Hi Markus, This is in the /etc/init.d/squid if [ -f /etc/sysconfig/squid ]; then . /etc/sysconfig/squid fi What should the cpu usage be of each squid_kerb_auth process when used? Cheers, Simon On Thu, 2012-04-19 at 06:15 +0100, Markus Moeller wrote: > Are you sure /etc/sysconfig/squid is sourced by the squid startup script ? > Markus > > "Simon Dwyer" <mail@xxxxxxxxxx> wrote in message > news:1334789097.2408.17.camel@xxxxxxxxxxxxxxxxxxxx... > > Hi all, > > > > I have got kerberos working and moved it to production but then the > > server started smashing its cpu. It seems that the squid_kerb_auth > > processes are killing the cpu. > > > > I have the following in my config. > > > > /etc/sysconfig/squid/ > > > > KRB5RCACHETYPE=none > > export KRB5RCACHETYPE > > > > /etc/squid/squid.conf > > > > auth_param negotiate program /usr/bin/negotiate_wrapper > > --kerberos /usr/lib64/squid/squid_kerb_auth -i -r -s GSS_C_NO_NAME > > --ntlm /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp > > --domain=DOMAIN.EXAMPLE > > auth_param negotiate children 30 > > auth_param negotiate keep_alive on > > > > From what i have read the first part should fix the high cpu issue but > > it doesnt seem to help. > > > > More the case i am having trouble getting that variable active. > > > > Anyone else come up on this? > > > > Simon > > > > > >