<HTML><BODY>Hello, i have a problem here :) System - freebsd 10.1, squid 3.5.5 + kerberos (MIT), 50 users total.<br><br>Without any auth my squid works fine, system is not loaded. When i enable Kerberos auth internet slowly goes down and crushing after a while, at logs i see:<br><br>2015/07/09 11:47:14 kid1| WARNING: All 60/60 negotiateauthenticator processes are busy. <br> 2015/07/09 11:47:14 kid1| WARNING: 72 pending requests queued<br><br>If i put 100 childrens at config it won't help too.<br><br>TTL are fine:<br><br> auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -r -s HTTP/comp.domain.com@DOMAIN.COM<br> auth_param negotiate children 60 startup=15 idle=1<br> auth_param negotiate keep_alive on<br> auth_param basic program /usr/local/libexec/squid/basic_ldap_auth -R -D user@domain.com -w "pass" -b "DC=domain,DC=com" -f "sAMAccountName=%s" -h domain.com<br> auth_param basic credentialsttl 8 hours<br> auth_param basic children 10<br><br> authenticate_ttl 8 hour<br><br> external_acl_type nt_group ttl=1200 %LOGIN /usr/local/libexec/squid/ext_ldap_group_acl -R -b "DC=domain,DC=com" -f "(&(sAMAccountName=%v)(memberOf=CN=%a,OU=squid,DC=domain,DC=com))" -D user@domain.com -w "pass" -h domain.com<br><br>KRB5.CONF<br><br>[libdefaults] <br> default_realm = DOMAIN.COM<br> dns_lookup_realm = no <br> dns_lookup_kdc = no <br> ticket_lifetime = 24h <br> default_keytab_name = /usr/local/etc/squid/comp.domain.com.keytab <br> default_tgs_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5 <br> default_tkt_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5 <br> permitted_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5 <br> <br> [realms] <br> DOMAIN.COM = { <br> kdc = kd1.domain.com<br> kdc = kd2.domain.com<br> admin_server = kd1.domain.com<br> default_domain = domain.com<br> } <br> <br> [domain_realm] <br> .domain.com = DOMAIN.COM<br> domain.com = DOMAIN.COM<br><br><br>Server shutting down in like 7 mins, i can't even restart squid(system endless trying to kill squid PID), can't even make kill -9, not working (but system load is very low)<br><br>Can you please help me to find out what is wrong? Is there any way to monitor what happens with negotiate_kerberos_auth <span id="result_box" class="short_text" lang="en"><span class="hps">processes</span></span>?<br><br><br><br></BODY></HTML>