[SOLVED] Problems with Squid proxy (squid.auth-user.php processes)

[denmmx]

Just installed OPNsense 16.1.11_1-amd64 on new server and Squid proxy server (3.5.16) configured as Forward Proxy with basic authentication (local database).  Everything configured and works well, but i'm confused with following strings fills /var/log/squid/cache.log:

cache.log

Code: [Select]

2016/04/21 22:21:20 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/04/21 22:21:20 kid1| Starting new helpers
2016/04/21 22:21:20 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/04/21 22:21:20 kid1| WARNING: basicauthenticator #Hlpr509 exited
2016/04/21 22:20:20 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/04/21 22:20:20 kid1| Starting new helpers
2016/04/21 22:20:20 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/04/21 22:20:20 kid1| WARNING: basicauthenticator #Hlpr508 exited
2016/04/21 22:19:20 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/04/21 22:19:20 kid1| Starting new helpers
2016/04/21 22:19:20 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/04/21 22:19:20 kid1| WARNING: basicauthenticator #Hlpr507 exited
2016/04/21 22:18:20 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/04/21 22:18:20 kid1| Starting new helpers
2016/04/21 22:18:20 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/04/21 22:18:20 kid1| WARNING: basicauthenticator #Hlpr506 exited
2016/04/21 22:17:20 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/04/21 22:17:20 kid1| Starting new helpers
2016/04/21 22:17:20 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/04/21 22:17:20 kid1| WARNING: basicauthenticator #Hlpr505 exited
2016/04/21 22:16:19 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/04/21 22:16:19 kid1| Starting new helpers
2016/04/21 22:16:19 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/04/21 22:16:19 kid1| WARNING: basicauthenticator #Hlpr504 exited

Basicauthenticator exited every 1 minute and start again. What is the cause of this strange error?? Please help!
PS. All system packages updated to last versions.

[AdSchellevis]

This indeed doesn't look good, maybe we can debug the reason for the crash by starting the authenticator in a shell and try some authentications (to see if it also crashes).

Code: [Select]

root@OPNsense:~/core # /usr/local/etc/inc/squid.auth-user.php
test test
OK
test tes123
ERR
test test
OK
test1 test1
ERR
(my test setup has a user test with password test in this case)

[denmmx]

Hi,
all authentications from users passed OK. Trying with user/password: work1 work1:

Code: [Select]

root@gateway:/home/admin # /usr/local/etc/inc/squid.auth-user.php
work1 work1
OK
test test
ERR
work1 work1
OK


[AdSchellevis]

ok, thanks for testing that part, it seems that the worker receives an empty string from time to time leading to an exit.

This commit should fix it https://github.com/opnsense/core/commit/9fd6504d25bab1f7b6be92566122caae4bdd04d0

In case you want to test, just run the following command:

Code: [Select]

curl -o /usr/local/etc/inc/squid.auth-user.php https://raw.githubusercontent.com/opnsense/core/master/src/etc/inc/squid.auth-user.php

Regards,

Ad

[denmmx]

Wow, thnx a lot! It really fixed my problem 
Will this commit to be included in next updates of OPNSense?

[franco]

I think this will be in 16.1.12. I'm almost 97% sure.

Thanks for the report and testing!