Re: [squid-users] Squid 3.4 sends Windows username without backslash to external wbinfo_group helper

On 24/12/13 02:39, Amos Jeffries wrote:
> On 24/12/2013 2:28 a.m., Alex Crow wrote:
>> Hi,
>>
>> I use the below:
>>
>> external_acl_type nt_group ttl=20 children-startup=10 children-max=70
>> children-idle=10 %LOGIN /usr/lib/squid3/ext_wbinfo_group_acl
>>
>> to be able to use NT groups in my squid config. This works fine in 3.2
>> and 3.3, but I recently tried to upgrade to 3.4 and this stopped
>> working. In the cache.log there are hundreds of entries like:
>>
>> Could not get groups for user DOMAINuser
>>
>> Whereas the correct user name should be DOMAIN\user. If I pass the
>> correct username to the wbinfo_group helper it works, so it seems squid
>> is dropping the backslash in my 3.4 install (squid-3.4.1-20131216-r13058).
>>
>> Going back the 3.3.11 makes everything work as expected.
>>
> Can you test 3.4 latest snapshot with this patch on top please?
>
> Amos
>

Hi Amos,

Yes, this works re: the helper, but unfortunately we get very high CPU
usage in 3.4.1 as opposed to 3.3.11. I was getting 80-100% after a few
minutes whereas when I reverted back to 3.3.11, I only saw the odd peak
at about 27%, and most of the time it was <10%.

No other change other than the version, config was identical.

Cheers

Alex
Received on Fri Dec 27 2013 - 17:58:30 MST