Difference between revisions of "Configuring squid with Squish"
From Notes_Wiki
m |
m |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Squid proxy server configuration]] > [[Configuring squid with Squish]] | |||
To configure squid with Squish use following steps: | To configure squid with Squish use following steps: | ||
#Verify that proxy server is working properly without squash | #Verify that proxy server is working properly without squash | ||
#yum -y install perl-CGI perl-GD | #yum -y install perl-CGI perl-GD | ||
#Download latest version of squash from http://www. | #Download latest version of squash from http://www.mcgill.org.za/software/squish/ | ||
#tar xzf squish.tar.gz | #tar xzf squish.tar.gz | ||
#cd squish-<version> | #cd squish-<version> | ||
| Line 70: | Line 69: | ||
#:</pre> | #:</pre> | ||
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Squid proxy server configuration]] > [[Configuring squid with Squish]] | |||
Latest revision as of 10:10, 14 July 2022
Home > CentOS > CentOS 6.x > Squid proxy server configuration > Configuring squid with Squish
To configure squid with Squish use following steps:
- Verify that proxy server is working properly without squash
- yum -y install perl-CGI perl-GD
- Download latest version of squash from http://www.mcgill.org.za/software/squish/
- tar xzf squish.tar.gz
- cd squish-<version>
- make install
- cp /usr/local/squish/apache-squish.conf /etc/httpd/conf.d
- edit /etc/squid/squid.conf
- replace hostname appropriately as necessary
- Move lines from 'added by squish (begin)' to end before generic 'http_access allow' line
- edit /etc/squid/squish.conf and set something like
- #Try higher limit for saurabh.barjatiya
- saurabh.barjatiya 5Gb/day 50Gb/week
- #Generic limit for everyone else
- * 2Gb/day 10Gb/week
-
- Comment all other existing lines
- service squid restart
- service httpd restart
- Note that squid restart is only required once. Later just changed squish.conf and new settings will get automatically applied
Test by running '/usr/local/squish/squish.cron.sh' manually. This line in present in /etc/crontab. Based on this /etc/squid/squished file is generated by cron once every five minutes.
Example squid configuration with both squish and LDAP authentication
Example configuration with LDAP authentication is:
#Saurabh - Require http authentication for all auth_param basic program /usr/lib64/squid/squid_ldap_auth -b "dc=sbarjatiya,dc=com" -f "uid=%s" -h ldap.sbarjatiya.com acl ldapauth proxy_auth REQUIRED ### added by squish (begin) # acl's for squish - autodetected, sometimes acl SQUISHLOC dst proxy.sbarjatiya.com acl SQUISHED1 proxy_auth -i "/etc/squid/squished" # acl SQUISHED2 ident "/etc/squid/squished" #acl SQUISHED3 src "/etc/squid/squished" # Error info that says you're squished deny_info http://proxy.sbarjatiya.com/squish/?squished& SQUISHED1 # deny_info http://proxy.sbarjatiya.com/squish/?squished& SQUISHED2 deny_info http://proxy.sbarjatiya.com/squish/?squished& SQUISHED3 # HTTP access controls for squish http_access allow SQUISHLOC http_access allow ldapauth !SQUISHED1 http_access deny SQUISHED1 # http_access deny SQUISHED2 #http_access deny SQUISHED3 ### added by squish (end) http_access allow ldapauth
squish setup on CentOS 7.0
Compared to above steps on CentOS 7.0 use following additional steps:
- Edit /usr/local/squish/squish.pl and change reload command to:
- systemctl reload squid
- Edit /etc/httpd/conf.d/apache-squish.conf to have
- Require all granted
Home > CentOS > CentOS 6.x > Squid proxy server configuration > Configuring squid with Squish
