Problems authenticating with "domain\username" syntax

From: Guido Serassio <serassio@dont-contact.us>
Date: Sat, 31 Mar 2001 18:50:10 +0200

Hi,

I'working to a native Windows NT Authenticathor for the 2.3STABLE4 native
Windows NT port.

The authenticathor code itself works fine, but I have found the following
problem

When I use as username the Microsoft Syntax, "domain\username", the
authenticator response is correct, but Squid seems to go in a endless loop,
as in the attached log.
Using "regular" username, all runs OK

I found the same problems some months ago on a Solaris x86 2.6 system using
a multidomain Samba based authenticator.

Anybody as any suggestion ?

Please note that I'm running Squid 2.3STABLE4 compiled for Windows NT.

Best Regards

Guido Serassio

2001/03/11 21:51:56| aclMatchAclList: returning 0
2001/03/11 21:51:56| aclCheck: checking 'http_access allow test'
2001/03/11 21:51:56| aclMatchAclList: checking test
2001/03/11 21:51:56| aclMatchAcl: checking 'acl test proxy_auth REQUIRED'
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclMatchProxyAuth: checking user 'sgdomain\user1'
2001/03/11 21:51:56| aclMatchProxyAuth: user 'sgdomain\user1' not yet known
2001/03/11 21:51:56| aclMatchAclList: returning 0
2001/03/11 21:51:56| aclCheck: checking password via authenticator
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclLookupProxyAuthStart: going to ask authenticator on
sgdomain\user1
2001/03/11 21:51:56| aclLookupProxyAuthDone: result = OK
2001/03/11 21:51:56| aclCheck: checking 'http_access allow test'
2001/03/11 21:51:56| aclMatchAclList: checking test
2001/03/11 21:51:56| aclMatchAcl: checking 'acl test proxy_auth REQUIRED'
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclMatchProxyAuth: checking user 'sgdomain\user1'
2001/03/11 21:51:56| aclMatchProxyAuth: user 'sgdomain\user1' validated OK
2001/03/11 21:51:56| aclMatchProxyAuth: user 'sgdomain\user1' not yet known
2001/03/11 21:51:56| aclMatchAclList: returning 0
2001/03/11 21:51:56| aclCheck: checking password via authenticator
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclLookupProxyAuthStart: going to ask authenticator on
sgdomain\user1
2001/03/11 21:51:56| aclLookupProxyAuthDone: result = OK
2001/03/11 21:51:56| aclCheck: checking 'http_access allow test'
2001/03/11 21:51:56| aclMatchAclList: checking test
2001/03/11 21:51:56| aclMatchAcl: checking 'acl test proxy_auth REQUIRED'
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclMatchProxyAuth: checking user 'sgdomain\user1'
2001/03/11 21:51:56| aclMatchProxyAuth: user 'sgdomain\user1' validated OK
2001/03/11 21:51:56| aclMatchProxyAuth: user 'sgdomain\user1' not yet known
2001/03/11 21:51:56| aclMatchAclList: returning 0
2001/03/11 21:51:56| aclCheck: checking password via authenticator
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclLookupProxyAuthStart: going to ask authenticator on
sgdomain\user1
2001/03/11 21:51:56| aclLookupProxyAuthDone: result = OK
2001/03/11 21:51:56| aclCheck: checking 'http_access allow test'
2001/03/11 21:51:56| aclMatchAclList: checking test
2001/03/11 21:51:56| aclMatchAcl: checking 'acl test proxy_auth REQUIRED'
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclMatchProxyAuth: checking user 'sgdomain\user1'
2001/03/11 21:51:56| aclMatchProxyAuth: user 'sgdomain\user1' validated OK
2001/03/11 21:51:56| aclMatchProxyAuth: user 'sgdomain\user1' not yet known
2001/03/11 21:51:56| aclMatchAclList: returning 0
2001/03/11 21:51:56| aclCheck: checking password via authenticator
2001/03/11 21:51:56| aclDecodeProxyAuth: header = 'Basic
c2dkb21haW5cdXNlcjE6cGFzczE='
2001/03/11 21:51:56| aclDecodeProxyAuth: cleartext = 'sgdomain\user1:pass1'
2001/03/11 21:51:56| aclLookupProxyAuthStart: going to ask authenticator on
sgdomain\user1
2001/03/11 21:51:56| aclLookupProxyAuthDone: result = OK
2001/03/11 21:51:56| aclCheck: checking 'http_access allow test'

-
=======================================================
Serassio Guido
Via Albenga, 11/4 10134 - Torino - ITALY
Tel. : +39.011.610749
E-mail: serassio@interfree.it
            serassio@libero.it
WWW: http://serassio.interfree.it
Received on Sat Mar 31 2001 - 10:03:25 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:13:42 MST