On Tue, Dec 18, 2007, Elvar wrote:
> Well, I've set up squid-rrd now on two different boxes at two different
> locations to monitor performance and it doesn't appear that Squid is
> being overworked. Is there a way to possibly increase the TTL for
> queries against Active Directory? I've been battling with this problem
> for months now and cannot for the life of me figure out what's causing
> the problem.
The only way is to increase the number of ntlm authentication helpers that
you're running; but hm, you're using 150 ntlm authentication helpers.
There's a page in cachemgr - again, I forget its name - which gives you the
authenticator statistics (helper status, queue length, etc.) Hm, if you file
a bugzilla request I could come up with a way of getting access to the
queue statistics.
There's a project on http://devel.squid-cache.org/ - the auth ip cache project,
I forget its exact name right now - but it'll help quite a bit. It breaks if
you need to use cache peers as it caches the results for each client IP address.
Hm, I think I know how to fix that too, somewhat. (Henrik, what about using
ACLs to mark which clients can have their auth info cached?)
Adrian
-- - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -Received on Tue Dec 18 2007 - 17:12:14 MST
This archive was generated by hypermail pre-2.1.9 : Tue Jan 01 2008 - 12:00:02 MST