{"id":275,"date":"2011-09-12T09:56:03","date_gmt":"2011-09-12T02:56:03","guid":{"rendered":"http:\/\/blog.trichev.com\/?p=275"},"modified":"2017-08-10T09:40:06","modified_gmt":"2017-08-10T02:40:06","slug":"squiddelay-poolsad-authcalamarissqstat","status":"publish","type":"post","link":"https:\/\/trichev.com\/blog\/2011\/09\/12\/squiddelay-poolsad-authcalamarissqstat\/","title":{"rendered":"Squid(delay pools)+AD auth+calamaris+sqstat"},"content":{"rendered":"

\u0421\u0440\u0430\u0437\u0443 \u0443\u043a\u0430\u0436\u0443 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438, \u043f\u043e\u0442\u043e\u043c\u0443 \u043a\u0430\u043a \u0441\u043b\u044f\u043c\u0437\u0435\u043d\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435.
\nhttp:\/\/www.lissyara.su\/articles\/freebsd\/programms\/squid+ad+group_access\/
\nhttp:\/\/sys-adm.org.ua\/www\/squid-ad.php<\/p>\n

OS: FreeBSD 8.2
\nSamba 3.5.11
\nSquid 3.1.15
\nRejik 3.2.6
\nCalamaris 2.59
\nSqStat \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u0437\u0434\u0435\u0441\u044c \u043f\u0440\u043e\u043f\u0438\u0441\u0430\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u044d\u0448-\u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0443. \u041f\u0440\u043e SqStat \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435.<\/p>\n

Samba:<\/strong><\/p>\n

cd \/usr\/ports\/net\/samba35\/
\n\/usr\/ports\/net\/samba35\/>make config
\n\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c:<\/p>\n

[X] LDAP With LDAP support
\n[X] ADS With Active Directory support
\n[X] WINBIND With WinBIND support
\n[X] SYSLOG With Syslog support
\n[X] UTMP With UTMP accounting support
\n[X] POPT With system-wide POPT library<\/p>\n

\/usr\/ports\/net\/samba35\/>make install clean
\ncd \/usr\/local\/etc
\n\/usr\/local\/etc\/>mcedit smb.conf<\/p>\n

#======================= Global Settings ============================
\n[global]
\n# netbios \u0438\u043c\u044f \u043d\u0430\u0448\u0435\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u0430
\nworkgroup = MYDOMAIN
\n# \u041a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u0430
\nserver string = Corporate Proxy Server
\n# \u0420\u0435\u0436\u0438\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438
\nsecurity = ADS
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0441\u0435\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d \u0434\u043e\u0441\u0442\u0443 \u043a \u043f\u0440\u043e\u043a\u0441\u0438
\nhosts allow = 10.201.1.
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043b\u043e\u0433\u043e\u0432
\nlog file = \/var\/log\/samba\/log.%m
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0440\u0430\u0437\u043c\u0435\u0440 \u043b\u043e\u0433\u043e\u0432 (\u0432 \u043a\u0438\u043b\u043e\u0431\u0430\u0439\u0442\u0430\u0445)
\nmax log size = 1024
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0438\u043c\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 (\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435! \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440
\n# \u0434\u043e\u043c\u0435\u043d\u0430,\u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u0439 \u0440\u043e\u043b\u044c PDC, \u0435\u0441\u043b\u0438 \u043e\u043d \u0443 \u0432\u0430\u0441 \u043e\u0434\u0438\u043d \u0442\u043e \u043d\u0435 \u0437\u0430\u043c\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0439\u0442\u0435\u0441\u044c. \u0423
\n# \u043c\u0435\u043d\u044f \u0432 \u0441\u0435\u0442\u0438 \u043c\u043d\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u043e\u0432.)
\npassword server = dc4.mydomain.local
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u043e\u043b\u043d\u043e\u0435 \u0438\u043c\u044f \u043d\u0430\u0448\u0435\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u0430
\nrealm = mydomain.local
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0442\u0438\u043f \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430
\npassdb backend = tdbsam
\n# \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438
\nsocket options = TCP_NODELAY
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0441\u0430\u043c\u0431\u0435, \u0447\u0442\u043e \u043e\u043d\u0430 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f PDC
\nlocal master = no
\nos level = 0
\ndomain master = no
\npreferred master = no
\ndomain logons = no
\n# \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0438
\ndisplay charset = koi8-r
\nunix charset = koi8-r
\ndos charset = cp866
\n# \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 winbind
\nwinbind use default domain = no
\nwinbind uid = 10000-20000
\nwinbind gid = 10000-20000
\nwinbind enum users = yes
\nwinbind enum groups = yes<\/p>\n

\u0420\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c nsswitch.conf:
\ncd \/etc
\nmcedit nsswitch.conf<\/p>\n

group: files winbind
\npasswd: files winbind<\/p>\n

\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c DNS:
\nnslookup dc4.mydomain.local<\/p>\n

\u0421\u0442\u0430\u0432\u0438\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f:
\nntpdate NTP-server<\/p>\n

\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 \u0432 \u0434\u043e\u043c\u0435\u043d:
\nnet ads join -U user%pass
\nUsing short domain name — MYDOMAIN
\nJoined ‘FREEBSD’ to realm \u2018mydomain.local\u2019<\/p>\n

mcedit rc.conf<\/p>\n

winbindd_enable=”YES”
\nwinbindd_flags=”-d 1″ # \u0417\u0434\u0435\u0441\u044c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0434\u0435\u0431\u0430\u0433\u0430<\/p>\n

\u0422\u0435\u0441\u0442\u0438\u043c:
\nwbinfo -p
\nwbinfo -t
\nwbinfo -u
\nwbinfo -g
\nwbinfo -D MYDOMAIN
\nnet ads info<\/p>\n

\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e
\nwbinfo –authenticate=MYDOMAIN\\\\ADAdmin%password<\/p>\n

\u041f\u043e\u043b\u0443\u0447\u0438\u043c \u0438\u043d\u0444\u0443 \u043f\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e:
\nid MYDOMAIN\\\\ADAdmin<\/p>\n

\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f:
\nnet setauthuser=MYDOMAIN\\\\proxy%password
\n\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c:
\nnet getauthuser
\nMYDOMAIN\\proxy%password<\/p>\n

Squid:<\/strong><\/p>\n

cd \/usr\/ports\/www\/squid31
\n\/usr\/ports\/www\/squid31\/>make config<\/p>\n

\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n

[X] SQUID_LDAP_AUTH Install LDAP authentication helpers
\n[X] SQUID_DELAY_POOLS Enable delay pools
\n[X] SQUID_SNMP Enable SNMP support
\n[X] SQUID_HTCP Enable HTCP support
\n[X] SQUID_CACHE_DIGESTS Enable cache digests
\n[X] SQUID_WCCP Enable Web Cache Coordination Prot. v1
\n[X] SQUID_IDENT Enable ident (RFC 931) lookups
\n[X] SQUID_ARP_ACL Enable ACLs based on ethernet address<\/p>\n

\u0423\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c:<\/p>\n

\/usr\/ports\/www\/squid31\/>make install clean<\/p>\n

mcedit \/usr\/local\/etc\/squid\/squid.conf
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c Squid \u043a\u0430\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e:
\nauth_param ntlm program \/usr\/local\/bin\/ntlm_auth –helper-protocol
\n=squid-2.5-ntlmssp
\nauth_param ntlm children 5
\nauth_param ntlm keep_alive on
\nauthenticate_cache_garbage_interval 15 minute
\nauthenticate_ttl 5 minute
\nauth_param basic program \/usr\/local\/bin\/ntlm_auth –helper-protocol
\n=squid-2.5-basic
\nauth_param basic children 5
\nauth_param basic realm Squid Proxy-Server
\nauth_param basic credentialsttl 20 minute
\nauth_param basic casesensitive off
\n# \u0422\u0435\u043f\u0435\u0440\u044c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c Squid \u0433\u0434\u0435 \u0431\u0440\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0433\u0440\u0443\u043f\u043f\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439
\nexternal_acl_type nt_group %LOGIN \/usr\/local\/libexec\/squid\/wbinfo_group.pl
\n# \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f:
\nacl manager proto cache_object
\nacl localhost src 127.0.0.1\/32
\nacl to_localhost dst 127.0.0.0\/8 0.0.0.0\/32
\nacl localnet src 10.0.0.0\/8 # RFC1918 possible internal network
\nacl localnet src 172.16.0.0\/12 # RFC1918 possible internal network
\nacl localnet src 192.168.0.0\/16 # RFC1918 possible internal network
\n# \u041e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0440\u0442\u044b<\/p>\n

acl SSL_ports port 443 563
\nacl Safe_ports port 80 # http
\nacl Safe_ports port 20 21 # ftp
\nacl Safe_ports port 443 563 # https
\nacl Safe_ports port 70 # gopher
\nacl Safe_ports port 210 # wais
\nacl Safe_ports port 1025-65535 # unregistered ports
\nacl Safe_ports port 280 # http-mgmt
\nacl Safe_ports port 488 # gss-http
\nacl Safe_ports port 591 # filemaker
\nacl Safe_ports port 777 # multiling http
\n#acl Safe_ports port 631 # cups
\n#acl Safe_ports port 110 # POP3
\n#acl Safe_ports port 25 # SMTP
\nacl purge method PURGE
\nacl CONNECT method CONNECT<\/p>\n

# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u0443\u043b\u044b \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0435\u0442\u0438\/\u0441\u0435\u0442\u0435\u0439
\nacl lan src 10.201.1.0\/24
\nacl acl1 src 10.201.1.1\/32
\nacl acl2 src 10.201.1.2\/32
\nacl acl3 src 10.201.1.3\/32
\n#########################################################
\n# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430
\nacl inet-admins external nt_group inet-admins # \u0414\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u043e\u0432<\/p>\n

# TAG: http_access<\/p>\n

http_access allow manager localhost
\nhttp_access allow manager webserver
\nhttp_access deny manager<\/p>\n

# Deny requests to certain unsafe ports
\nhttp_access deny !Safe_ports<\/p>\n

# Deny CONNECT to other than secure SSL ports
\nhttp_access deny CONNECT !SSL_ports<\/p>\n

# \u041d\u0430\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u043a \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430
\nhttp_access deny all
\nhttp_reply_access allow all
\nicp_access allow all<\/p>\n

# \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u043e\u0440\u0442, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u0443\u0434\u0435\u0442 \u0441\u043b\u0443\u0448\u0430\u0442\u044c Squid
\nhttp_port 3128<\/p>\n

# MEMORY CACHE OPTIONS
\n# ——————————————————————–
\n# TAG: cache_mem (bytes)
\ncache_mem 256 MB
\n# TAG: maximum_object_size_in_memory (bytes)
\nmaximum_object_size_in_memory 80 KB<\/p>\n

# DISK CACHE OPTIONS
\n# ——————————————————————–
\n# TAG: cache_dir
\ncache_dir ufs \/usr\/local\/squid\/cache 1024 16 256
\n# TAG: minimum_object_size (bytes)
\n#Default:
\nminimum_object_size 10 KB
\n# TAG: maximum_object_size (bytes)
\n#Default:
\nmaximum_object_size 32 MB
\n# TAG: cache_swap_low (percent, 0-100)
\n# TAG: cache_swap_high (percent, 0-100)
\n#
\ncache_swap_low 90
\ncache_swap_high 95<\/p>\n

# LOGFILE OPTIONS
\n# ——————————————————————-<\/p>\n

# TAG: access_log
\naccess_log \/usr\/local\/squid\/logs\/access.log squid<\/p>\n

# TAG: pid_filename
\npid_filename \/usr\/local\/squid\/logs\/squid.pid<\/p>\n

# TAG: ftp_user
\nftp_user unix@mydomain.ru<\/p>\n

# TAG: ftp_passive
\nftp_passive on<\/p>\n

# OPTIONS FOR TUNING THE CACHE
\n# ——————————————————————–<\/p>\n

# TAG: cache
\nacl QUERY urlpath_regex cgi-bin \\?<\/p>\n

# TAG: refresh_pattern
\n#Suggested default:
\nrefresh_pattern ^ftp: 1440 20% 10080
\nrefresh_pattern ^gopher: 1440 0% 1440
\nrefresh_pattern (cgi-bin|\\?) 0 0% 0
\nrefresh_pattern . 0 20% 4320<\/p>\n

# TAG: quick_abort_min (KB)
\n# TAG: quick_abort_max (KB)
\n# TAG: quick_abort_pct (percent)
\nquick_abort_pct 80<\/p>\n

# ADMINISTRATIVE PARAMETERS
\n# ——————————————————————-<\/p>\n

#\u041a\u043e\u043b-\u0432\u043e \u043f\u0443\u043b\u043e\u0432
\ndelay_pools 3<\/p>\n

# TAG: cache_mgr
\ncache_mgr admins@mydomain.ru<\/p>\n

# TAG: cache_effective_user
\ncache_effective_user squid<\/p>\n

# TAG: delay_access
\ndelay_access 1 allow acl1
\ndelay_access 2 allow acl2
\ndelay_access 2 allow acl3<\/p>\n

# TAG: delay_parameters
\ndelay_class 1 2
\ndelay_class 2 2
\ndelay_class 3 2<\/p>\n

delay_parameters 1 -1\/-1 64000\/64000
\ndelay_parameters 2 -1\/-1 -1\/-1
\ndelay_parameters 3 -1\/-1 100000\/100000<\/p>\n

# TAG: delay_initial_bucket_level (percent, 0-100)
\ndelay_initial_bucket_level 50<\/p>\n

# TAG: error_directory
\nerror_directory \/usr\/local\/etc\/squid\/errors\/ru<\/p>\n

# TAG: hosts_file
\nhosts_file \/etc\/hosts<\/p>\n

# TAG: fqdncache_size (number of entries)
\nfqdncache_size 16386<\/p>\n

# TAG: memory_pools_limit (bytes)
\nmemory_pools_limit 64 MB<\/p>\n

# TAG: forwarded_for on|off
\nforwarded_for off<\/p>\n

# TAG: cachemgr_passwd
\ncachemgr_passwd \u201cyour password\u201d all<\/p>\n

# TAG: coredump_dir
\ncoredump_dir \/usr\/local\/squid\/cache<\/p>\n

no_cache deny QUERY manager localhost
\nvisible_hostname proxy.mydomain.local
\ndns_nameservers 10.201.0.1 10.201.1.1<\/p>\n

#\u041f\u0443\u0442\u044c \u043a \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0443:
\nredirect_program \/usr\/local\/rejik\/redirector \/usr\/local\/rejik\/redirector.conf
\nredirect_children 10<\/p>\n

\u0412 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u043c \u0432\u044b\u0448\u0435 \u043b\u0438\u0441\u0442\u0438\u043d\u0433\u0435 \u0432\u044b\u0440\u0435\u0437\u0430\u043d\u044b ACL\u044b \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430 Rejik.<\/p>\n

Rejik:<\/strong><\/p>\n

cd \/usr\/ports\/www\/rejik
\n\/usr\/ports\/www\/rejik\/>make install clean
\n\u0414\u0430\u043b\u0435\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c Rejik \u043f\u043e\u0434 \u0441\u0435\u0431\u044f. \u0412 \u0431\u043b\u044d\u043a-\u043b\u0438\u0441\u0442\u044b \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0441\u0430\u0439\u0442\u044b, \u043f\u0440\u0438\u0447\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u0430\u043a \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0442\u0430\u043a \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435.<\/p>\n

Calamaris:<\/strong><\/p>\n

cd \/usr\/ports\/www\/rejik
\n\/usr\/ports\/www\/rejik\/>make install clean<\/div>\n

cd \/usr\/ports\/www\/calamaris
\n\/usr\/ports\/www\/calamaris\/>make install clean<\/p>\n

\u0423 \u043c\u0435\u043d\u044f \u043a\u0430\u043b\u0430\u043c\u0430\u0440\u0438\u0441 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u043a\u0440\u043e\u043d\u0443:
\nSHELL=\/bin\/sh
\nMAILTO=””
\nPATH=\/sbin:\/bin:\/usr\/sbin:\/usr\/bin:\/usr\/local\/bin:\/usr\/local\/sbin
\n#
\n30 23 * * * \/usr\/local\/etc\/squid\/aaa
\n1 1 1 * * \/usr\/local\/etc\/squid\/reload<\/p>\n

\u0421\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 aaa:
\n\/bin\/cat \/usr\/local\/squid\/logs\/access.log | \/usr\/local\/bin\/calamaris -D 10 -d 20 -P 60 -r 50 -s -t 20 -f squid -F html -U M > \/usr\/local\/squid\/logs\/stathttp\/stat<\/p>\n

\u0421\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 reload:
\n#!\/bin\/sh
\n\/usr\/bin\/killall -9 squid
\nsleep 10
\n\/usr\/local\/etc\/rc.d\/squid.sh start
\n\/bin\/cat \/dev\/null > \/usr\/local\/squid\/logs\/redirector.log
\n\/bin\/cat \/dev\/null > \/usr\/local\/squid\/logs\/redirector.err
\n\/bin\/cat \/dev\/null > \/usr\/local\/squid\/logs\/store.log<\/p>\n","protected":false},"excerpt":{"rendered":"

\u0421\u0440\u0430\u0437\u0443 \u0443\u043a\u0430\u0436\u0443 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438, \u043f\u043e\u0442\u043e\u043c\u0443 \u043a\u0430\u043a \u0441\u043b\u044f\u043c\u0437\u0435\u043d\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435. http:\/\/www.lissyara.su\/articles\/freebsd\/programms\/squid+ad+group_access\/ http:\/\/sys-adm.org.ua\/www\/squid-ad.php OS: FreeBSD 8.2 Samba 3.5.11 Squid 3.1.15 Rejik 3.2.6 Calamaris 2.59 SqStat \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u0437\u0434\u0435\u0441\u044c \u043f\u0440\u043e\u043f\u0438\u0441\u0430\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u044d\u0448-\u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0443. \u041f\u0440\u043e SqStat \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435. Samba: cd \/usr\/ports\/net\/samba35\/ \/usr\/ports\/net\/samba35\/>make config \u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c: [X] LDAP With LDAP support [X] ADS With Active Directory support […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[231],"tags":[152,90,135,28],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/275"}],"collection":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/comments?post=275"}],"version-history":[{"count":9,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/275\/revisions"}],"predecessor-version":[{"id":535,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/275\/revisions\/535"}],"wp:attachment":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/media?parent=275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/categories?post=275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/tags?post=275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}