[squid-users] Re: Re: squid_kerb_auth High CPU load.

Hi Simon,

  Unfortunately I do not have a production environment to give you average
usage numbers.

  Can you check that you don't have a file in /var/tmp like (or at least is
not modified):

-rw------- 1 squid nogroup 603 Apr 7 01:13 /var/tmp/opensuse12--HTTP-044_31

  This is the replay cache if not disabled.

Markus

"Simon Dwyer" <mail_at_simmyd.net> wrote in message
news:1334813176.2408.29.camel_at_sdwyer.federalit.net...
> Hi Markus,
>
> This is in the /etc/init.d/squid
>
> if [ -f /etc/sysconfig/squid ]; then
> . /etc/sysconfig/squid
> fi
>
> What should the cpu usage be of each squid_kerb_auth process when used?
>
> Cheers,
>
> Simon
>
> On Thu, 2012-04-19 at 06:15 +0100, Markus Moeller wrote:
>> Are you sure /etc/sysconfig/squid is sourced by the squid startup script
>> ?
>> Markus
>>
>> "Simon Dwyer" <mail_at_simmyd.net> wrote in message
>> news:1334789097.2408.17.camel_at_sdwyer.federalit.net...
>> > Hi all,
>> >
>> > I have got kerberos working and moved it to production but then the
>> > server started smashing its cpu. It seems that the squid_kerb_auth
>> > processes are killing the cpu.
>> >
>> > I have the following in my config.
>> >
>> > /etc/sysconfig/squid/
>> >
>> > KRB5RCACHETYPE=none
>> > export KRB5RCACHETYPE
>> >
>> > /etc/squid/squid.conf
>> >
>> > auth_param negotiate program /usr/bin/negotiate_wrapper
>> > --kerberos /usr/lib64/squid/squid_kerb_auth -i -r -s GSS_C_NO_NAME
>> > --ntlm /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
>> > --domain=DOMAIN.EXAMPLE
>> > auth_param negotiate children 30
>> > auth_param negotiate keep_alive on
>> >
>> > From what i have read the first part should fix the high cpu issue but
>> > it doesnt seem to help.
>> >
>> > More the case i am having trouble getting that variable active.
>> >
>> > Anyone else come up on this?
>> >
>> > Simon
>> >
>> >
>>
>>
>
>
>
Received on Thu Apr 19 2012 - 05:44:58 MDT