Search squid archive

Re: Squid 3.4 sends Windows username without backslash to external wbinfo_group helper

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 24/12/13 02:39, Amos Jeffries wrote:
On 24/12/2013 2:28 a.m., Alex Crow wrote:
Hi,

I use the below:

external_acl_type nt_group ttl=20 children-startup=10 children-max=70
children-idle=10 %LOGIN /usr/lib/squid3/ext_wbinfo_group_acl

to be able to use NT groups in my squid config. This works fine in 3.2
and 3.3, but I recently tried to upgrade to 3.4 and this stopped
working. In the cache.log there are hundreds of entries like:

Could not get groups for user DOMAINuser

Whereas the correct user name should be DOMAIN\user. If I pass the
correct username to the wbinfo_group helper it works, so it seems squid
is dropping the backslash in my 3.4 install (squid-3.4.1-20131216-r13058).

Going back the 3.3.11 makes everything work as expected.

Can you test 3.4 latest snapshot with this patch on top please?

Amos


Hi Amos,

Yes, this works re: the helper, but unfortunately we get very high CPU usage in 3.4.1 as opposed to 3.3.11. I was getting 80-100% after a few minutes whereas when I reverted back to 3.3.11, I only saw the odd peak at about 27%, and most of the time it was <10%.

No other change other than the version, config was identical.

Cheers

Alex




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux