On Sat, 5 Nov 2005, Serassio Guido wrote:
I have some questions/info about Negotiate/SPNEGO.
- In the negotiate-2_5 branch there is still the ntlm 'use_ntlm_negotiate'
option, is intentional ?
Yes, as 2.5 does have this option.. but we decided to not port this option
to Squid-3.
- I have found some instability in the 2.5 Negotiate code when al helpers are
busy:
I have lowered to 2 the number of helpers, after Squid says this:
2005/10/30 12:21:09| WARNING: All negotiateauthenticator processes are busy.
and stops to respond to requests. After I need to restart or reconfigure
Squid.
From cachemgr the helpers are reported as idle.
Ok. I'll try to look into it.
- On Squid 3.0, testing Samba 4 ntlm_auth, I have found that when the auth
helper crashes, Squid crashes too:
2005/11/04 23:12:44| assertion failed: cbdata.cc:450: "c->locks > 0"
Quite likely related to the above, but a stack trace would be nice..
2005/11/04 23:12:47| Starting Squid Cache version 3.0-PRE3-CVS for
i686-pc-linux-gnu...
2005/11/04 23:12:47| Process ID 24918
- Final question, not directly related to Negotiate: In Squid 2.5, in the
helper stats there is a reference to "A = ALIVE" and "P = PLACEHOLDER" status
of helper, but this is never printed. I think that should be a forgotten
cleanup.
Indeed... placeholder status can never be on a helper, only on a request..
(a request has placeholder status while it is waiting for a helper to
become available)
Regards
Henrik
