On 2024-07-23 19:20, Andre Bolinhas wrote:
winbindd: Exceeding 500 client connections, no idle connection found
auth_param ntlm children 500 ...
I know virtually nothing about WINDBIND and the authentication helper
you are using, but configuring Squid to have 500 helper processes is
usually a mistake, even with a single Squid worker. YMMV, but I would
try to use a lot fewer helpers (e.g., 10) and increase that number only
if such an increase actually improves things.
If possible, use a helper that supports concurrent requests.
If your Squid is not competing for resources with other applications on
the server, then I also recommend keeping a _constant_ number of helper
processes (instead of asking Squid to start many new helper processes at
the worse possible time -- when the load on Squid increases). To do
that, make startup and idle parameters the same as the maximum number of
children.
HTH,
Alex.
P.S. The credit for highlighting the correlation between winbindd errors
and "auth_param ntlm children 500" goes to Andrey K.
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.squid-cache.org/listinfo/squid-users
