I've got around 300 windows 2000-sp4 and xp-sp2 clients.
I have configured squid with up to 500 ntlm authenticators but it has
only made the problem worse because when all the ntlm authenticators
become stalled on the "deferred" state squid needs a lot more time to
restart. Today squid with 10 authenticators is restarting several times
a day and users don't notice any slow down or error while navigating.
I hope you find time to implement a little more output to that helper
stats, showing who is holding the helper reserved would be certainly
very helpful.
Thank you for you support!
Best regards.
David JP
Henrik Nordstrom wrote:
On tis, 2008-07-08 at 18:15 +0200, David Jiménez Peris wrote:
On a linux ubuntu 8.04 server with squid 3.0.STABLE1 and samba 3.0.28a
configured to authenticate against a windows 2003 server active
directory with samba winbind ntlm-auth, the ntlm-auth processes keep
slowly getting locked in "RESERVED" state until squid emits the error
"Too many queued ntlmauthenticator requests" and restarts.
How many clients do you have?
Clients can quite easily tie up ntlm authentication helpers for extended
periods of time, for example while prompting the user for login..
Hmm.. we really should add a little more output to that helper stats,
showing who is holding the helper reserved... makes diagnosing this a
lot easier..
Regards
Henrik
