Re: [squid-users] Does --enable-ntlm-auth-helpers=fakeauth work with 3.0?

From: Jeff Jenkins <jrj_at_apple.com>
Date: Tue, 15 Jul 2008 09:36:32 -0700

That fixes the crash. NTLM auth is still failing, due to an
unexpected TT:

2008/07/15 09:10:01| helperStatefulHandleRead: unexpected read from
ntlmauthenticator #1, 84 bytes 'TT
TlRMTVNTUAACAAAACgAKADAAAAAGggEATp16pM0
+8Q0AAAAAAAAAAAAAAAA6AAAAAAAAAAAAAAAAAA==
'
2008/07/15 09:10:01| StatefulHandleRead: no callback data registered

Thanks for the fix to fakeauth_auth. Anyone know how to get
fakeauth_auth to actually accept bogus creds? This used to work in
2.5-STABLE10. I have jumped to 3.0.HEAD.

-- jrj

On Jul 15, 2008, at 5:45 AM, Amos Jeffries wrote:

> Jeff Jenkins wrote:
>> I built squid as follows:
>> $ sudo ./configure --prefix=/usr/local/squid/ntlm --enable-
>> auth=ntlm --enable-ntlm-auth-helpers=fakeauth
>> When running squid and attempting to get my client to use the squid
>> proxy, I see the following errors on the console of the squid
>> machine:
>> 2008/07/14 13:14:06| helperStatefulHandleRead: unexpected read from
>> ntlmauthenticator #1, 84 bytes 'TT
>> TlRMTVNTUAACAAAACgAKADAAAAAGggEATp16pM0
>> +8Q0AAAAAAAAAAAAAAAA6AAAAAAAAAAAAAAAAAA== '
>> 2008/07/14 13:14:06| StatefulHandleRead: no callback data registered
>> 2008/07/14 13:14:06| authenticateNTLMHandleReply: Helper '0x567010'
>> crashed!.
>> 2008/07/14 13:14:06| authenticateNTLMHandleReply: Error validating
>> user via NTLM. Error returned 'BH Internal error'
>> 2008/07/14 13:14:06| WARNING: ntlmauthenticator #1 (FD 5) exited
>> I am running 3.HEAD-20080711. Any ideas why this is crashing?
>> -- jrj
>> On Jul 14, 2008, at 10:29 AM, Jeff Jenkins wrote:
>>> Trying to get fakeauth to work with 3.x (have used 3.HEAD-20080711
>>> sources), but I see crashes in fakeauth.
>>>
>>> Anyone have this working?
>>>
>>> Additionally, where is a definitive guide on getting NTLM auth to
>>> work with 3.x? I have googled a bunch of 2.x stuff, but not much
>>> mentioning 3.x
>
> There is not much difference between 2.x and 3.x with regards to the
> helpers. So it should not be crashing. Only one suspect change I can
> see...
>
> Does this patch fix it?
>
> Amos
> --
> Please use Squid 2.7.STABLE3 or 3.0.STABLE7
> === modified file 'helpers/ntlm_auth/fakeauth/fakeauth_auth.c'
> --- helpers/ntlm_auth/fakeauth/fakeauth_auth.c 2008-07-09 13:15:32
> +0000
> +++ helpers/ntlm_auth/fakeauth/fakeauth_auth.c 2008-07-15 12:41:38
> +0000
> @@ -299,9 +299,12 @@
> buf += (s - 1);
> *buf++ = '\\'; /* Using \ is more consistent with MS-proxy */
>
> - p = ntlmGetString(&auth->hdr, &auth->user, auth->flags);
> + if( (p = ntlmGetString(&auth->hdr, &auth->user, auth->flags))
> == NULL)
> + return 1;
> +
> if ((s = strlen(p) + 1) >= size)
> return 1;
> +
> while (*p)
> *buf++ = (*p++); //tolower
>
>
Received on Tue Jul 15 2008 - 16:36:41 MDT

This archive was generated by hypermail 2.2.0 : Tue Jul 15 2008 - 12:00:04 MDT