datadir}/squid/errors/Italian | |
641 | %lang(ja) %{_datadir}/squid/errors/Japanese | |
642 | %lang(ko) %{_datadir}/squid/errors/Korean | |
acd983a2 | 643 | %lang(lt) %{_datadir}/squid/errors/Lithuanian |
daed1adf JR |
644 | %lang(pl) %{_datadir}/squid/errors/Polish |
645 | %lang(pt) %{_datadir}/squid/errors/Portuguese | |
646 | %lang(ro) %{_datadir}/squid/errors/Romanian | |
647 | %lang(ru) %{_datadir}/squid/errors/Russian-1251 | |
648 | %lang(ru) %{_datadir}/squid/errors/Russian-koi8-r | |
b56dd683 | 649 | %lang(zh_CN) %{_datadir}/squid/errors/Simplify_Chinese |
daed1adf JR |
650 | %lang(sk) %{_datadir}/squid/errors/Slovak |
651 | %lang(es) %{_datadir}/squid/errors/Spanish | |
2e235151 | 652 | %lang(sr) %{_datadir}/squid/errors/Serbian |
daed1adf | 653 | %lang(sv) %{_datadir}/squid/errors/Swedish |
b56dd683 | 654 | %lang(zh_TW) %{_datadir}/squid/errors/Traditional_Chinese |
daed1adf | 655 | %lang(tr) %{_datadir}/squid/errors/Turkish |
078f5547 | 656 | %lang(uk) %{_datadir}/squid/errors/Ukrainian* |
d765f971 | 657 | %dir %{_libexecdir} |
29ca562c | 658 | |
e62e100a | 659 | %attr(770,root,squid) %dir /var/log/archive/squid |
3e5c79df JK |
660 | %attr(770,root,squid) %dir /var/log/squid |
661 | %attr(660,root,squid) %ghost /var/log/squid/* | |
e1baf3c8 | 662 | |
3e5c79df | 663 | %attr(770,root,squid) %dir /var/cache/squid |
1c1894b4 ER |
664 | %ghost /var/cache/squid/netdb_state |
665 | %ghost /var/cache/squid/swap.state | |
666 | %ghost /var/cache/squid/swap.state.clean | |
667 | %ghost /var/cache/squid/swap.state.last-clean | |
68c5bbf6 | 668 | %{_mandir}/man8/squid.8* |
29ca562c | 669 | |
670 | %files cachemgr | |
36fddb2a | 671 | %defattr(644,root,root,755) |
2011b5a0 | 672 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/cachemgr.conf |
e986fc96 | 673 | %attr(755,root,root) %{_cgidir}/* |
2011b5a0 | 674 | %{_mandir}/man8/cachemgr.cgi.8* |
ce1cc056 | 675 | |
676 | %files ldap_auth | |
677 | %defattr(644,root,root,755) | |
84c99453 JR |
678 | %doc helpers/basic_auth/LDAP/README |
679 | %attr(755,root,root) %{_libexecdir}/%{name}_ldap_auth | |
0a79ee40 | 680 | %{_mandir}/man8/%{name}_ldap_auth.* |
ce1cc056 | 681 | |
682 | %files pam_auth | |
683 | %defattr(644,root,root,755) | |
84c99453 | 684 | %doc helpers/basic_auth/PAM/pam_auth.c |
3c0645bd | 685 | %config(noreplace) /etc/pam.d/squid |
686 | %config(noreplace) /etc/security/blacklist.squid | |
84c99453 | 687 | %attr(755,root,root) %{_libexecdir}/pam_auth |
f0a5f35f | 688 | %{_mandir}/man8/pam_auth.8* |
ce1cc056 | 689 | |
690 | %files smb_auth | |
691 | %defattr(644,root,root,755) | |
68b6c6ad | 692 | %doc helpers/basic_auth/SMB/{README,ChangeLog,smb_auth.sh} |
84c99453 | 693 | %doc helpers/basic_auth/multi-domain-NTLM/* |
24c96395 | 694 | %attr(755,root,root) %{_libexecdir}/smb_auth* |
7140e072 PG |
695 | |
696 | %files msnt_auth | |
697 | %defattr(644,root,root,755) | |
84c99453 JR |
698 | %doc helpers/basic_auth/MSNT/README* |
699 | %attr(755,root,root) %{_libexecdir}/msnt_auth | |
b2aa8620 | 700 | %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf |
7140e072 PG |
701 | |
702 | %files yp_auth | |
703 | %defattr(644,root,root,755) | |
84c99453 JR |
704 | %attr(755,root,root) %{_libexecdir}/yp_auth |
705 | ||
706 | %files ncsa_auth | |
707 | %defattr(644,root,root,755) | |
708 | %attr(755,root,root) %{_libexecdir}/ncsa_auth | |
39607b78 | 709 | %{_mandir}/man8/ncsa_auth.8* |
84c99453 JR |
710 | |
711 | %files sasl_auth | |
712 | %defattr(644,root,root,755) | |
713 | %doc helpers/basic_auth/SASL/{README,squid_sasl*} | |
714 | %attr(755,root,root) %{_libexecdir}/sasl_auth | |
715 | ||
84c99453 JR |
716 | %files getpwname_auth |
717 | %defattr(644,root,root,755) | |
718 | %attr(755,root,root) %{_libexecdir}/getpwname_auth | |
719 | ||
720 | %files passwd_auth | |
721 | %defattr(644,root,root,755) | |
722 | %attr(755,root,root) %{_libexecdir}/digest_pw_auth | |
723 | ||
724 | %files ntlm_auth | |
725 | %defattr(644,root,root,755) | |
726 | %doc helpers/ntlm_auth/no_check/{README*,no_check.pl} | |
84c99453 JR |
727 | %attr(755,root,root) %{_libexecdir}/ntlm_auth |
728 | ||
39607b78 | 729 | %files digest_ldap_auth |
730 | %defattr(644,root,root,755) | |
731 | %attr(755,root,root) %{_libexecdir}/digest_ldap_auth | |
732 | ||
84c99453 JR |
733 | %files ip_acl |
734 | %defattr(644,root,root,755) | |
735 | %doc helpers/external_acl/ip_user/{README,example*} | |
736 | %attr(755,root,root) %{_libexecdir}/ip_user_check | |
737 | ||
738 | %files ldap_acl | |
739 | %defattr(644,root,root,755) | |
740 | %attr(755,root,root) %{_libexecdir}/squid_ldap_group | |
0a79ee40 | 741 | %{_mandir}/man8/%{name}_ldap_group.* |
84c99453 JR |
742 | |
743 | %files unix_acl | |
744 | %defattr(644,root,root,755) | |
745 | %doc helpers/external_acl/unix_group/README | |
24c96395 | 746 | %attr(755,root,root) %{_libexecdir}/squid_unix_group |
0a79ee40 | 747 | %{_mandir}/man8/%{name}_unix_group.* |
84c99453 JR |
748 | |
749 | %files wbinfo_acl | |
750 | %defattr(644,root,root,755) | |
751 | %attr(755,root,root) %{_libexecdir}/wbinfo_group.pl | |
752 | ||
39607b78 | 753 | %files session_acl |
84c99453 | 754 | %defattr(644,root,root,755) |
39607b78 | 755 | %attr(755,root,root) %{_libexecdir}/squid_session |
756 | %{_mandir}/man8/%{name}_session.8* | |
4c0ef65a ER |
757 | |
758 | %files scripts | |
759 | %defattr(644,root,root,755) | |
760 | %attr(755,root,root) %{_libexecdir}/*.pl | |
761 | %attr(755,root,root) %{_libexecdir}/contrib |