Search squid archive

Strange problem with NTLM_AUTH

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all;
We have Squid 2.5.STABLE9 running with 30 ntlm_auth helpers Version 
3.0.10-1.fc3. The problem is that on the squid´s cachemgr.cgi->NTLM User 
Authenticator Stats  is possible to verify that the ntlm_auth processes 
are slowly having the flag R (Reserved or Deferred) set and never being 
used again (the number of requests stops and the time starts growing). 
This problem goes until there is no more ntlm_auth process available and 
squid restarts itself, restarting all ntlm_auth too. After the restart, 
everything is goes back to normal and the problem slowly repeats. We 
detected that the R flag appears more agressively if the domain controller 
is under more load (like running a backup script).
Well, the questions are:
1- What does the flag reserved mean? 
2- Any ideas why the R flag is spreading throught all the ntlm_auth 
processes, like processes 11 and 12 below (you can see the 11 and 12 are 
locked for a long time and process 13 is receiving more requests ? 

#       FD      PID     # Requests      Flags   Time            Offset 
Request
1       8       8656    475909          R       10.140          0 (none)
2       9       8657    632482                  0.093           0 (none)
3       10      8658    363615                  0.412           0 (none)
4       11      8659    64199           R       311498.132      0 (none)
5       12      8660    33142           R       311497.891      0 (none)
6       13      8661    121226                  0.932           0 (none)
7       14      8662    58971                   0.913           0 (none)
(...)


Just for the record, I originally have sent this message to the SAMBA 
list, and Andrew Bartlett (NTLM_AUTH coder) replyed me as below:
"It might be that we need to have a better way to have ntlm_auth tell
Squid that there is a problem now, but it might go away (previous helper
designs had to be restarted for that to happen, but ntlm_auth can
recover on it's own).

Andrew Bartlett"

Any help is greatly appreciated;
Best regards;

Rafael Sarres de Almeida
Seção de Gerenciamento de Rede
Superior Tribunal de Justiça
Tel: (61) 319-9342




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux