Re: [squid-users] cpu excesive utilization

Gontzal wrote:
> Hello all,
>
> We are experiencing some problems with one of our squid boxes,
> sometimes it has a 95 % of CPU use, offering a low service level.
> Squid Cache: Version 3.0.STABLE19 with NTLM Auth.
>
> I've realized that almost all the times we have this messages at cache.log:
>
> [2010/04/26 13:24:29, 1] libsmb/ntlmssp.c:ntlmssp_update(333)
> got NTLMSSP command 3, expected 1
> [2010/04/26 13:24:29, 1] libsmb/ntlmssp.c:ntlmssp_update(333)
> got NTLMSSP command 3, expected 1
> [2010/04/26 13:24:29, 1] libsmb/ntlmssp.c:ntlmssp_update(333)
> got NTLMSSP command 3, expected 1
>
>
> What does this means? May be any relation whit the CPU problem?
>

IIRC "command 3" means the client software is trying to use Kerberos
instead of NTLM. The decode library use in the helper you have does not
understand the difference between the two and produces that message.
This seems to be a common problem of the non-Windows helpers.

In general I'd suggest looking at going to Kerberos. Microsoft has
formally deprecated NTLMv2 now and Windows7 software is starting to not
use it at all.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.1