I don't know if this is still relevant: I modified the machine-account of my test system, so that the AD creates the large tickets (around 7600 chars) again. When I enlarge the buffers to 32K (via attached patch) it works. Tested with squid-2.7-STABLE3. Greets Malte On Sun, 29 Jun 2008 10:51:30 +0200 Malte Schröder <maltesch@xxxxxx> wrote: > I will see what I can do, but I am not allowed to do changes in AD at > work, so I have to ask someone. But before that I want to upgrade to > squid 2.7, which I have to do carefully. > > > On Sat, 28 Jun 2008 23:52:42 +0100 > "Markus Moeller" <huaraz@xxxxxxxxxxxxxxxx> wrote: > > > Would you mind testing with an increased buffer of 32k in > > squid-2/src/auth/negotiate/auth_negotiate.c and in squid_kerb_auth.c ? > > > > Thank you > > Markus > > > > "Malte Schröder" <maltesch@xxxxxx> wrote in message > > news:20080628162901.29c86a21@xxxxxxxxxxxxxxxxxxxxxx > > > > I think at first I increased some buffers but hit a wall when the > > Proxy-Authenticate header got too long. I don't remember the limit, > > could have been something around 8k chars. > > > > > > On Sat, 28 Jun 2008 12:19:41 +0100 > > "Markus Moeller" <huaraz@xxxxxxxxxxxxxxxx> wrote: > > > > > Malte, > > > > > > are you saying it works now, becuase you used the AD flag or because you > > > increased the buffer ? I would be curios if the buffer increase would fix > > > it. If it didn't fix it some buffers in squid need to be increased too > > > (e.g. > > > in auth_negotiate.c). > > > > > > Thank you > > > Markus > > > > > > >
Attachment:
diff
Description: Binary data
Attachment:
signature.asc
Description: PGP signature
