Search squid archive

Re: Squid with Auth Active Directory on a large network.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

At 11.44 11/12/2005, Noc Phibee wrote:

Anyone can answer at my question ?

Ok a large systems, i put :

auth_param ntlm children 50
auth_param ntlm max_challenge_lifetime 10 minutes

auth_param basic children 50
auth_param basci max_challenge_lifetime 10 minutes

This parameter doesn't exist.


for no put a big request on the PDC ?

Don't enable challenge reuse with a so large AD environment: challenge reuse is know to trigger many stability problems in Squid.

You should use "auth_param ntlm use_ntlm_negotiate on" in squid.conf .
But using NTLM, with 20000 users a big authentication load on your DCs is predictable, with or without NTLM Negotiate.

You should verify the number of used helpers using cachemgr.cgi:
- Basic helpers are not heavy used in NTLM environments, so 50 may be a too large value
- Insted, NTLM helpers are heavy used, and 50 could be not enough in peak hours

Regards

Guido



-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1           10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135  Fax. : +39.011.9781115
Email: guido.serassio@xxxxxxxxxxxxxxxxx
WWW: http://www.acmeconsulting.it/


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux