RE: [squid-users] NTLM helper performance problem

I will check the ping time of the domain controller during the disturbed time
(normally in a few hours). From the beginning I have thought of the problem coming
from the DC. First, we had a DC that was really busy (Windows AD serving for
the Exchange servers and a lot of other things). But I set up a DC just for the
NTLM proxy to be sure that the problem wasn't coming from it.
But you're right, I need to go further in that way. But I have already remarked that
I often have, during these peak times, a timeout when contacting the DC (in winbind
log). Concerning the tests with "wbinfo and friends", what should I look for?
wbinfo -t, ... ?
Just another question : do you recommand using challenge reuse or not? Because I was
thinking of it as a way to limit the communication with the DC...

Whatever, thx for your answers.
Regards,

        Pierre-Emmanuel

-----Message d'origine-----
De : Henrik Nordstrom [mailto:hno@squid-cache.org]
Envoyé : vendredi 23 avril 2004 21:38
À : SXB6300 Mailing
Cc : squid-users@squid-cache.org
Objet : Re: [squid-users] NTLM helper performance problem

On Fri, 23 Apr 2004, SXB6300 Mailing wrote:

> On this NTLM proxy, there is nearly 500 users. The authentication works correctly during 90% of the time,
> but at certain periods (including peak times), the ntlm helpers average service time (in cache manager) grows
> up to 11000ms and so, the users must wait several seconds before getting a page. It lasts only a few minutes
> and then all goes back to normal.

Is there any sign of disturbance if you ping the domain controllers?

Does wbinfo and friends show any signs if problems when this happens?

It is most likely a problem in winbind or in the communication to your
domain controllers.

Regards
Henrik
Received on Mon Apr 26 2004 - 00:39:28 MDT