[squid-users] Windows Group lookup performance questions?

From: Allen Armstrong <allen_armstrong@dont-contact.us>
Date: Fri, 4 Mar 2005 09:27:59 -0800

Hi,
 
I have currently setup one of the squid proxy servers to use a
/usr/lib/squid/wbinfo_group.pl to do group lookups.  I am noticing a
performance hit when using multiply groups after turning on logging every
user authentication requires a lookup in all the groups.  I am also using
NTLM which also is hurting me.   Can any one point me in a direction to make
group lookups faster?  Should I be looking at LDAP instead?  Text file? 
 Group membership does change as I kick students on and off the internet. 
Domain has 1000 users including students and staff.
 
Running Version 2.5.STABLE3
 
Sample ACL’s
 
acl network1 src 192.168.1.1-192.168.1.254
acl network2 src 192.168.200.1-192.168.200.128
 
acl staff external nt_group internet-staff
acl junior external nt_group junior
acl senior external nt_group senior
 
http_access allow network1 staff
http_access allow nettwork2 staff
http_access allow network1 junior
http_access allow network2 senior

 
Any help or urls would be greatly welcomed.
 
 
Ttyl,
 
 
Allen Armstrong
Received on Fri Mar 04 2005 - 10:26:09 MST

This archive was generated by hypermail pre-2.1.9 : Fri Apr 01 2005 - 12:00:01 MST