[squid-users] Problem with NTLM authentication - please help!

Hi!!
 
We have two squid proxies running at our site, both of
them with the same versions and configurations (Fedora
Core 5, Samba 3.0.22-1.fc5, installed through rpm, and
Squid 2.5.STABLE13. Both are running on Dell servers
with the same configuration.
 
Samba on both machines is configured with "security =
ads", and the testes "wbinfo -t", "wbinfo -u" and
"wbinfo -g" all runs ok.
 
One of them is running just fine, but the other is
crashing every day, due to ntlm authentication
problems.
 
The only difference is that the proxy that is running
ok is installed with 64 bits version of Fedora, and
the other one is running with the 32 bits version.
 
Squid´s compile options are the following:
 
configure options: --enable-auth=ntlm,basic
--enable-delay-pools --enable-snmp
--enable-useragent-log --prefix=/usr/local/squid
--enable-ssl --enable-underscores
--enable-storeio=ufs,aufs,diskd
--enable-external-acl-helpers=wbinfo_group
 
The problem we are facing is that ntlm helpers begin
to enter in "R" and "B" states, until every one of
them stops authenticating, and then Squid dies. The
error message associated to the crash is this: " Too
many queued ntlmauthenticator requests (301 on 60)".
 
During all day, we get the following message as well:
" string_to_sid: Sid S-0-0 is not in a valid format."
 
Does anybody know what could be the problem, or how
could we trace it? Wich one should be the best squid´s
debug_level for this problem?
 
Thanks in Advance,

André

PS: By the way, not related to this question, how do
you users of Gmail can send messages to the list? I
always try, but even with the option for sending
messages not in HTML format chosen, i can't send
messages to the list. If anyone has a hint about this
also, it would be very appreciated. Thanks!

        
                
_______________________________________________________
Você quer respostas para suas perguntas? Ou você sabe muito e quer compartilhar seu conhecimento? Experimente o Yahoo! Respostas !
http://br.answers.yahoo.com/
Received on Fri Oct 06 2006 - 07:45:04 MDT