Re: [PATCH] Bug 2680: ** helper errors after -k rotate

From: Henrik Nordstrom <henrik_at_henriknordstrom.net>
Date: Thu, 16 Jul 2009 08:42:26 +0200

tor 2009-07-16 klockan 14:47 +1200 skrev Amos Jeffries:

> And the sad reality in squid-3 with _one_ helper:
>
> squid-*------1-helper-------* winbindd [state1, state2]
> \-------crash: all 2 of 1 helpers all RS pending state.

You can't run NTLM with just one helper, not until both the following
are true:

1. We implement the current request protocol for stateful helpers

2. Samba implements the same in ntlm_auth (iirc this has been done in
Samab4)

The reason to this is because the challenge is unique for each client
(required by NTLMv2) and the default NTLM helper protocol only supports
one challenge at a time.

But Squid should not crash horribly only because you do, only complain
about helper queue overload...

Regards
Henrik
Received on Thu Jul 16 2009 - 06:42:30 MDT

This archive was generated by hypermail 2.2.0 : Thu Jul 16 2009 - 12:00:05 MDT