2 # - REVIEW patches and configuration
4 # For this to work correctly, you will need to patch your linux
5 # kernel with the TOS preserving ZPH patch.
6 # The kernel patch can be downloaded from http://zph.bratcheda.org
9 %bcond_with combined_log # enables apache-like combined log format
11 Summary: SQUID Internet Object Cache
12 Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher
13 Summary(pl.UTF-8): Uniwersalny serwer proxy-cache
14 Summary(pt_BR.UTF-8): Cache Squid de objetos Internet
15 Summary(ru.UTF-8): Squid - кэш объектов Internet
16 Summary(uk.UTF-8): Squid - кеш об'єктів Internet
17 Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器
23 Group: Networking/Daemons
24 Source0: http://www.squid-cache.org/Versions/v3/3.2/%{name}-%{version}.tar.bz2
25 # Source0-md5: de02be3c1f72e0d818374438044261a6
27 Source2: %{name}.sysconfig
28 Source3: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip
29 # Source3-md5: 4f3b6dab1de9cbb847df89d8b417378a
30 Source4: %{name}.conf.patch
31 Source5: %{name}.logrotate
33 Source7: %{name}-cachemgr-apache.conf
34 Source8: %{name}.tmpfiles
35 Patch0: %{name}-fhs.patch
36 Patch1: %{name}-location.patch
37 Patch2: %{name}-crash-on-ENOSPC.patch
38 Patch4: %{name}-2.5.STABLE4-apache-like-combined-log.patch
39 Patch5: %{name}-ppc-m32.patch
40 Patch6: %{name}-cachemgr-webapp.patch
41 # http://www.squid-cache.org/mail-archive/squid-dev/201207/0099.html
42 # http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-cache-1.patch
43 Patch7: squidv3-vary-cache-1.patch
44 # http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-headers-shm-hack.patch
45 Patch8: squidv3-vary-headers-shm-hack.patch
46 URL: http://www.squid-cache.org/
47 BuildRequires: autoconf
48 BuildRequires: automake
49 BuildRequires: cppunit-devel
50 BuildRequires: cyrus-sasl-devel >= 2.1.0
51 BuildRequires: db-devel
52 BuildRequires: expat-devel
53 BuildRequires: heimdal-devel
54 BuildRequires: libcap-devel >= 1:2.09
55 BuildRequires: libecap-devel >= 0.2.0
56 BuildRequires: libltdl-devel
57 BuildRequires: libnetfilter_conntrack-devel
58 BuildRequires: libstdc++-devel
59 BuildRequires: libtool
60 BuildRequires: libxml2-devel
61 BuildRequires: openldap-devel >= 2.3.0
62 BuildRequires: openssl-devel >= 0.9.7d
63 BuildRequires: pam-devel
64 BuildRequires: perl-base
65 BuildRequires: rpmbuild(macros) >= 1.268
66 BuildRequires: sed >= 4.0
68 Requires(post): /bin/hostname
69 Requires(post): fileutils
70 Requires(post): findutils
72 Requires(post,preun): /sbin/chkconfig
73 Requires(postun): /usr/sbin/groupdel
74 Requires(postun): /usr/sbin/userdel
75 Requires(pre): /usr/bin/getgid
76 Requires(pre): /usr/lib/rpm/user_group.sh
77 Requires(pre): /usr/sbin/groupadd
78 Requires(pre): /usr/sbin/useradd
79 Requires(pre,triggerpostun): /bin/id
80 Requires(pre,triggerpostun): /usr/sbin/usermod
81 Requires: rc-scripts >= 0.2.0
82 Requires: setup >= 2.4.6
83 Provides: group(squid)
84 # epoll enabled by default:
85 Requires: uname(release) >= 2.6
86 # TPROXYv4 (v2 disabled b/c it breaks v4)
87 #Suggests: uname(release) >= 2.6.28.3
89 Conflicts: logrotate < 3.8.0
90 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
92 %define _webapps /etc/webapps
93 %define _webapp cachemgr
94 %define _libexecdir %{_libdir}/%{name}
95 %define _sysconfdir /etc/%{name}
96 %define _cgidir %{_prefix}/lib/cgi-bin/%{_webapp}
99 Squid is a high-performance proxy caching server for web clients,
100 supporting FTP, gopher, and HTTP data objects. Unlike traditional
101 caching software, Squid handles all requests in a single,
102 non-blocking, I/O-driven process. Squid keeps meta data and especially
103 hot objects cached in RAM, caches DNS lookups, supports non-blocking
104 DNS lookups, and implements negative caching of failed requests. If
105 you are tight on memory, check out the NOVM version of this package.
106 Squid supports SSL, extensive access controls, and full request
107 logging. By using the lightweight Internet Cache Protocol, Squid
108 caches can be arranged in a hierarchy or mesh for additional bandwidth
109 savings. Squid consists of a main server program squid, a Domain Name
110 System lookup program dnsserver, a program for retrieving FTP data
111 ftpget, and some management and client tools. When squid starts up, it
112 spawns a configurable number of dnsserver processes, each of which can
113 perform a single, blocking Domain Name System (DNS) lookup. This
114 reduces the amount of time the cache waits for DNS lookups. Squid is
115 derived from the ARPA-funded Harvest project.
117 %description -l es.UTF-8
118 Squid es un servidor proxy con caché de alto desempeño para clientes
119 web, soportando FTP, gopher y HTTP. Diferentemente de softwares
120 tradicionales de caché squid manipula todas las requisiciones en un
121 único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y
122 objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché
123 de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa
124 un caché negativo de requisiciones que fallen. Si tiene poca memoria
125 da un vistazo en la versión NOVM de este paquete. También soporta SSL,
126 controles extensivos de acceso y registro (log) completo de las
127 requisiciones. Usando el ligero Protocolo de Caches Internet (ICP)
128 puede ser usado en una jerarquía de servidores para mayor ahorro de la
129 banda de comunicación. Está compuesto del programa squid (servidor
130 principal), del programa dnsserver (para resolución DNS), del programa
131 ftpget (para transmisiones ftp) y otras herramientas clientes y para
132 administración. Cuando squid se inicia, dispara un número configurable
133 de procesos dnsserver, cada uno pudiendo ejecutar solamente una
134 resolución DNS con poder de bloquear. Esto reduce el tiempo que el
135 caché espera por resoluciones DNS. Fue derivado del proyecto Harvest,
136 financiado por la ARPA.
138 %description -l pl.UTF-8
139 Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW,
140 klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w
141 pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla
142 SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych
143 danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer
144 squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet
145 squid obejmuje: główny program serwera squid, program dostarczający
146 informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz
147 pomocnicze programy do zarządzania. Squid wywodzi się ze
148 sponsorowanego przez ARPA projektu Harvest.
150 %description -l pt_BR.UTF-8
151 O Squid é um servidor proxy com cache de alta performance para
152 clientes web, suportando FTP, gopher e HTTP. Diferentemente de
153 softwares tradicionais de cache o squid manipula todas as requisições
154 em um único processo sem bloqueios, direcionado a E/S.
156 Mantém meta dados e objetos freqüentemente pedidos num cache em
157 memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem
158 bloqueio e implementa um cache negativo de requisições que falharem.
159 Se você tem pouca memória dê uma olhada na versão NOVM deste pacote.
161 Também suporta SSL, controles extensivos de acesso e registro (log)
162 completo das requisições. Usando o leve Protocolo de Caches Internet
163 (ICP) ele pode ser usado em uma hierarquia de servidores para maior
164 economia de banda de comunicação.
166 Ele consiste do programa squid (servidor principal), do programa
167 dnsserver (para resolução DNS), do programa ftpget (para transmissões
168 ftp) e outras ferramentas clientes e para gerenciamento. Quando o
169 squid é inicializado ele dispara um número configurável de processos
170 dnsserver, cada um podendo executar somente uma resolução DNS
171 bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS.
173 Foi derivado do projeto Harvest, financiado pela ARPA.
175 %description -l ru.UTF-8
176 Squid - это высокопроизводительный кэширующий прокси-сервер для
177 клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В
178 отличие от традиционных кэширующих программ, Squid обрабатывает все
179 запросы при помощи одного неблокирующегося, управляемого
180 вводом-выводом процесса.
182 Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб
185 %description -l uk.UTF-8
186 Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує
187 об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних
188 кешуючих програм, Squid обробляє всі запити за допомогою одного
189 неблокуючого, керованого вводом-виводом процесу.
191 Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб
195 Summary: CGI script for Squid management
196 Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW
197 Group: Applications/WWW
198 # does not require squid locally
199 Requires: group(http)
202 Requires: webserver(access)
203 Requires: webserver(alias)
204 Requires: webserver(cgi)
206 %description cachemgr
207 Cachemgr.cgi is a CGI script that allows administrator to check
208 various informations about Squid via WWW.
210 %description cachemgr -l pl.UTF-8
211 Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi
212 zapoznać się z informacjami o pracy Squida poprzez WWW.
214 %package kerberos_auth
215 Summary: Authentication via the Negotiate RFC 4559 for proxies
216 Summary(pl.UTF-8): Uwierzytelnianie przez negocjację RFC 4559 dla serwerów proxy
217 Group: Networking/Admin
218 Requires: %{name} = %{epoch}:%{version}-%{release}
219 Obsoletes: squid-kerb_auth < %{epoch}:%{version}-%{release}
220 Provides: squid-kerb_auth = %{epoch}:%{version}-%{release}
222 %description kerberos_auth
223 This squid helper is a reference implementation that supports
224 authentication via the Negotiate RFC 4559 for proxies. It decodes RFC
225 2478 SPNEGO GSS-API tokens from IE7 either through helper functions or
226 via SPNEGO supporting Kerberos libraries and RFC 1964 Kerberos tokens
227 from Firefox on Linux.
229 %description kerberos_auth -l pl.UTF-8
230 Pakiet ten jest implementacją uwierzytelniania przez negocjacji RFC
231 4559 dla serwerów proxy. Dekoduje żetony SPNEGO GSS-API RFC 2478 z IE7
232 poprzez funkcje pomocnicze lub przez biblioteki Kerberos wspierające
233 SPNEGO i żetony Kerberos RFC 1964 z Firefoksa w Linuksie.
236 Summary: LDAP authentication helper for Squid
237 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
238 Group: Networking/Admin
239 Requires: %{name} = %{epoch}:%{version}-%{release}
241 %description ldap_auth
242 This Squid helper allows authentication against LDAP directories using
243 the "simple authentication" (plain-text).
245 %description ldap_auth -l pl.UTF-8
246 Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego
247 uwierzytelniania (otwartym tekstem).
250 Summary: PAM authentication helper for Squid
251 Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida
252 Group: Networking/Admin
253 Requires: %{name} = %{epoch}:%{version}-%{release}
254 Requires: pam >= 0.77.3
256 %description pam_auth
257 This program authenticates users against a PAM configured
258 authentication service "squid". This allows you to authenticate Squid
259 users to any authentication source for which you have a PAM module.
261 %description pam_auth -l pl.UTF-8
262 Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym
263 źródle posiadającym moduł PAM.
266 Summary: SMB authentication helper for Squid
267 Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida
268 Group: Networking/Admin
269 Requires: %{name} = %{epoch}:%{version}-%{release}
271 %description smb_auth
272 This is a proxy authentication module. With smb_auth you can
273 authenticate proxy users against an SMB server like Windows NT or
276 %description smb_auth -l pl.UTF-8
277 To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można
278 uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy
282 Summary: MSNT domain authentication helper for Squid
283 Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida
284 Group: Networking/Admin
285 Requires: %{name} = %{epoch}:%{version}-%{release}
287 %description msnt_auth
288 This is an authentication module for the Squid proxy server to
289 authenticate users on an NT domain.
291 %description msnt_auth -l pl.UTF-8
292 Jest to moduł uwierzytelniania proxy, który pozwala na
293 uwierzytelnianie użytkowników proxy w domenie NT.
296 Summary: NIS authentication helper for Squid
297 Summary(pl.UTF-8): Obsługa uwierzytelniania NIS dla squida
298 Group: Networking/Admin
299 Requires: %{name} = %{epoch}:%{version}-%{release}
300 Obsoletes: squid-yp_auth < %{epoch}:%{version}-%{release}
301 Provides: squid-yp_auth = %{epoch}:%{version}-%{release}
303 %description nis_auth
304 This is an authentication module for the Squid proxy server to
305 authenticate users on NIS.
307 %description nis_auth -l pl.UTF-8
308 Jest to moduł uwierzytelniania proxy, który pozwala na
309 uwierzytelnianie użytkowników proxy poprzez NIS.
312 Summary: NCSA httpd style authentication helper for Squid
313 Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida
314 Group: Networking/Admin
315 Requires: %{name} = %{epoch}:%{version}-%{release}
317 %description ncsa_auth
318 This module uses a NCSA httpd style password file for authentication.
320 %description ncsa_auth -l pl.UTF-8
321 Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd.
324 Summary: SASL authentication helper for Squid
325 Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida
326 Group: Networking/Admin
327 Requires: %{name} = %{epoch}:%{version}-%{release}
329 %description sasl_auth
330 This is an authentication module for the Squid proxy server to
331 authenticate users via SASL.
333 %description sasl_auth -l pl.UTF-8
334 Jest to moduł uwierzytelniania proxy, który pozwala na
335 uwierzytelnianie użytkowników proxy poprzez SASL.
337 %package getpwname_auth
338 Summary: getpwname authentication helper for Squid
339 Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida
340 Group: Networking/Admin
341 Requires: %{name} = %{epoch}:%{version}-%{release}
343 %description getpwname_auth
344 This is an authentication module for the Squid proxy server to
345 authenticate users using getpwname.
347 %description getpwname_auth -l pl.UTF-8
348 Jest to moduł uwierzytelniania proxy, który pozwala na
349 uwierzytelnianie użytkowników proxy poprzez getpwname.
352 Summary: passwd authentication helper for Squid
353 Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida
354 Group: Networking/Admin
355 Requires: %{name} = %{epoch}:%{version}-%{release}
357 %description passwd_auth
358 This is an authentication module for the Squid proxy server to
359 authenticate users with separate passwd file.
361 %description passwd_auth -l pl.UTF-8
362 Jest to moduł uwierzytelniania proxy, który pozwala na
363 uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd.
366 Summary: NTLM authentication helper for Squid
367 Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida
368 Group: Networking/Admin
369 Requires: %{name} = %{epoch}:%{version}-%{release}
371 %description ntlm_auth
372 This is an authentication module for the Squid proxy server to
373 authenticate users on NTLM.
375 %description ntlm_auth -l pl.UTF-8
376 Jest to moduł uwierzytelniania proxy, który pozwala na
377 uwierzytelnianie użytkowników proxy poprzez NTLM.
380 Summary: RADIUS authentication helper for Squid
381 Summary(pl.UTF-8): Obsługa uwierzytelniania RADIUS dla squida
382 Group: Networking/Admin
383 Requires: %{name} = %{epoch}:%{version}-%{release}
385 %description radius_auth
386 This helper allows Squid to connect to a RADIUS server to validate the
387 user name and password of Basic HTTP authentication.
389 %description radius_auth -l pl.UTF-8
390 Program ten pozwala na uwierzytelnianie użytkowników squida przez
394 Summary: Database authentication helper for Squid
395 Summary(pl.UTF-8): Obsługa uwierzytelniania przez bazę danych dla squida
396 Group: Networking/Admin
397 Requires: %{name} = %{epoch}:%{version}-%{release}
400 This is an authentication module for the Squid proxy server to
401 authenticate users againsta a database.
403 %description db_auth -l pl.UTF-8
404 Jest to moduł uwierzytelniania proxy, który pozwala na
405 uwierzytelnianie użytkowników proxy poprzez bazę danych.
408 Summary: POP3 authentication helper for Squid
409 Summary(pl.UTF-8): Obsługa uwierzytelniania POP3 dla squida
410 Group: Networking/Admin
411 Requires: %{name} = %{epoch}:%{version}-%{release}
413 %description pop3_auth
414 This is an authentication module for the Squid proxy server to
415 authenticate users on POP3.
417 %description pop3_auth -l pl.UTF-8
418 Jest to moduł uwierzytelniania proxy, który pozwala na
419 uwierzytelnianie użytkowników proxy poprzez POP3.
421 %package negotiate_wrapper_auth
422 Summary: Kerberos authentication helper for Squid
423 Summary(pl.UTF-8): Obsługa uwierzytelniania Kerberos dla squida
424 Group: Networking/Admin
425 Requires: %{name} = %{epoch}:%{version}-%{release}
426 Requires: %{name}-ntlm_auth = %{epoch}:%{version}-%{release}
427 Requires: %{name}-kerberos_auth = %{epoch}:%{version}-%{release}
429 %description negotiate_wrapper_auth
430 This is an authentication module for the Squid proxy server to
431 authenticate users on Kerberos.
433 %description negotiate_wrapper_auth -l pl.UTF-8
434 Jest to moduł uwierzytelniania proxy, który pozwala na
435 uwierzytelnianie użytkowników proxy poprzez Kerberosa.
437 %package digest_edirectory_auth
438 Summary: eDirectory authentication helper for Squid
439 Summary(pl.UTF-8): Obsługa uwierzytelniania eDirectory dla squida
440 Group: Networking/Admin
441 Requires: %{name} = %{epoch}:%{version}-%{release}
443 %description digest_edirectory_auth
444 This is an authentication module for the Squid proxy server to
445 authenticate users on eDirectory.
447 %description digest_edirectory_auth -l pl.UTF-8
448 Jest to moduł uwierzytelniania proxy, który pozwala na
449 uwierzytelnianie użytkowników proxy poprzez eDirectory.
451 %package digest_ldap_auth
452 Summary: LDAP authentication helper for Squid
453 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
454 Group: Networking/Admin
455 Requires: %{name} = %{epoch}:%{version}-%{release}
457 %description digest_ldap_auth
458 This is an authentication module for the Squid proxy server to
459 authenticate users on LDAP.
461 %description digest_ldap_auth -l pl.UTF-8
462 Jest to moduł uwierzytelniania proxy, który pozwala na
463 uwierzytelnianie użytkowników proxy poprzez LDAP.
466 Summary: IP external ACL helper for Squid
467 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida
468 Group: Networking/Admin
469 Requires: %{name} = %{epoch}:%{version}-%{release}
472 This is an external ACL module for the Squid proxy server to limit
473 access for users based on IP address.
475 %description ip_acl -l pl.UTF-8
476 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
477 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP.
480 Summary: LDAP group external ACL helper for Squid
481 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida
482 Group: Networking/Admin
483 Requires: %{name} = %{epoch}:%{version}-%{release}
485 %description ldap_acl
486 This is an external ACL module for the Squid proxy server to limit
487 access for users based on LDAP group membership.
489 %description ldap_acl -l pl.UTF-8
490 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
491 ograniczenie dostępu użytkowników proxy na podstawie ich
492 przynależności do grup LDAP.
495 Summary: UNIX group external ACL helper for Squid
496 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida
497 Group: Networking/Admin
498 Requires: %{name} = %{epoch}:%{version}-%{release}
500 %description unix_acl
501 This is an external ACL module for the Squid proxy server to limit
502 access for users based on UNIX group membership.
504 %description unix_acl -l pl.UTF-8
505 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
506 ograniczenie dostępu użytkowników proxy na podstawie ich
507 przynależności do grup UNIX.
510 Summary: NT domain group external ACL helper for Squid
511 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida
512 Group: Networking/Admin
513 Requires: %{name} = %{epoch}:%{version}-%{release}
515 %description wbinfo_acl
516 This is an external ACL module for the Squid proxy server to limit
517 access for users based on NT domain group membership using wbinfo.
519 %description wbinfo_acl -l pl.UTF-8
520 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
521 ograniczenie dostępu użytkowników proxy na podstawie ich
522 przynależności do grup w domenie NT przy użyciu wbinfo.
525 Summary: Squid session tracking external ACL group helper
526 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez śledzenie sesji
527 Group: Networking/Admin
528 Requires: %{name} = %{epoch}:%{version}-%{release}
530 %description session_acl
531 This helper maintains a concept of sessions by monitoring requests and
532 timing out sessions if no requests have been seen for the idle timeout
535 %description session_acl -l pl.UTF-8
536 Moduł oparty na koncepcji sesji, śledzący zapytania i wygaszający
537 sesje jeśli w określonym czasie nie widziano w ich obrębie kolejnych
540 %package edirectory_userip_acl
541 Summary: Squid eDirectory IP Lookup Helper
542 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez eDirectory
543 Group: Networking/Admin
544 Requires: %{name} = %{epoch}:%{version}-%{release}
546 %description edirectory_userip_acl
547 This is an external ACL module for the Squid proxy server to limit
548 access for users based on IP address lookup in eDirectory.
550 %description edirectory_userip_acl -l pl.UTF-8
551 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
552 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP
553 popranego z eDirectory.
555 %package kerberos_ldap_group_acl
556 Summary: Squid LDAP external acl group helper for Kerberos or NTLM credentials
557 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP/Kerberos/NTLM dla squida
558 Group: Networking/Admin
559 Requires: %{name} = %{epoch}:%{version}-%{release}
561 %description kerberos_ldap_group_acl
562 This is an external ACL module for the Squid proxy server to limit
563 access for users based on LDAP Kerberos or NTLM credentials.
565 %description kerberos_ldap_group_acl -l pl.UTF-8
566 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
567 ograniczenie dostępu użytkowników proxy na podstawie ich
568 uprawnień Kerberosowych lub NTLM-owych w LDAP.
571 Summary: Perl scripts for Squid
572 Summary(pl.UTF-8): Skrypty perlowe dla Squida
573 Group: Networking/Admin
574 Requires: %{name} = %{epoch}:%{version}-%{release}
577 This package contains Perl scripts and contributed programs for Squid.
579 %description scripts -l pl.UTF-8
580 Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida.
587 %{?with_combined_log:%patch4 -p1}
595 %{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts}/*.pl
604 --disable-strict-error-checking \
605 --with-default-user=squid \
606 --with-logdir=/var/log/squid \
607 --with-swapdir=/var/cache/squid \
608 --with-pidfile=/var/run/squid.pid \
609 --datadir=%{_datadir}/squid \
612 --enable-basic-auth-helpers \
613 --enable-ntlm-auth-helpers \
614 --enable-negotiate-auth-helpers \
615 --enable-digest-auth-helpers \
616 --enable-external-acl-helpers \
617 --enable-url-rewrite-helpers \
618 --enable-ntlm-fail-open \
619 --enable-cache-digests \
620 --enable-coss-aio-ops \
621 --enable-delay-pools \
622 --enable-err-language=English \
624 --enable-follow-x-forwarded-for \
625 --enable-forward-log \
626 --enable-forw-via-db \
630 --enable-icap-client \
633 --enable-kill-parent-hack \
634 --enable-large-cache-files \
635 --enable-linux-netfilter \
636 --disable-linux-tproxy \
637 --enable-multicast-miss \
638 --enable-referer-log \
639 --enable-removal-policies="heap,lru" \
640 --enable-storeio="aufs,diskd,rock,ufs" \
644 --enable-useragent-log \
645 --enable-x-accelerator-vary \
646 --localstatedir=/var \
647 --sysconfdir=%{_sysconfdir} \
648 --with-auth-on-acceleration \
657 rm -rf $RPM_BUILD_ROOT
658 install -d $RPM_BUILD_ROOT{%{_cgidir},%{_webapps}/%{_webapp}} \
659 $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \
660 $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \
661 $RPM_BUILD_ROOT%{_mandir}/man8 \
662 $RPM_BUILD_ROOT%{_datadir}/squid \
663 $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid \
664 $RPM_BUILD_ROOT%{systemdtmpfilesdir}
667 DESTDIR=$RPM_BUILD_ROOT
669 %{__cp} -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib
670 install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir}
672 install %{SOURCE6} $RPM_BUILD_ROOT/etc/pam.d/squid
673 touch $RPM_BUILD_ROOT/etc/security/blacklist.squid
675 install %{SOURCE8} $RPM_BUILD_ROOT%{systemdtmpfilesdir}/squid.conf
677 %{__mv} -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir}
678 %{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/apache.conf
679 %{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/httpd.conf
680 %{__rm} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/cachemgr.conf.default
682 cd $RPM_BUILD_ROOT/etc/squid
683 %{__patch} -p0 < %{SOURCE4}
684 %{__rm} *.default squid.conf.documented
687 install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid
688 install %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/squid
689 install %{SOURCE5} $RPM_BUILD_ROOT/etc/logrotate.d/squid
691 touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log
693 %{__rm} $RPM_BUILD_ROOT%{_datadir}/squid/errors/{COPYRIGHT,TRANSLATORS}
695 # cp, to have re-entrant install
698 # We don't want Makefiles as docs...
699 %{__rm} docs/Makefile*
701 :> $RPM_BUILD_ROOT/var/cache/squid/netdb_state
702 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state
703 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean
704 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean
707 rm -rf $RPM_BUILD_ROOT
710 %groupadd -g 91 squid
711 %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid
712 %addusertogroup stats squid
714 [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || :
717 if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then
718 hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost'
719 echo visible_hostname $hostname >> /etc/squid/squid.conf
722 /sbin/chkconfig --add squid
723 if [ "$1" = "1" ]; then
724 /sbin/service squid init >&2
726 %service squid restart
729 if [ "$1" = "0" ]; then
730 /sbin/chkconfig --del squid
733 # nuke squid cache if uninstalling
734 rm -rf /var/cache/squid/??
738 if [ "$1" = "0" ]; then
743 %triggerpostun -- squid < 7:2.5.STABLE7-5
744 %addusertogroup stats squid
746 %triggerin cachemgr -- apache1 < 1.3.37-3, apache1-base
747 %webapp_register apache %{_webapp}
749 %triggerun cachemgr -- apache1 < 1.3.37-3, apache1-base
750 %webapp_unregister apache %{_webapp}
752 %triggerin cachemgr -- apache < 2.2.0, apache-base
753 %webapp_register httpd %{_webapp}
755 %triggerun cachemgr -- apache < 2.2.0, apache-base
756 %webapp_unregister httpd %{_webapp}
758 %triggerpostun -- cachemgr < 7:3.0.STABLE10-0.2
759 if [ -f %{_sysconfdir}/cachemgr.conf.rpmsave ]; then
760 cp -f %{_webapps}/%{_webapp}/cachemgr.conf{,.rpmsave}
761 mv -f %{_sysconfdir}/cachemgr.conf.rpmsave %{_webapps}/%{_webapp}/cachemgr.conf
765 %defattr(644,root,root,755)
766 %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART
767 %doc RELEASENOTES.html SPONSORS docs/* src/mib.txt book-full.html
768 %doc src/squid.conf.default src/squid.conf.documented src/mime.conf.default
769 %doc errors/TRANSLATORS
770 %attr(755,root,root) %{_bindir}/purge
771 %attr(755,root,root) %{_bindir}/squidclient
774 %attr(755,root,root) %{_libexecdir}/diskd
775 # YES, it has to be suid root, it sends ICMP packets.
776 %attr(4754,root,squid) %{_libexecdir}/pinger
777 %attr(755,root,root) %{_libexecdir}/unlinkd
778 %attr(755,root,root) %{_libexecdir}/ntlm_fake_auth
779 %attr(755,root,root) %{_libexecdir}/basic_fake_auth
780 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite
781 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite.sh
782 %attr(755,root,root) %{_libexecdir}/log_file_daemon
783 %attr(755,root,root) %{_sbindir}/squid
785 %attr(754,root,root) /etc/rc.d/init.d/squid
786 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid
787 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid
790 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf
791 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf
792 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/errorpage.css
794 %dir %{_datadir}/squid
795 %dir %{_datadir}/squid/errors
796 %{_datadir}/squid/icons
797 %{_datadir}/squid/mib.txt
798 %{_datadir}/squid/errors/templates
799 %lang(af) %{_datadir}/squid/errors/af
800 %lang(ar) %{_datadir}/squid/errors/ar
801 %lang(ar) %{_datadir}/squid/errors/ar-*
802 %lang(az) %{_datadir}/squid/errors/az
803 %lang(az) %{_datadir}/squid/errors/az-*
804 %lang(bg) %{_datadir}/squid/errors/bg
805 %lang(bg) %{_datadir}/squid/errors/bg-*
806 %lang(ca) %{_datadir}/squid/errors/ca
807 %lang(cs) %{_datadir}/squid/errors/cs
808 %lang(cs) %{_datadir}/squid/errors/cs-*
809 %lang(da) %{_datadir}/squid/errors/da
810 %lang(da) %{_datadir}/squid/errors/da-*
811 %lang(de) %{_datadir}/squid/errors/de
812 %lang(de) %{_datadir}/squid/errors/de-*
813 %lang(el) %{_datadir}/squid/errors/el
814 %lang(el) %{_datadir}/squid/errors/el-*
815 %{_datadir}/squid/errors/en
816 %{_datadir}/squid/errors/en-*
817 %lang(es) %{_datadir}/squid/errors/es
818 %lang(es) %{_datadir}/squid/errors/es-*
819 %lang(et) %{_datadir}/squid/errors/et
820 %lang(et) %{_datadir}/squid/errors/et-*
821 %lang(fa) %{_datadir}/squid/errors/fa
822 %lang(fa) %{_datadir}/squid/errors/fa-*
823 %lang(fi) %{_datadir}/squid/errors/fi
824 %lang(fi) %{_datadir}/squid/errors/fi-*
825 %lang(fr) %{_datadir}/squid/errors/fr
826 %lang(fr) %{_datadir}/squid/errors/fr-*
827 %lang(he) %{_datadir}/squid/errors/he
828 %lang(he) %{_datadir}/squid/errors/he-*
829 %lang(hu) %{_datadir}/squid/errors/hu
830 %lang(hu) %{_datadir}/squid/errors/hu-*
831 %lang(hy) %{_datadir}/squid/errors/hy
832 %lang(hy) %{_datadir}/squid/errors/hy-*
833 %lang(id) %{_datadir}/squid/errors/id
834 %lang(id) %{_datadir}/squid/errors/id-*
835 %lang(it) %{_datadir}/squid/errors/it
836 %lang(it) %{_datadir}/squid/errors/it-*
837 %lang(ja) %{_datadir}/squid/errors/ja
838 %lang(ja) %{_datadir}/squid/errors/ja-*
839 %lang(ko) %{_datadir}/squid/errors/ko
840 %lang(ko) %{_datadir}/squid/errors/ko-*
841 %lang(lt) %{_datadir}/squid/errors/lt
842 %lang(lt) %{_datadir}/squid/errors/lt-*
843 %lang(lv) %{_datadir}/squid/errors/lv
844 %lang(lv) %{_datadir}/squid/errors/lv-*
845 %lang(ms) %{_datadir}/squid/errors/ms
846 %lang(ms) %{_datadir}/squid/errors/ms-*
847 %lang(nl) %{_datadir}/squid/errors/nl
848 %lang(nl) %{_datadir}/squid/errors/nl-*
849 %lang(oc) %{_datadir}/squid/errors/oc
850 %lang(pl) %{_datadir}/squid/errors/pl
851 %lang(pl) %{_datadir}/squid/errors/pl-*
852 %lang(pt) %{_datadir}/squid/errors/pt
853 %lang(pt) %{_datadir}/squid/errors/pt-pt
854 %lang(pt_BR) %{_datadir}/squid/errors/pt-br
855 %lang(ro) %{_datadir}/squid/errors/ro
856 %lang(ro) %{_datadir}/squid/errors/ro-*
857 %lang(ru) %{_datadir}/squid/errors/ru
858 %lang(ru) %{_datadir}/squid/errors/ru-*
859 %lang(sk) %{_datadir}/squid/errors/sk
860 %lang(sk) %{_datadir}/squid/errors/sk-*
861 %lang(sk) %{_datadir}/squid/errors/sl
862 %lang(sk) %{_datadir}/squid/errors/sl-*
863 %lang(sr) %{_datadir}/squid/errors/sr
864 %lang(sr) %{_datadir}/squid/errors/sr-*
865 %lang(sv) %{_datadir}/squid/errors/sv
866 %lang(sv) %{_datadir}/squid/errors/sv-*
867 %lang(th) %{_datadir}/squid/errors/th
868 %lang(th) %{_datadir}/squid/errors/th-*
869 %lang(tr) %{_datadir}/squid/errors/tr
870 %lang(tr) %{_datadir}/squid/errors/tr-*
871 %lang(uk) %{_datadir}/squid/errors/uk
872 %lang(uk) %{_datadir}/squid/errors/uk-*
873 %lang(uz) %{_datadir}/squid/errors/uz
874 %lang(vi) %{_datadir}/squid/errors/vi
875 %lang(vi) %{_datadir}/squid/errors/vi-*
876 %lang(zh_CN) %{_datadir}/squid/errors/zh-cn
877 %lang(zh_CN) %{_datadir}/squid/errors/zh-sg
878 %lang(zh_CN) %{_datadir}/squid/errors/zh-tw
879 %lang(zh_TW) %{_datadir}/squid/errors/zh-hk
880 %lang(zh_TW) %{_datadir}/squid/errors/zh-mo
882 %{systemdtmpfilesdir}/squid.conf
883 %attr(770,root,squid) %dir /var/run/squid
885 %attr(770,root,squid) %dir /var/log/archive/squid
886 %attr(770,root,squid) %dir /var/log/squid
887 %attr(660,root,squid) %ghost /var/log/squid/*
889 %attr(770,root,squid) %dir /var/cache/squid
890 %ghost /var/cache/squid/netdb_state
891 %ghost /var/cache/squid/swap.state
892 %ghost /var/cache/squid/swap.state.clean
893 %ghost /var/cache/squid/swap.state.last-clean
894 %{_mandir}/man1/squidclient.1*
895 %{_mandir}/man8/squid.8*
898 %defattr(644,root,root,755)
899 %dir %attr(750,root,http) %{_webapps}/%{_webapp}
900 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/apache.conf
901 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/httpd.conf
902 %attr(640,root,http) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/cachemgr.conf
904 %attr(755,root,root) %{_cgidir}/cachemgr.cgi
905 %{_mandir}/man8/cachemgr.cgi.8*
908 %defattr(644,root,root,755)
909 %doc helpers/basic_auth/LDAP/README
910 %attr(755,root,root) %{_libexecdir}/basic_ldap_auth
911 %{_mandir}/man8/basic_ldap_auth.*
914 %defattr(644,root,root,755)
915 %config(noreplace) /etc/pam.d/squid
916 %config(noreplace) /etc/security/blacklist.squid
917 %attr(755,root,root) %{_libexecdir}/basic_pam_auth
918 %{_mandir}/man8/basic_pam_auth.8*
921 %defattr(644,root,root,755)
922 %doc helpers/basic_auth/SMB/ChangeLog
923 %attr(755,root,root) %{_libexecdir}/basic_smb_auth*
926 %defattr(644,root,root,755)
927 %doc helpers/basic_auth/MSNT/README*
928 %doc helpers/basic_auth/MSNT-multi-domain/README*
929 %attr(755,root,root) %{_libexecdir}/basic_msnt_auth
930 %attr(755,root,root) %{_libexecdir}/basic_msnt_multi_domain_auth
931 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf
934 %defattr(644,root,root,755)
935 %attr(755,root,root) %{_libexecdir}/basic_nis_auth
938 %defattr(644,root,root,755)
939 %attr(755,root,root) %{_libexecdir}/basic_ncsa_auth
940 %{_mandir}/man8/basic_ncsa_auth.8*
943 %defattr(644,root,root,755)
944 %doc helpers/basic_auth/SASL/basic_sasl_auth.{conf,pam}
945 %attr(755,root,root) %{_libexecdir}/basic_sasl_auth
946 %{_mandir}/man8/basic_sasl_auth.8*
948 %files getpwname_auth
949 %defattr(644,root,root,755)
950 %attr(755,root,root) %{_libexecdir}/basic_getpwnam_auth
951 %{_mandir}/man8/basic_getpwnam_auth.8*
954 %defattr(644,root,root,755)
955 %attr(755,root,root) %{_libexecdir}/digest_file_auth
956 %{_mandir}/man8/digest_file_auth.8*
959 %defattr(644,root,root,755)
960 %doc helpers/negotiate_auth/kerberos/README
961 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth
962 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth_test
963 %{_mandir}/man8/negotiate_kerberos_auth.8*
966 %defattr(644,root,root,755)
967 %attr(755,root,root) %{_libexecdir}/ntlm_smb_lm_auth
970 %defattr(644,root,root,755)
971 %doc helpers/basic_auth/RADIUS/README
972 %attr(755,root,root) %{_libexecdir}/basic_radius_auth
973 %{_mandir}/man8/basic_radius_auth.8*
975 %files digest_ldap_auth
976 %defattr(644,root,root,755)
977 %attr(755,root,root) %{_libexecdir}/digest_ldap_auth
980 %defattr(644,root,root,755)
981 %{_libexecdir}/basic_db_auth
982 %{_mandir}/man8/basic_db_auth.8*
985 %defattr(644,root,root,755)
986 %{_libexecdir}/basic_pop3_auth
988 %files digest_edirectory_auth
989 %defattr(644,root,root,755)
990 %{_libexecdir}/digest_edirectory_auth
992 %files negotiate_wrapper_auth
993 %defattr(644,root,root,755)
994 %{_libexecdir}/negotiate_wrapper_auth
997 %defattr(644,root,root,755)
998 %doc helpers/external_acl/file_userip/example*
999 %attr(755,root,root) %{_libexecdir}/ext_file_userip_acl
1000 %{_mandir}/man8/ext_file_userip_acl.*
1003 %defattr(644,root,root,755)
1004 %attr(755,root,root) %{_libexecdir}/ext_ldap_group_acl
1005 %{_mandir}/man8/ext_ldap_group_acl.*
1008 %defattr(644,root,root,755)
1009 %attr(755,root,root) %{_libexecdir}/ext_unix_group_acl
1010 %{_mandir}/man8/ext_unix_group_acl.*
1013 %defattr(644,root,root,755)
1014 %attr(755,root,root) %{_libexecdir}/ext_wbinfo_group_acl
1015 %{_mandir}/man8/ext_wbinfo_group_acl.8*
1018 %defattr(644,root,root,755)
1019 %attr(755,root,root) %{_libexecdir}/ext_session_acl
1020 %{_mandir}/man8/ext_session_acl.8*
1022 %files edirectory_userip_acl
1023 %defattr(644,root,root,755)
1024 %{_libexecdir}/ext_edirectory_userip_acl
1025 %{_mandir}/man8/ext_edirectory_userip_acl.8*
1027 %files kerberos_ldap_group_acl
1028 %defattr(644,root,root,755)
1029 %{_libexecdir}/ext_kerberos_ldap_group_acl
1032 %defattr(644,root,root,755)
1033 %attr(755,root,root) %{_libexecdir}/contrib
1034 %attr(755,root,root) %{_libexecdir}/AnnounceCache.pl
1035 %attr(755,root,root) %{_libexecdir}/access-log-matrix.pl
1036 %attr(755,root,root) %{_libexecdir}/cache-compare.pl
1037 %attr(755,root,root) %{_libexecdir}/cachetrace.pl
1038 %attr(755,root,root) %{_libexecdir}/calc-must-ids.pl
1039 %attr(755,root,root) %{_libexecdir}/cert_tool
1040 %attr(755,root,root) %{_libexecdir}/check_cache.pl
1041 %attr(755,root,root) %{_libexecdir}/fileno-to-pathname.pl
1042 %attr(755,root,root) %{_libexecdir}/find-alive.pl
1043 %attr(755,root,root) %{_libexecdir}/flag_truncs.pl
1044 %attr(755,root,root) %{_libexecdir}/helper-mux.pl
1045 %attr(755,root,root) %{_libexecdir}/icpserver.pl
1046 %attr(755,root,root) %{_libexecdir}/icp-test.pl
1047 %attr(755,root,root) %{_libexecdir}/tcp-banger.pl
1048 %attr(755,root,root) %{_libexecdir}/trace-job.pl
1049 %attr(755,root,root) %{_libexecdir}/trace-master.pl
1050 %attr(755,root,root) %{_libexecdir}/udp-banger.pl
1051 %attr(755,root,root) %{_libexecdir}/upgrade-1.0-store.pl