I have a FreeBSD 5.1 Box, Running Squid 2.5-STABLE4. I configured it to authenticate by NTLM with wb_ntlmauth, with wb_group external acl. It working for about 3 months. But often my users get a login prompt on the browser (IE) to login. It should not happen!
I took a look on Statistics and saw my 25 NTLM children. The last ones had some hits... so I changed it to 50 children. Again the users got some login promptsm and I changed the children to 100. But they still get those login prompts sometimes, and I think it's not the number of children. Now I am raising the wb_group to 50 concurrency.
My cache has about 600 users, and the load is not big.
Here's some parts of my config files, and logs... any help are welcome !!!!
Squid.conf: auth_param ntlm program /usr/local/squid/libexec/wb_ntlmauth DOMINIO auth_param ntlm children 100 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/local/squid/libexec/wb_auth auth_param basic children 6 auth_param basic realm Formato: DOMINIO\usuario auth_param basic credentialsttl 2 hour
external_acl_type GrupoAD ttl=600 negative_ttl=30 concurrency=15 %LOGIN /usr/local/squid/libexec/wb_group
After a -k reconfigure, I get the folowing errors on cache.log:
2003/10/15 15:23:57| Pinger socket opened on FD 415
2003/10/15 15:23:57| Loaded Icons.
2003/10/15 15:23:57| Ready to serve requests.
2003/10/15 15:23:57| AuthenticateNTLMHandleReply: invalid callback data. Releasing helper '0x832f010'.
2003/10/15 15:23:57| AuthenticateNTLMHandleReply: invalid callback data. Releasing helper '0x84dff10'.
(wb_ntlmauth)[18565](wb_ntlm_auth.c:273): fgets() failed! dying..... errno=35 (Resource temporarily unavailable)
(wb_ntlmauth)[18567](wb_ntlm_auth.c:273): fgets() failed! dying..... errno=35 (Resource temporarily unavailable)
(wb_group)[19286](wb_check_group.c:231): Warning: Can't enum user groups.
(wb_group)[19287](wb_check_group.c:231): Warning: Can't enum user groups.
(wb_group)[19288](wb_check_group.c:231): Warning: Can't enum user groups.
(wb_group)[19286](wb_check_group.c:231): (wb_group)[19287](wb_check_group.c:231): Warning: Can't enum user groups.
Warning: Can't enum user groups.
(wb_group)[19290](wb_check_group.c:231): Warning: Can't enum user groups.
(wb_group)[19287](wb_check_group.c:231): Warning: Can't enum user groups.
(wb_group)[19288](wb_check_group.c:231): (wb_group)[19286](wb_check_group.c:231): Warning: Can't enum user groups.
Warning: Can't enum user groups.
2003/10/15 15:23:57| AuthenticateNTLMHandleReply: invalid callback data. Releasing helper '0x8500010'.
(wb_ntlmauth)[18566](wb_ntlm_auth.c:273): fgets() failed! dying..... errno=35 (Resource temporarily unavailable)
(wb_ntlmauth)[18568](wb_ntlm_auth.c:273): fgets() failed! dying..... errno=35 (Resource temporarily unavailable)
2003/10/15 15:23:58| icmpRecv: recv: (61) Connection refused
2003/10/15 15:23:58| Closing Pinger socket on FD 415
Thanks, Alex
