Some Negotiate/SPNEGO questions

Hi Henrik,

I have some questions/info about Negotiate/SPNEGO.

- In the negotiate-2_5 branch there is still the ntlm
'use_ntlm_negotiate' option, is intentional ?

- I have found some instability in the 2.5 Negotiate code when al
helpers are busy:
I have lowered to 2 the number of helpers, after Squid says this:
2005/10/30 12:21:09| WARNING: All negotiateauthenticator processes are busy.
and stops to respond to requests. After I need to restart or reconfigure Squid.
 From cachemgr the helpers are reported as idle.

- On Squid 3.0, testing Samba 4 ntlm_auth, I have found that when the
auth helper crashes, Squid crashes too:

2005/11/04 23:05:11| store_swap_size = 0
2005/11/04 23:05:11| storeLateRelease: released 0 objects
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
INTERNAL ERROR: Signal 11 in pid 19487 (3.9.0-SVN-build-11442)
Please read the file BUGS.txt in the distribution
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
PANIC: internal error
BACKTRACE: 18 stack frames:
  #0 (ntlm_auth) [0x81f623b]
  #1 (ntlm_auth) [0x81f6486]
  #2 (ntlm_auth) [0x81f6554]
  #3 (ntlm_auth) [0x81f6594]
  #4 [0xffffe420]
  #5 (ntlm_auth) [0x8247f7c]
  #6 (ntlm_auth) [0x824ca9b]
  #7 (ntlm_auth) [0x818c660]
  #8 (ntlm_auth) [0x818c87d]
  #9 (ntlm_auth) [0x8249600]
  #10 (ntlm_auth) [0x824a143]
  #11 (ntlm_auth) [0x818ceba]
  #12 (ntlm_auth) [0x804ee97]
  #13 (ntlm_auth) [0x8050058]
  #14 (ntlm_auth) [0x80500be]
  #15 (ntlm_auth) [0x80506e8]
  #16 /lib/tls/libc.so.6(__libc_start_main+0xf4) [0x40078974]
  #17 (ntlm_auth) [0x804e041]
2005/11/04 23:12:44| assertion failed: cbdata.cc:450: "c->locks > 0"
2005/11/04 23:12:47| Starting Squid Cache version 3.0-PRE3-CVS for
i686-pc-linux-gnu...
2005/11/04 23:12:47| Process ID 24918

- Final question, not directly related to Negotiate: In Squid 2.5, in
the helper stats there is a reference to "A = ALIVE" and "P =
PLACEHOLDER" status of helper, but this is never printed. I think
that should be a forgotten cleanup.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Sat Nov 05 2005 - 02:41:48 MST