Bug 40095

Summary:	UCS41: squid - add squid/redirect/children
Product:	UCS	Reporter:	Sönke Schwardt-Krummrich <schwardt>
Component:	Squid	Assignee:	Sönke Schwardt-Krummrich <schwardt>
Status:	CLOSED FIXED	QA Contact:	Daniel Tröder <troeder>
Severity:	enhancement
Priority:	P5	CC:	gohmann, walkenhorst
Version:	UCS 4.1
Target Milestone:	UCS 4.1-0-errata
Hardware:	Other
OS:	Linux
See Also:	https://forge.univention.org/bugzilla/show_bug.cgi?id=40311
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Bug Depends on:
Bug Blocks:	40092, 40421

Description Sönke Schwardt-Krummrich

2015-11-24 22:01:02 CET

This bug covers the UCS part of that bug and adds squid/redirect/children via UCS 4.1 erratum of univention-squid.

+++ This bug was initially created as a clone of Bug #34045 +++

By default, squid.conf starts 5 authentication helpers and 5 URL redirector processes. That might not be enough for a school:

---cache.log
 WARNING: All ntlmauthenticator processes are busy.
 WARNING: 10 pending requests queued
 Consider increasing the number of ntlmauthenticator processes in your co
nfig file.
...
 WARNING: All redirector processes are busy.
 WARNING: 5 pending requests queued
 Consider increasing the number of redirector processes in your config file
---


 ucr set squid/ntlmauth/children=50
 ucr set  squid/basicauth/children=50

Since there is not an UCR variable like squid/redirect/children, the change has to be made in the local configuration file:

#---/etc/squid3/local.conf
#...
url_rewrite_children 20
#---

There is an old bug about this: Bug #18456

Comment 1 Sönke Schwardt-Krummrich

2015-11-27 17:51:36 CET

univention-squid (9.0.2-1):
r65959 | Bug #40095: added UCRV squid/rewrite/children

univention-squid.yaml:
r65963 | Bug #40095: updated yaml
r65959 | Bug #40095: added UCRV squid/rewrite/children

squid/rewrite/children is unset by default and defaults to squids default value (5).

Comment 2 Daniel Tröder

2015-11-30 11:43:33 CET

OK: code review
OK: advisory
OK: manual test:

# ucr set squid/rewrite/children=13
# invoke-rc.d squid3 restart
# pstree | grep squid
     |-squid3---squid3-+-13*[squidGuard]       <---- 13
     |                 |-50*[squid_ldap_auth]
     |                 |-10*[squid_ldap_ntlm]

# ucr unset squid/rewrite/children
# invoke-rc.d squid3 restart
# pstree | grep squid
     |-squid3---squid3-+-5*[squidGuard]       <---- 5
     |                 |-50*[squid_ldap_auth]
     |                 |-10*[squid_ldap_ntlm]

Comment 3 Janek Walkenhorst

2015-12-09 16:46:25 CET

<http://errata.software-univention.de/ucs/4.1/25.html>