# OpenSuSe Leap -\> Networking -\> Proxy Server: Squid + C-ICAP **URL:** \ **Category:** SLED Networking\ **Created:** [November 16, 2016, 1:04am UTC](https://forums.suse.com/t/opensuse-leap-networking-proxy-server-squid-c-icap/28979 "2016-11-16T01:04:58Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![ntienjem](https://avatars.discourse-cdn.com/v4/letter/n/eada6e/32.png) [@ntienjem](https://forums.suse.com/u/ntienjem)\ **Post date:** [November 16, 2016, 1:04am UTC](https://forums.suse.com/t/opensuse-leap-networking-proxy-server-squid-c-icap/28979/1 "2016-11-16T01:04:58Z")
OpenSuSe Leap 42.1 → Networking → Proxy Server: Squid + C-ICAP – File permission for SquidGuardDB 1 Configuration 1.1 Squid.conf #------------------------------------- # Adaptation parameters #------------------------------------- icap\_enable on icap\_send\_client\_ip on icap\_send\_client\_username on icap\_client\_username\_header X-Client-Username icap\_preview\_enable on icap\_preview\_size 1024 icap\_service\_failure\_limit -1 # Virus scan service #icap\_service service\_avi\_req reqmod\_precache icap://localhost:1344/virus\_scan bypass=off #adaptation\_access service\_avi\_req allow all icap\_service service\_avi\_resp respmod\_precache icap://localhost:1344/virus\_scan bypass=on #adaptation\_access service\_avi\_resp allow all # URL Check service icap\_service service\_url\_chk\_req reqmod\_precache icap://localhost:1344/srv\_url\_check bypass=on #adaptation\_access service\_url\_chk\_resp allow all # ClamAV service #icap\_service service\_avi\_req reqmod\_precache icap://localhost:1344/squidclamav bypass=on adaptation\_service\_chain svcRequest service\_url\_chk\_req service\_avi\_req adaptation\_access svcRequest allow all * * * 1.2 c-icap.conf User c-icap Group c-icap Include virus\_scan.conf Include srv\_url\_check.conf * * * 1.3 srv\_url\_check.conf # TAG: url\_check.LoadSquidGuardDB url\_check.LoadSquidGuardDB ads /var/lib/squidGuard/db/blacklists/ads/ “BlacklistURL Ads Sites” url\_check.LoadSquidGuardDB adult /var/lib/squidGuard/db/blacklists/adult/ “BlacklistURL Adult Sites” url\_check.Profile default block ads url\_check.Profile default block adult Create the Berkeley DB: c-icap-mods-sguardDB -C -db /var/lib/squidGuard/db/blacklists/ads c-icap-mods-sguardDB -C -db /var/lib/squidGuard/db/blacklists/adult * * * 2 Set file permission for SquidGuard DB Change owner chown -R squid:nogroup /var/lib/squidGuard/db/blacklists ls -l /var/lib/squidGuard/db/blacklists/ads/ total 2872 -rw-r----- 1 squid nogroup 24576 Nov 13 17:05 \_\_db.001 -rw-r----- 1 squid nogroup 212992 Nov 13 17:05 \_\_db.002 -rw-r----- 1 squid nogroup 270336 Nov 13 17:05 \_\_db.003 -rw-r----- 1 squid nogroup 802816 Nov 13 17:05 \_\_db.004 -rw-r–r-- 1 squid nogroup 469362 Nov 1 01:16 domains -rw-r----- 1 squid nogroup 1253376 Nov 13 17:05 domains.db -rw-r–r-- 1 squid nogroup 649 Nov 1 01:16 expressions -rw-r–r-- 1 squid nogroup 31064 Nov 1 01:16 urls -rw-r----- 1 squid nogroup 53248 Nov 13 17:05 urls.db * * * 3 Start c-icap service systemctl status c-icap.service c-icap.service - C implementation of ICAP protocol Loaded: loaded (/usr/lib/systemd/system/c-icap.service; enabled) Active: active (running) since Sat 2016-11-14 10:01:30 EST; 51s ago Main PID: 6861 (c-icap) CGroup: /system.slice/c-icap.service ������ 6861 /usr/bin/c-icap -N ������13687 /usr/bin/c-icap -N ������14618 /usr/bin/c-icap -N ������18663 /usr/bin/c-icap -N Nov 14 10:02:21 shutndap c-icap[6861]: /var/lib/squidGuard/db/blacklists/adult/\_\_db.001: Permission denied Nov 14 10:02:21 shutndap c-icap[6861]: /var/lib/squidGuard/db/blacklists/ads/\_\_db.001: Permission denied * * * What is the correct file permission for the SquidGuard DB? I have also tried a) chown -R c-icap:c-icap /var/lib/squidGuard/db/blacklists and b) chown -R squid:c-icap /var/lib/squidGuard/db/blacklists ---
**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\ **Post date:** [November 16, 2016, 1:35am UTC](https://forums.suse.com/t/opensuse-leap-networking-proxy-server-squid-c-icap/28979/2 "2016-11-16T01:35:54Z")
ntienjem Wrote in message: [color=blue] > OpenSuSe Leap 42.1 → Networking → Proxy Server: Squid + C-ICAP – File > permission for SquidGuardDB[/color] This forum is for issues relating to SUSE Linux Enterprise Desktop (SLED). Since you are using openSUSE you should repost your issue in the openSUSE Forums at [https://forums.opensuse.org/forum.php](https://forums.opensuse.org/forum.php) ## HTH. Simon Flood SUSE Knowledge Partner ----Android NewsGroup Reader---- [http://usenet.sinaapp.com/](http://usenet.sinaapp.com/)