Re: [squid-users] Re: Squid and Splash page

On 28/12/2011 8:29 a.m., ming wrote:
> I got similar error as follows:
>
> 2011/12/15 01:59:00.942| aclMatchExternal:
> acexternal("Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==")
> = lookup needed
> 2011/12/15 01:59:00.942| aclMatchExternal:
> "Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==":
> entry=@0x3cecea8, age=69
> 2011/12/15 01:59:00.942| aclMatchExternal:
> "Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==":
> queueing a call.
> 2011/12/15 01:59:00.942| aclMatchExternal:
> "Basic%20ZDA5NmQzYTItMDcxZS00ODViLTk3MDQtNzIyZGYzYWM2NTU2OjczZGMxOGI4LWY0ZGYtNDVhZi1hZDViLTllYTUyYTE2MDhkNA==":
> return -1.
>
> I am using 3.1.16.
> my external_acl_type is as follows:
>
> external_acl_type acexternal children=20 ttl=60 negative_ttl=1 %>{X-MYAUTH}
> /usr/local/bin/acexternal localhost
>
> Am I hitting the same error?

What error? (you have erased the post history from your reply to this
old [dead?] thread.)

And why are you passing clear-text username:password details in a custom
header which could get cached? If you want to use auth please use the
proper HTTP auth headers. Custom _schemes_ are permitted as long as they
fit within the HTTP requirements (looks like you could use the Basic
auth definitions with a different scheme name).

>
> ---
> I found the following code segment in external_acl.cc
>
>
> if (acl->def->theHelper->stats.queue_size<=
> acl->def->theHelper->n_running) {
> debugs(82, 2, "aclMatchExternal: \""<< key<< "\": queueing
> a call.");
> ch->changeState(ExternalACLLookup::Instance());
> debugs(82, 2, "aclMatchExternal: \""<< key<< "\": return
> -1.");
> return -1; // to get here we have to have an expired cache
> entry. MUST not use.
>
>
> Can you please explain in what situations that this code segment will be
> executed?

theHelper->stats.queue_size<= theHelper->n_running

More requests are queued to be processed than there are helpers to
handle them.
Solutions:
  * increase your helper number,
  * alter your helper to support concurrency and adjust the squid.conf,
  * increase the helper response TTL, to serve more lookups out of the
helper response cache.

Amos
Received on Wed Dec 28 2011 - 02:00:56 MST