Re: [squid-users] Squid with Kerberos auth

From: Wladner Klimach <>
Date: Mon, 19 Dec 2011 13:13:59 -0200


how can I check if the keep alive is really working? Another thing, is
it normal behavior the cpu usage being hit 98% usage during one domain
download page? Could it be just hardware limitation? If so, this is a
very awkward situation because there's no severe load upon squid cause
only I using it.



2011/12/14 Amos Jeffries <>:
> On Wed, 14 Dec 2011 13:22:38 -0200, Wladner Klimach wrote:
>> Hello,
>> i'm running squid with kerberos authentication. The problem is that
>> it's runing too slow. Looks like squid is negotiating with AD every
>> URL it tries to get. Anyone could point me a way out?
> A few things:
>  * Double-check that you have connection persistence (keep-alive) operating
> on all connections (both client and server).
>  * Ensure that your squid is as recent as you can use, we have had ongoing
> small fixes to improve persistence across all releases this past year.
>  * Check that the auth packets are not failing over into NTLM or older
> protocols in apps which are supposed to be on Kerberos.
>  * Maybe also check that DNS lookups Kerberos depends on for DC location are
> responding fast with reasonable TTL.
> Amos
Received on Mon Dec 19 2011 - 15:14:07 MST

This archive was generated by hypermail 2.2.0 : Mon Dec 19 2011 - 12:00:03 MST