[Bug 1712786] Re: ntlm_auth helpers began infinitely storming Windows Server 2008R2 AD DC with SMB auth requests, when one or two Windows users starts their Chrome browser with a lot of tabs opened at once (there may be 30 to 70 tabs)

[Andreas Hasenack]

> I increased helpers count up to 200 200 300 (start, idle, maximum). Problem not gone
> completely, but become rare. Is that problem with ntlm_auth helper itself or with too
> low helpers count? What could be done to solve?

>From the documentation, it seems it's a limitation of the ntlm helper:
"Negotiate and NTLM Scheme

{i} These authenticator schemes do not support concurrency due to the statefulness of NTLM.
"

See https://wiki.squid-
cache.org/Features/AddonHelpers#Negotiate_and_NTLM_Scheme

You may want to follow-up in the squid users mailing list (http://www
.squid-cache.org/Support/mailing-lists.html#squid-users) to share your
experience and see if other people have more configuration hints or
alternatives.

I'm going to mark this bug as "invalid" because it seems to me squid is
working as documented.

** Changed in: squid (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to squid in Ubuntu.
https://bugs.launchpad.net/bugs/1712786

Title:
  ntlm_auth helpers began infinitely storming Windows Server 2008R2 AD
  DC with SMB auth requests, when one or two Windows users starts their
  Chrome  browser with a lot of tabs opened at once (there may be 30 to
  70 tabs)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/squid/+bug/1712786/+subscriptions