Hi Simon,
Unfortunately I do not have a production environment to give you average
usage numbers.
Can you check that you don't have a file in /var/tmp like (or at least is
not modified):
-rw------- 1 squid nogroup 603 Apr 7 01:13 /var/tmp/opensuse12--HTTP-044_31
This is the replay cache if not disabled.
Markus
"Simon Dwyer" <m...@simmyd.net> wrote in message
news:1334813176.2408.29.ca...@sdwyer.federalit.net...
Hi Markus,
This is in the /etc/init.d/squid
if [ -f /etc/sysconfig/squid ]; then
. /etc/sysconfig/squid
fi
What should the cpu usage be of each squid_kerb_auth process when used?
Cheers,
Simon
On Thu, 2012-04-19 at 06:15 +0100, Markus Moeller wrote:
Are you sure /etc/sysconfig/squid is sourced by the squid startup script
?
Markus
"Simon Dwyer" <m...@simmyd.net> wrote in message
news:1334789097.2408.17.ca...@sdwyer.federalit.net...
> Hi all,
>
> I have got kerberos working and moved it to production but then the
> server started smashing its cpu. It seems that the squid_kerb_auth
> processes are killing the cpu.
>
> I have the following in my config.
>
> /etc/sysconfig/squid/
>
> KRB5RCACHETYPE=none
> export KRB5RCACHETYPE
>
> /etc/squid/squid.conf
>
> auth_param negotiate program /usr/bin/negotiate_wrapper
> --kerberos /usr/lib64/squid/squid_kerb_auth -i -r -s GSS_C_NO_NAME
> --ntlm /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
> --domain=DOMAIN.EXAMPLE
> auth_param negotiate children 30
> auth_param negotiate keep_alive on
>
> From what i have read the first part should fix the high cpu issue but
> it doesnt seem to help.
>
> More the case i am having trouble getting that variable active.
>
> Anyone else come up on this?
>
> Simon
>
>
