<LI>squid_ldap_auth - basic_ldap_auth - Authenticate with LDAP user accounts.</LI>
<LI>ncsa_auth - basic_ncsa_auth - Authenticate with NCSA httpd-style password file.</LI>
<LI>pam_auth - basic_pam_auth - Authenticate with the system PAM infrastructure.</LI>
-<LI>pop3.pl - basic_pop3_auth.pl - Authenticate with a mail server POP3/SMTP credentials</LI>
+<LI>pop3.pl - basic_pop3_auth - Authenticate with a mail server POP3/SMTP credentials</LI>
<LI>squid_sasl_auth - basic_sasl_auth - Authenticate with SASL.</LI>
<LI>smb_auth - basic_smb_auth - Authenticate with Samba SMB.</LI>
<LI>yp_auth - basic_nis_auth - Authenticate with NIS security system.</LI>
<LI>mswin_sspi - basic_sspi_auth - Authenticate with a Windows Domain Controller using SSPI.</LI>
-<LI>MSNT-multi-domain - basic_msnt_multi_domain_auth.pl - Authenticate with any one of multiple Windows Domain Controllers.</LI>
+<LI>MSNT-multi-domain - basic_msnt_multi_domain_auth - Authenticate with any one of multiple Windows Domain Controllers.</LI>
<LI>squid_radius_auth - basic_radius_auth - Authenticate with RADIUS.</LI>
</UL>
</P>
<P>3.1 began the Internationalization of Squid with the public facing error pages.
This move begins the Localization of the internal administrator facing manuals.</P>
+
<H2><A NAME="ss2.4">2.4</A> <A HREF="#toc2.4">Solaris 10 pthreads Support (Experimental)</A>
</H2>
<P>Automatic detection and use of the pthreads library available from Solaris 10</P>
+
<H2><A NAME="s3">3.</A> <A HREF="#toc3">Changes to squid.conf since Squid-3.1</A></H2>
<P>There have been changes to Squid's configuration file since Squid-3.1.</P>
<DT><B>tproxy_uses_indirect_client</B><DD>
<P>Controls whether the indirect client address found in the X-Forwarded-For
header is used for spoofing instead of the directly connected client address.
-Requires both --enable-follow-x-forwarded-for and --enable-linux-netfilter</P>
+Requires both <EM>--enable-follow-x-forwarded-for</EM> and <EM>--enable-linux-netfilter</EM></P>
</DL>
</P>
<P>
<DL>
<DT><B>access_log</B><DD>
-<P>New <EM>daemon</EM> module to send each log line as text data to a file I/O daemon.</P>
+<P>New <EM>stdio</EM> module to send log data directly from Squid to a disk file.
+This is the historic behaviour of Squid before logging modules were introduced, and
+remains the default used when no module is selected.
+It is recommended to upgrade logging to the faster <EM>daemon:</EM> module.</P>
+<P>New <EM>daemon</EM> module to send each log line as text data to a file I/O daemon handling the slow disk I/O.
+New installs, or installs with no logs configured explicitly will use this module by default.</P>
<P>New <EM>tcp</EM> module to send each log line as text data to a TCP receiver.</P>
<P>New <EM>udp</EM> module to send each log line as text data to a UDP receiver.</P>
<P>Deprecated <EM>children=N</EM> in favor of <EM>children-max=N</EM>.</P>
<DT><B>logformat</B><DD>
+<P><EM>%>lp</EM> Local TCP port used by transactions with http servers.</P>
<P><EM>%sn</EM> Unique sequence number per log line. Ported from 2.7</P>
-<P><EM>%>eui</EM> EUI logging (EUI-48 / MAC address for IPv4, EUI-64 for IPv6)
+<P><EM>%<eui</EM> EUI logging (EUI-48 / MAC address for IPv4, EUI-64 for IPv6)
Both EUI forms are logged in the same field. Type can be identified by length or byte delimiter.</P>
+<DT><B>memory_pools_limit</B><DD>
+<P>Memory limits have been revised and corrected from 3.1.4 onwards.</P>
+<P>Please check and update your squid.conf to use the text <EM>none</EM> for no limit instead of the old 0 (zero).</P>
+<P>All users upgrading need to be aware that from Squid-3.3 setting this option to 0 (zero) will mean zero bytes of memory get pooled.</P>
+
<DT><B>windows_ipaddrchangemonitor</B><DD>
<P>Now only available to be set in Windows builds.</P>
<P>
<DL>
+<DT><B>--enable-auth-basic[=HELPERS]</B><DD>
+<P>Specified without any parameters all helpers will be auto-built.</P>
+<P>With an explicit empty list <EM>=""</EM> protocol suport will be built but no helpers.</P>
+<P>With an explicit list protocol support and just those helpers will be built.</P>
+
+<DT><B>--enable-auth-digest[=HELPERS]</B><DD>
+<P>Specified without any parameters all helpers will be auto-built.</P>
+<P>With an explicit empty list <EM>=""</EM> protocol suport will be built but no helpers.</P>
+<P>With an explicit list protocol support and just those helpers will be built.</P>
+
+<DT><B>--enable-auth-negotiate</B><DD>
+<P>Specified without any parameters all helpers will be auto-built.</P>
+<P>With an explicit empty list <EM>=""</EM> protocol suport will be built but no helpers.</P>
+<P>With an explicit list protocol support and just those helpers will be built.</P>
+
+<DT><B>--enable-auth-ntlm</B><DD>
+<P>Specified without any parameters all helpers will be auto-built.</P>
+<P>With an explicit empty list <EM>=""</EM> protocol suport will be built but no helpers.</P>
+<P>With an explicit list protocol support and just those helpers will be built.</P>
+
<DT><B>--enable-eui</B><DD>
<P>Enable Support for handling EUI operations.
This includes ARP lookups for MAC (EUI-48) addresses and the ACL arp type tests.</P>
-<DT><B>--enable-log-daemon-auth-helpers</B><DD>
+<DT><B>--enable-log-daemon-helpers</B><DD>
<P>Build helpers for logging I/O.</P>
<DT><B>--enable-url-rewrite-helpers</B><DD>
<P>
<DL>
-<DT><B>???alphabetical list within group ordered: enable, disable, with, without) ???</B><DD>
-<P> ???explain??</P>
+<DT><B>--enable-auth</B><DD>
+<P>No longer takes a list of arguments. This option now is restricted to building with or without for authentication.</P>
+<P>The new <EM>--enable-auth-X</EM>/<EM>--disable-auth-X</EM> parameters determine which authentication protocols and helpers are built.</P>
</DL>
</P>
<DT><B>--enable-arp-acl</B><DD>
<P>Replaced by --enable-eui</P>
+<DT><B>--enable-auth-basic-helpers</B><DD>
+<P>replaced by <EM>--enable-auth-basic</EM>.</P>
+
+<DT><B>--enable-auth-digest-helpers</B><DD>
+<P>replaced by <EM>--enable-auth-digest</EM>.</P>
+
+<DT><B>--enable-auth-negotiate-helpers</B><DD>
+<P>replaced by <EM>--enable-auth-negotiate</EM>.</P>
+
+<DT><B>--enable-auth-ntlm-helpers</B><DD>
+<P>replaced by <EM>--enable-auth-ntlm</EM>.</P>
+
</DL>
</P>
<p>3.1 began the Internationalization of Squid with the public facing error pages.
This move begins the Localization of the internal administrator facing manuals.
+
<sect1>Solaris 10 pthreads Support (Experimental)
<p>Automatic detection and use of the pthreads library available from Solaris 10
+
<sect>Changes to squid.conf since Squid-3.1
<p>
There have been changes to Squid's configuration file since Squid-3.1.
<tag>tproxy_uses_indirect_client</tag>
<p>Controls whether the indirect client address found in the X-Forwarded-For
header is used for spoofing instead of the directly connected client address.
- Requires both --enable-follow-x-forwarded-for and --enable-linux-netfilter
+ Requires both <em>--enable-follow-x-forwarded-for</em> and <em>--enable-linux-netfilter</em>
</descrip>
<p>
<descrip>
<tag>access_log</tag>
- <p>New <em>daemon</em> module to send each log line as text data to a file I/O daemon.
+ <p>New <em>stdio</em> module to send log data directly from Squid to a disk file.
+ This is the historic behaviour of Squid before logging modules were introduced, and
+ remains the default used when no module is selected.
+ It is recommended to upgrade logging to the faster <em>daemon:</em> module.
+ <p>New <em>daemon</em> module to send each log line as text data to a file I/O daemon handling the slow disk I/O.
+ New installs, or installs with no logs configured explicitly will use this module by default.
<p>New <em>tcp</em> module to send each log line as text data to a TCP receiver.
<p>New <em>udp</em> module to send each log line as text data to a UDP receiver.
<p>Deprecated <em>children=N</em> in favor of <em>children-max=N</em>.
<tag>logformat</tag>
+ <p><em>%>lp</em> Local TCP port used by transactions with http servers.
<p><em>%sn</em> Unique sequence number per log line. Ported from 2.7
- <p><em>%>eui</em> EUI logging (EUI-48 / MAC address for IPv4, EUI-64 for IPv6)
+ <p><em>%<eui</em> EUI logging (EUI-48 / MAC address for IPv4, EUI-64 for IPv6)
Both EUI forms are logged in the same field. Type can be identified by length or byte delimiter.
<tag>memory_pools_limit</tag>
<sect1>New options<label id="newoptions">
<p>
<descrip>
+ <tag>--enable-auth-basic[=HELPERS]</tag>
+ <p>Specified without any parameters all helpers will be auto-built.
+ <p>With an explicit empty list <em>=""</em> protocol suport will be built but no helpers.
+ <p>With an explicit list protocol support and just those helpers will be built.
+
+ <tag>--enable-auth-digest[=HELPERS]</tag>
+ <p>Specified without any parameters all helpers will be auto-built.
+ <p>With an explicit empty list <em>=""</em> protocol suport will be built but no helpers.
+ <p>With an explicit list protocol support and just those helpers will be built.
+
+ <tag>--enable-auth-negotiate</tag>
+ <p>Specified without any parameters all helpers will be auto-built.
+ <p>With an explicit empty list <em>=""</em> protocol suport will be built but no helpers.
+ <p>With an explicit list protocol support and just those helpers will be built.
+
+ <tag>--enable-auth-ntlm</tag>
+ <p>Specified without any parameters all helpers will be auto-built.
+ <p>With an explicit empty list <em>=""</em> protocol suport will be built but no helpers.
+ <p>With an explicit list protocol support and just those helpers will be built.
+
<tag>--enable-eui</tag>
<p>Enable Support for handling EUI operations.
This includes ARP lookups for MAC (EUI-48) addresses and the ACL arp type tests.
- <tag>--enable-log-daemon-auth-helpers</tag>
+ <tag>--enable-log-daemon-helpers</tag>
<p>Build helpers for logging I/O.
<tag>--enable-url-rewrite-helpers</tag>
<sect1>Changes to existing options<label id="modifiedoptions">
<p>
<descrip>
- <tag>???alphabetical list within group ordered: enable, disable, with, without) ???</tag>
- <p> ???explain??
+ <tag>--enable-auth</tag>
+ <p>No longer takes a list of arguments. This option now is restricted to building with or without for authentication.
+ <p>The new <em>--enable-auth-X</em>/<em>--disable-auth-X</em> parameters determine which authentication protocols and helpers are built.
</descrip>
</p>
<tag>--enable-arp-acl</tag>
<p>Replaced by --enable-eui
+ <tag>--enable-auth-basic-helpers</tag>
+ <p>replaced by <em>--enable-auth-basic</em>.
+
+ <tag>--enable-auth-digest-helpers</tag>
+ <p>replaced by <em>--enable-auth-digest</em>.
+
+ <tag>--enable-auth-negotiate-helpers</tag>
+ <p>replaced by <em>--enable-auth-negotiate</em>.
+
+ <tag>--enable-auth-ntlm-helpers</tag>
+ <p>replaced by <em>--enable-auth-ntlm</em>.
+
</descrip>