[Samba] ntlm_auth and high load fault

[Vitaly Protsko]

Hi!

I'm serving ~3K users with 40 childs. Comp is 2x3.2 Intel, 4GB RAM, 2xSCSI
HDD in RAID0

Yes, it is partial solution to pass windowsupdate w/o auth, but here still
other "robots" ... :(
Seems to me it is not a problem around perfomance, rather logic.

/aTan

> -----Original Message-----
> From: Bruno Guerreiro [mailto:bruno.guerreiro at ine.pt] 
> Sent: Thursday, September 01, 2005 3:43 PM
> To: 'Vitaly Protsko'; samba at lists.samba.org
> Subject: RE: [Samba] ntlm_auth and high load fault
> 
> 
> Hi,
> I've noticed that Windows Updates, just won't do NTLM auth, 
> so i've just added a no_auth exception for windows update 
> sites. How many children are you starting. I'm serving +700 
> users with just one squid with 30 ntlm_auth processes on a 
> PII/800 MHZ/256 MB Ram with no problems wathsoever.
> 
> Best Regards,
> Bruno Guerreiro
> 
> >-----Original Message-----
> >From: Vitaly Protsko [mailto:villy at sft.ru]
> >Sent: quinta-feira, 1 de Setembro de 2005 12:41
> >To: samba at lists.samba.org
> >Subject: [Samba] ntlm_auth and high load fault
> >
> >
> >Hi!
> >
> >Here is situation:
> >
> >1. We decide to switch on "Auto proxy config" in our network 
> (you know, 
> >wpad.example.com, etc.) 2. After that there are lot of 
> robots (checking 
> >for new versions, upgrading,
> >esp. M$ upg) on client
> >   computers start trying to fetch resources, but w/o any 
> >authentication (or
> >I dont understand what is going on :).
> >3. Result is unxepected: alot of "requests in queue" to 
> >ntlm_auth, because
> >of this squid restarts every
> >    2 min when in morning computers are going up. :(
> >
> >Tech info:
> >
> >Linux 2.6.11.12
> >glibc-2.3.5
> >gcc-3.4.4
> >samba-3.0.20, no patches
> >krb5-1.3.1 (MIT)
> >squid-2.5.10
> >ntlm_auth from samba pack
> >
> >Joined to 2k3 AD.
> >
> >
> >My ideas about why this happens are exausted (all of them are
> >unproductive
> >:).
> >ANYBODY, please, if you have similar, or heard about this 
> >situation, please
> >let me know.
> >May be some ideas about fighting against it?
> >
> >Thnx in advance.
> >/aTan
> >
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions:  https://lists.samba.org/mailman/listinfo/samba
> >
>