[squid-users] Squid + kerberos, all childrens are busy

[Amos Jeffries]

On 9/07/2015 9:54 p.m., Дмитрий Рукавцов wrote:
>  Hello, i have a problem here :) System - freebsd 10.1, squid 3.5.5 + kerberos (MIT), 50 users total.
> 
> Without any auth my squid works fine, system is not loaded. When i enable Kerberos auth internet slowly goes down and crushing after a while, at logs i see:
> 
> 2015/07/09 11:47:14 kid1| WARNING: All 60/60 negotiateauthenticator processes are busy. 
> 2015/07/09 11:47:14 kid1| WARNING: 72 pending requests queued
> 

So 50 users / 60 helpers ... how many requests per second? and how
fast/slow is the helper responding?


> If i put 100 childrens at config it won't help too.
> 

Please define "wont help".

> 
> Server shutting down in like 7 mins, i can't even restart squid(system endless trying to kill squid PID), can't even make kill -9, not working (but system load is very low)
> 
> Can you please help me to find out what is wrong? Is there any way to monitor what happens with negotiate_kerberos_auth  processes ?

-d helper parameter should log to cache.log what its doing.

Amos