Re: Squid 2.5 CygWin and NT development

From: Robert Collins <robert.collins@dont-contact.us>
Date: Mon, 16 Apr 2001 22:03:05 +1000

----- Original Message -----
From: "Guido Serassio" <serassio@libero.it>
To: "Robert Collins" <robert.collins@itdomain.com.au>
Cc: "Henrik Nordstrom" <hno@hem.passagen.se>;
<squid-dev@squid-cache.org>
Sent: Monday, April 16, 2001 9:52 PM
Subject: Re: Squid 2.5 CygWin and NT development

> Hi Robert,
>
> 3. Where possible use "unix" functions or cygwin-API functions (I.E.
> >dlopen() not LoadLibrary()). Also cygwin has a number of functions
that
> >extend the unix-style API onto win32, and you need to use those to
run
> >reliably on cygwin. using "native" calls should be done with care, so
as
> >not to conflict with cygwin's compatability code.
>
> OK, when needed I eventually make a double branch code,
_SQUID_CYGWIN_ and
> _SQUID_MSWIN_.

Cool. Lets wait and see if that actually happens however :]

> >4. use win95 compatible functions. Cygwin is windows 95 compatible,
and
> >so is squid for cygwin. If you __need__ to write NT only code, make a
> >configure option to turn on NT-only features. Only the execution as a
> >server feature you've listed below should need NT, so I don't think
this
> >will be much of an issue. If it is, let me know. I suggest you look
at
> >sshd from cygwin for service manager integration - Corinna has solved
> >many headaches with spawned processes and the like there.
>
> I'm not sure that is a right choice to develope code with Windows 9x
> compatibility in mind ...
> The features limitations are very strong, and Microsoft is now ending
the
> evolution of this buggy platform with the new Windows XP.
> I think that in April 2001 even the NT Domain based NTLM
Authentication may
> be quickly osbolete ...

I can understand your viewpoint, but the cygwin port of squid needs to
be able to be used on all platforms cygwin supports. Which includes
win95. And personally, I intend to never use Windows XP unless MS change
their "activation" system. You can add NT only functionality, but only
as a compile-time option via the configure script.

> >lastly I'm not sure what you mean by native windows NT basic
> >authentication. If you mean the module you sent me a beta of before,
> >which talks to the LSA when given basic credentials, if you have that
> >ready to roll the best place to add it is as a new basic helper - it
> >should be able to go straight into HEAD unless there are issues with
the
> >code. Drop me a tarball if you like.
>
> Yes, is that module.
> I have found some problems on Squid 2.3 on the handling of the
> domain\username Microsoft syntax. Now I will to make another some
testing.

There should be no issues - Kinkie is running NTLM on several thousand
users with multiple domains, and there are no problems related to the
domain\username. The access log and all the username compare and string
splitting functions support domaun\username syntax. Their is one
possible hole: the sending of the username password to the basic
authenticator - if you see a bug there, either patch it (see
src/auth/auth_basic.c) and mail me a patch, or just tell me and I'll
generate a fix. (Again - this sort of bug-fix should go nearly direct
into HEAD, or for auth stuff potentially into auth_rewrite and then
HEAD).

> >Rob
>
> Bye
>
> Guido
>

Rob
Received on Mon Apr 16 2001 - 06:03:02 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:13:46 MST