Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-24 Thread Carlos Defoe
Windows 7 inside the domain? Anyway, you should configure a basic auth scheme as a second fallback. On Fri, Oct 24, 2014 at 9:26 PM, Markus Moeller wrote: > Hi Pedro, > > How did you create your keytab ? What does klist –ekt show > ( I assume you use MIT Kerberos) ? > > Markus > > "Pedro

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-24 Thread Markus Moeller
Hi Pedro, How did you create your keytab ? What does klist –ekt show ( I assume you use MIT Kerberos) ? Markus "Pedro Lobo" wrote in message news:40e1e0e7-50c6-4117-94aa-50b065734...@gmail.com... Hi Squid Gurus, I'm at my wit's end and in dire need of some squid expertise. We've got a pr

Re: [squid-users] squid 3.4. uses 100% cpu with ntlm_auth

2014-10-24 Thread Diego Woitasen
On Thu, Oct 9, 2014 at 6:09 AM, wrote: > Hello masterx81 , > > thanks for this information. I've downgraded my 5 server form 3.4.8 to > 3.3.13 . Everything works fine. The server have less than the half load as > before, so I can shutdown one server. Perhaps I can reduce on more server. > > > Mit

[squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-24 Thread Pedro Lobo
Hi Squid Gurus, I'm at my wit's end and in dire need of some squid expertise. We've got a production environment with a couple of squid 2.7 servers using NTLM and basic authentication. Recently though, we decided to upgrade and I'm now setting up squid 3.3 with Kerberos and NTLM Fallback. I'v

Re: [squid-users] 3.3.x -> 3.4.x: huge performance regression

2014-10-24 Thread Eliezer Croitoru
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Eugene, I will try to clear things out. Any helper is an external software but each and every one of them answers to a specific logic. external_acl url_rewrite and store_id helpers works in one way while authentication works in another. To make t

Re: [squid-users] 3.3.x -> 3.4.x: huge performance regression

2014-10-24 Thread Eugene M. Zheganin
Hi. On 24.10.2014 17:17, Rietzler, Markus (RZF, SG 324 / ) wrote: > the important keyword is "NTLM"! > without external auth helper squid 3.4 is working well. as soon as the > external helper is active, cpu rises to 100%. nothing with workers etc. > even the fakehelper is not working. just to ma

[squid-users] squid ipv6 tcp_outgoing limitation ??

2014-10-24 Thread Ahmed Allzaeem
Hi , Recently I used squid 3.4.3 for ipv6 for tcp_outgoing for many ipv6 addresses based on the username. I added about 1000 users with 1000 tcp_outgoing address but it didn't work ..it always uses the last line in squid.conf with tcp_outgoing directive !! Does squid has limitation in i

Re: [squid-users] 3.3.x -> 3.4.x: huge performance regression

2014-10-24 Thread Rietzler, Markus (RZF, SG 324 / )
the important keyword is "NTLM"! without external auth helper squid 3.4 is working well. as soon as the external helper is active, cpu rises to 100%. nothing with workers etc. even the fakehelper is not working. just to make sure, that the problem is not NTLM, samba, winbind, AD etc. see http:/

Re: [squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

2014-10-24 Thread Victor Sudakov
Carlos Defoe wrote: > I had this kind of 100% CPU problem with auth helpers when upgrading > to squid 3.4. I use negotiate_wrapper, kerberos, ntlm and basic auth. > Then I had to fall back to 3.3 and it is production until now, with > some troubles with broken clients, but with normal cpu usage mos