Hello.

Proxy: squid-2.6.STABLE19-1.fc8 | SquidGuard 1.3
Os: Fedora 8
All latest fedora update.

I have a strange problem.

My squid proxy server is configured with NTLM Helper (/usr/bin/ntlm_auth). My 
proxy is linked with my Active Directory. I have two domain controler, 1 is a 
Windows 2000 and the other is a Windows 2003 server.  Everything is working 
well. I have no wait time with the authentication between my linux box and my 
Active Directory. If I do a "wbinfo -u" or "wbinfo ....) I get the answer in 
less than 1 second. My wbinfo_group.pl is working like my "wbinfo -u", very 
fast. Our windows computers surf on the internet without problem.

I have 15 NTLM helper that serve presently about 60 users. We are currently 
deploying the server. At the end, I will have something like 150 users.

Yesterday, I decided to configure my Macintosh computers, about 11 on my proxy. 
Everytime a Macintosh contact the internet to access a web site, the Macintosh 
jam around 4-5 NTLM helper for a period of 10 second to 1 minutes for each. 
After, the helper are released by the Macintosh Computer one by one. You can 
understand now the problem that I got. With only 15 helpers and 11 macs on the 
internet at lunch time, all helpers are jammed in a status of R (RESERVED OR 
DEFERRED). All other users need to wait until a NTLM helper is available. This 
cause, a wait time to high and squid crash and restart.

Why the macintosh computer jam my NTLM helper when our Windows computers are 
working fine and don't jam any NTLM helpers like the Macintosh computer do ?

I did a little bypass of my configuration. I configured all mac with a static 
IP Address and all computer that are in that Ip Address range are not 
authenticated.

Can someone help me to find my problem and to solve it ?

I really need my Macintosh user to be Authenticated. Even if they use Safari, 
Internet Explorer or Firefox, I got this problem.

Thanks

Jonathan
It Technician.
_________________________________________________________________

Reply via email to