squid_ldap_group patch

Hi,

I start to use Ldap authorization on squid to work integrated to
Active Directory for users authenticated by Negotiate method (using
kerberos), and once that the username has a @REALM appended to it, I
need to remove this, so I (with the help of a colleage that know C
much better that I) create a patch to strip kerberos realm from user
name in squid_ldap_group.

The patch is attached, and works for both, version 3.0 Stable1 and 2.6 Stable17.

My notes on use kerberos for authentication on AD and authorization
with Ldap are in http://klaubert.wordpress.com/

Best regards,

Klaubert Herr