[squid-users] need help with cachemgr

[jmperrote]

Hello need help with cachemgr, I using a squid as a reverse proxy mode,
when I try to connect to retrive data using squidclient, connecting to
cachemrg, only retrive squid OK, but the other values HIT, http request,
etc,  that ara usually retrived are not retrived.

My case when I to try connect:

squidclient -vv cache_object://localhost/ mgr:info
-p 1084

verbosity level set to 2
Request:
GET 1084 HTTP/1.0
User-Agent: squidclient/3.5.12
Accept: */*
Connection: close


.
Transport detected: IPv4-only
Resolving localhost ...
Connecting... localhost (127.0.0.1:1084)
Connected to: localhost (127.0.0.1:1084)
Sending HTTP request ...
done.

verbosity level set to 2
Request:
GET 1084 HTTP/1.0
User-Agent: squidclient/3.5.12
Accept: */*
Connection: close


.
Transport detected: IPv4-only
Resolving localhost ...
Connecting... localhost (127.0.0.1:1084)
Connected to: localhost (127.0.0.1:1084)
Sending HTTP request ...
done.


Allways finish on --> "done" and not continue, do nothing


The test that are trying is local not remote.


regards.

Juan Manuel.

[Alex Rousskov]

Post by jmperrote
Hello need help with cachemgr, I using a squid as a reverse proxy mode,
when I try to connect to retrive data using squidclient, connecting to
cachemrg, only retrive squid OK, but the other values HIT, http request,
etc,  that ara usually retrived are not retrived.
squidclient -vv cache_object://localhost/ mgr:info
-p 1084

Place all named options before the anonymous ones and
use one (pseudo) URL at a time:

squidclient -vv -p 1084 cache_object://localhost/
squidclient -vv -p 1084 mgr:info

Alex.

[jmperrote]

Hello Alex, a think that I dont understand you. I try the sentence that
you send my and the problem its the same. No data retrive from cachemgr.

squidclient -vv -p 1084 mgr:info

verbosity level set to 2
Request:
GET cache_object://localhost/info HTTP/1.0
Host: localhost
User-Agent: squidclient/3.5.12
Accept: */*
Connection: close


.
Transport detected: IPv4-only
Resolving localhost ...
Connecting... localhost (127.0.0.1:1084)
Connected to: localhost (127.0.0.1:1084)
Sending HTTP request ...
done.

On reverse proxy mode, the cache is generated to ? or is empty.

Regards.

-------- Mensaje Original --------
Asunto: Re: [squid-users] need help with cachemgr
Fecha: 2018-11-27 13:03

Post by jmperrote
Hello need help with cachemgr, I using a squid as a reverse proxy mode,
when I try to connect to retrive data using squidclient, connecting to
cachemrg, only retrive squid OK, but the other values HIT, http request,
etc,  that ara usually retrived are not retrived.
squidclient -vv cache_object://localhost/ mgr:info
-p 1084

Place all named options before the anonymous ones and
use one (pseudo) URL at a time:

squidclient -vv -p 1084 cache_object://localhost/
squidclient -vv -p 1084 mgr:info

Alex.
_______________________________________________
squid-users mailing list
squid-***@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[Alex Rousskov]

Post by jmperrote
I try the sentence that
you send my and the problem its the same.

You may have several problems. The commands I sent you fixed one of
those problems. With those new commands, squidclient sends correct cache
manager URL to Squid.

Post by jmperrote
No data retrive from cachemgr.

That is another problem. I do not know why your Squid does not respond
to these Cache Manager requests. Does Squid get these requests? What
does Squid access.log say?

Post by jmperrote
squidclient -vv -p 1084 mgr:info
verbosity level set to 2
GET cache_object://localhost/info HTTP/1.0
Host: localhost
User-Agent: squidclient/3.5.12
Accept: */*
Connection: close
.
Transport detected: IPv4-only
Resolving localhost ...
Connecting... localhost (127.0.0.1:1084)
Connected to: localhost (127.0.0.1:1084)
Sending HTTP request ...
done.

The above debugging/stderr output looks OK to me (unlike the output you
posted earlier that showed wrong request URLs). It should be followed by
an HTTP response (on stdout).

Post by jmperrote
On reverse proxy mode, the cache is generated to ? or is empty.

I am not sure what you mean by "the cache is generated to ? or is
empty". If you do not see any HTTP response coming from Squid, then
investigate what Squid knows/says about the request, starting with any
relevant cache.log and access.log records.


HTH,

Alex.

Post by jmperrote
-------- Mensaje Original --------
Asunto: Re: [squid-users] need help with cachemgr
Fecha: 2018-11-27 13:03

Post by jmperrote
Hello need help with cachemgr, I using a squid as a reverse proxy mode,
when I try to connect to retrive data using squidclient, connecting to
cachemrg, only retrive squid OK, but the other values HIT, http request,
etc,  that ara usually retrived are not retrived.
                    squidclient -vv cache_object://localhost/ mgr:info
                    -p 1084

Place all named options before the anonymous ones and
  squidclient -vv -p 1084 cache_object://localhost/
  squidclient -vv -p 1084 mgr:info
Alex.

[Alex Rousskov]

This is the new error that I have when I tried to squidclint via https +
certicicate.

You have many different problems.

Problem 0: You are not responding on the mailing list. Please keep this
thread on the mailing list so that others can benefit from this triage
and so that others can help you.

Problem 1: You seem to ignore errors and warnings that you can fix on
your own. Please fix the ones you can fix before asking for help with
the remaining problems. When asking for help, explain what you think
each remaining warning/error means, and why you cannot fix that problem.
This approach shows that you invest serious effort into making this work
rather than simply abusing the mailing list as a free replacement for a
system administrator.

squidclient -vvv --https --cert /soporte/ssl/educacion.crt -h 10.0.0.4 -p 1084 mgr:info

The --cert option specifies a TLS client certificate. Your reverse
proxy, AFAICT, does not use client certificates. Remove that option. See
"man squidclient" for details about each option you use.

WARNING: Failed to load Certificate from /soporte/ssl/educacion.crt

I do not know what went wrong here because you have not provided any
relevant information like whether the file is actually there and can be
read by the user squidclient runs as.

X.509 TLS handshake ...
VERIFY DATUM: The certificate is NOT trusted. The certificate issuer is
unknown. The name in the certificate does not match the expected.
WARNING: Insecure Connection

Looks self-explanatory to me: Your squidclient does not trust the server
certificate used by your reverse proxy. You may need to either

* use a --trusted-ca option or
* configure your TLS library environment to always trust the CA that
signed the https_port certificate of your reverse proxy.

HTTP/1.1 401 Unauthorized
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
WWW-Authenticate: Basic realm=...

Your reverse proxy requires HTTP client authentication. Depending on
your needs, you should either

* adjust your Squid http_access rules to disable authentication for
cache manager requests or
* give a valid username and password to squidclient (search "man
squidclient" manual page for "authentication" and "WWW" to discover the
right options).


Potential problem 6:

This may not be relevant to you, but please note that Squid Cache
Manager does not yet support secure queries when Squid is running in SMP
mode. For details, please see
https://wiki.squid-cache.org/Features/CacheManager#Secure_SMP_reports


HTH,

Alex.