On 28/12/2011 8:29 a.m., ming wrote:
I got similar error as follows:
2011/12/15 01:59:00.942| aclMatchExternal:
acexternal("Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==")
= lookup needed
2011/12/15 01:59:00.942| aclMatchExternal:
"Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==":
entry=@0x3cecea8, age=69
2011/12/15 01:59:00.942| aclMatchExternal:
"Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==":
queueing a call.
2011/12/15 01:59:00.942| aclMatchExternal:
"Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==":
return -1.
I am using 3.1.16.
my external_acl_type is as follows:
external_acl_type acexternal children=20 ttl=60 negative_ttl=1 %>{X-MYAUTH}
/usr/local/bin/acexternal localhost
Am I hitting the same error?
What error? (you have erased the post history from your reply to this
old [dead?] thread.)
And why are you passing clear-text username:password details in a custom
header which could get cached? If you want to use auth please use the
proper HTTP auth headers. Custom _schemes_ are permitted as long as they
fit within the HTTP requirements (looks like you could use the Basic
auth definitions with a different scheme name).
---
I found the following code segment in external_acl.cc
if (acl->def->theHelper->stats.queue_size<=
acl->def->theHelper->n_running) {
debugs(82, 2, "aclMatchExternal: \""<< key<< "\": queueing
a call.");
ch->changeState(ExternalACLLookup::Instance());
debugs(82, 2, "aclMatchExternal: \""<< key<< "\": return
-1.");
return -1; // to get here we have to have an expired cache
entry. MUST not use.
Can you please explain in what situations that this code segment will be
executed?
theHelper->stats.queue_size<= theHelper->n_running
More requests are queued to be processed than there are helpers to
handle them.
Solutions:
* increase your helper number,
* alter your helper to support concurrency and adjust the squid.conf,
* increase the helper response TTL, to serve more lookups out of the
helper response cache.
Amos
