--------------------- PatchSet 4081 Date: 2002/04/27 21:15:30 Author: serassio Branch: nt-2_5 Tag: (none) Log: Native NTLM Authenticator source cleanup Members: acinclude.m4:1.1.64.3->1.1.64.4 src/auth/basic/helpers/win32_locallogon/README.txt:1.1.38.2->1.1.38.3 src/auth/ntlm/helpers/NTLMSSP-WIN32/ntlm_auth.c:1.1.2.3->1.1.2.4 Index: squid/acinclude.m4 =================================================================== RCS file: /cvsroot/squid-sf//squid/acinclude.m4,v retrieving revision 1.1.64.3 retrieving revision 1.1.64.4 diff -u -r1.1.64.3 -r1.1.64.4 --- squid/acinclude.m4 22 Apr 2002 16:54:35 -0000 1.1.64.3 +++ squid/acinclude.m4 27 Apr 2002 21:15:30 -0000 1.1.64.4 @@ -160,7 +160,6 @@ undefine([AC_CV_NAME])dnl ]) -====== dnl AC_CHECK_SYSTYPE(TYPE, DEFAULT) AC_DEFUN(AC_CHECK_SYSTYPE, [AC_REQUIRE([AC_HEADER_STDC])dnl @@ -185,3 +184,4 @@ AC_DEFINE($1, $2) fi ]) + Index: squid/src/auth/basic/helpers/win32_locallogon/README.txt =================================================================== RCS file: /cvsroot/squid-sf//squid/src/auth/basic/helpers/win32_locallogon/Attic/README.txt,v retrieving revision 1.1.38.2 retrieving revision 1.1.38.3 diff -u -r1.1.38.2 -r1.1.38.3 --- squid/src/auth/basic/helpers/win32_locallogon/README.txt 27 Apr 2002 12:55:22 -0000 1.1.38.2 +++ squid/src/auth/basic/helpers/win32_locallogon/README.txt 27 Apr 2002 21:15:30 -0000 1.1.38.3 @@ -1,5 +1,5 @@ This is a simple authentication module for the Squid proxy server running on Windows NT -compiled with CygWin to authenticate users on an NT domain in native WIN32 mode. +to authenticate users on an NT domain in native WIN32 mode. Usage is simple. It accepts a username and password on standard input and will return OK if the username/password is valid for the domain/machine, @@ -19,19 +19,16 @@ Allowing Users - Users that are allowed to access the web proxy must have the Windows NT -User Rights "logon from the network" and must be included in the NT LOCAL User Group +User Rights "logon from the network" and must be included in the NT LOCAL User Groups specified in the Authenticator's command line. This can be accomplished creating a local user group on the NT machine, grant the privilege, and adding users to it. -The squid process must have the NT User Rights "Act as part of the operating system", -this is true if squid runs as a service with LocalSystem Account. - Installation - Type 'make', then 'make install', then 'make clean'. -The default is to install 'nt_auth' into /usr/local/squid/bin. +The default is to install 'nt_auth' into /usr/local/squid/libexec. Refer to Squid documentation for the required changes to squid.conf. You will need to set the following line to enable the authenticator: @@ -53,9 +50,6 @@ The Makefile assumes that GCC is in the current PATH. NT_auth compile ONLY on CygWin Environment or MS VC++. -Note: Under MS VC++ this package compile as a dll, an work only with my release -of native NT Squid 2.3 STABLE 5 port. - Testing - I strongly urge that NT_auth is tested prior to being used in a @@ -65,9 +59,6 @@ Make sure pressing behaves the same as a carriage return. Make sure pressing aborts the program. -NOTE: the NT user running the NT_auth module, must have the NT User Rights -"Act as part of the operating system". - Test that entering no details does not result in an OK or ERR message. Test that entering an invalid username and password results in an ERR message. Note that if NT guest user access is allowed on the PDC, an OK message Index: squid/src/auth/ntlm/helpers/NTLMSSP-WIN32/ntlm_auth.c =================================================================== RCS file: /cvsroot/squid-sf//squid/src/auth/ntlm/helpers/NTLMSSP-WIN32/Attic/ntlm_auth.c,v retrieving revision 1.1.2.3 retrieving revision 1.1.2.4 diff -u -r1.1.2.3 -r1.1.2.4 --- squid/src/auth/ntlm/helpers/NTLMSSP-WIN32/ntlm_auth.c 27 Apr 2002 12:55:23 -0000 1.1.2.3 +++ squid/src/auth/ntlm/helpers/NTLMSSP-WIN32/ntlm_auth.c 27 Apr 2002 21:15:30 -0000 1.1.2.4 @@ -180,7 +180,7 @@ int plen; if (fgets(buf, BUFFER_SIZE, stdin) == NULL) { - fprintf(stderr, "fgets() failed! dying..... errno=%d (%s)\n", errno, + debug("fgets() failed! dying..... errno=%d (%s)\n", errno, strerror(errno)); exit(1); /* BIIG buffer */ }