Gontzal wrote:
Hello all, We are experiencing some problems with one of our squid boxes, sometimes it has a 95 % of CPU use, offering a low service level. Squid Cache: Version 3.0.STABLE19 with NTLM Auth. I've realized that almost all the times we have this messages at cache.log: [2010/04/26 13:24:29, 1] libsmb/ntlmssp.c:ntlmssp_update(333) got NTLMSSP command 3, expected 1 [2010/04/26 13:24:29, 1] libsmb/ntlmssp.c:ntlmssp_update(333) got NTLMSSP command 3, expected 1 [2010/04/26 13:24:29, 1] libsmb/ntlmssp.c:ntlmssp_update(333) got NTLMSSP command 3, expected 1 What does this means? May be any relation whit the CPU problem?
IIRC "command 3" means the client software is trying to use Kerberos instead of NTLM. The decode library use in the helper you have does not understand the difference between the two and produces that message. This seems to be a common problem of the non-Windows helpers.
In general I'd suggest looking at going to Kerberos. Microsoft has formally deprecated NTLMv2 now and Windows7 software is starting to not use it at all.
Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.1
