Re: Some Negotiate/SPNEGO questions

On Sat, 5 Nov 2005, Serassio Guido wrote:

> I have some questions/info about Negotiate/SPNEGO.
>
> - In the negotiate-2_5 branch there is still the ntlm 'use_ntlm_negotiate'
> option, is intentional ?

Yes, as 2.5 does have this option.. but we decided to not port this option
to Squid-3.

> - I have found some instability in the 2.5 Negotiate code when al helpers are
> busy:
> I have lowered to 2 the number of helpers, after Squid says this:
> 2005/10/30 12:21:09| WARNING: All negotiateauthenticator processes are busy.
> and stops to respond to requests. After I need to restart or reconfigure
> Squid.
> From cachemgr the helpers are reported as idle.

Ok. I'll try to look into it.

> - On Squid 3.0, testing Samba 4 ntlm_auth, I have found that when the auth
> helper crashes, Squid crashes too:
> 2005/11/04 23:12:44| assertion failed: cbdata.cc:450: "c->locks > 0"

Quite likely related to the above, but a stack trace would be nice..

> 2005/11/04 23:12:47| Starting Squid Cache version 3.0-PRE3-CVS for
> i686-pc-linux-gnu...
> 2005/11/04 23:12:47| Process ID 24918
>
> - Final question, not directly related to Negotiate: In Squid 2.5, in the
> helper stats there is a reference to "A = ALIVE" and "P = PLACEHOLDER" status
> of helper, but this is never printed. I think that should be a forgotten
> cleanup.

Indeed... placeholder status can never be on a helper, only on a request..
(a request has placeholder status while it is waiting for a helper to
become available)

Regards
Henrik
Received on Sat Nov 05 2005 - 14:40:23 MST