Bug 1099970

Summary: squid rpm package misses /var/run/squid needed for smp mode
Product: [Fedora] Fedora Reporter: Fernando Lozano <fernando>
Component: squidAssignee: Michal Luscon <mluscon>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 20CC: henrik, jonathansteffan, mluscon, psimerda, thozza
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: squid-3.3.12-2.fc20 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-13 22:50:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Fernando Lozano 2014-05-21 16:33:12 UTC
Description of problem:
When squid is configured to run in SMP mode, it needs to create socket files on /var/run/squid. This directory must exist and be writable to the squid service user.

Version-Release number of selected component (if applicable):
3.3.x/3.4.x
Tested with squid-3.3.12-1.fc19.x86_64 but it looks the same problem should happen with the latest f20 package.
Also tested with squid-3.4.3 using unofficial packages from squid-cache.org under centos 6.5.

How reproducible:
Allways

Steps to Reproduce:
1. Configure squid to run in SMP mode. Add to /etc/squid/squid.conf
workers 2
2. Start squid. You'll see errors such as
2014/05/21 12:12:52 kid1| commBind: Cannot bind socket FD 13 to [::]: (13) Permission denied
    on /var/log/squid/cache.og

Actual results:
Squid does not accept http requests, does not liste in port 3128

Expected results:
Squid accepts http requests and fetches the requested urls

Additional info:
I solved the problem creating /var/run/squid, changing group to "squid" and enabling write access to the file group.

This is not enough to make squid run in SMP mode. There are still SELinux AVCs, I opened bug #1099543 for those.

Comment 1 Fedora Update System 2014-05-26 11:55:57 UTC
squid-3.3.12-2.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/squid-3.3.12-2.fc20

Comment 2 Fedora Update System 2014-05-26 23:59:10 UTC
Package squid-3.3.12-2.fc20:
* should fix your issue,
* was pushed to the Fedora 20 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing squid-3.3.12-2.fc20'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-6731/squid-3.3.12-2.fc20
then log in and leave karma (feedback).

Comment 3 Fedora Update System 2014-06-13 22:50:13 UTC
squid-3.3.12-2.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.