This is a discussion on [squid-users] Umlauts in usernames (repost) within the Squid Users forums, part of the Web Server and Related Forums category; Hi, I am reposting this because I am still stuck and did not find a workaround so far. The basic ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi,
I am reposting this because I am still stuck and did not find a workaround so far. The basic question is how does squid handle non-english characters in usernames it gets using ntlm when it passes them on to external helpers and redirectors. From previous posts on this list I already know that it converts them to url-encoded characters when it writes acces.log. But to even puzzle me more in the example posted below the character =F6 is written as %99 in access.log, the charts I found so far on the net assume that =F6 should be converted to %f6. Am I using a wrong chart here?=20 But since logfiles are treated differently as external helpers and redirectors how are these characters passed on to those instances and is there a difference between the two? Sorry about posting this again, but I could really use some help here. Thanks=20 Jan This is what I posted on 09/25: ***** Hi, I am running squid-2.5STABLE4 with the patch regarding spaces in login names in an actice directory environment. Squid gets usernames using NTLM and checks this using external helper ip_user_check. This works fine, unfortunatly there are some usernames with umlauts in them and those checks fail. When looking in access.log and cache.log I see different username entries. As an example we used a user with the name =22n=F6=22: access.log: 1064478528.646 14 192.168.1.11 TCP_DENIED/403 1716 GET http://www.microsoft.com/isapi/redir.dll? domain=5Cn%99 NONE/- text/html cache.log: 2003/09/25 10:19:33=7C aclMatchExternal: groupcheck user not authenticated (-1) 2003/09/25 10:19:33=7C aclMatchExternal: groupcheck(=22192.168.1.11 domain=5C=5Cn=7EY=22) =3D lookup needed 2003/09/25 10:19:33=7C externalAclLookup: lookup in =27groupcheck=27 for =27192.168.1.11 domain=5C=5Cn=7EY=27 2003/09/25 10:19:33=7C external_acl_cache_add: Adding =27192.168.1.11 domain=5C=5Cn=7EY=27 =3D -1 2003/09/25 10:19:33=7C externalAclHandleReply: reply=3D=22ERR=22 2003/09/25 10:19:33=7C external_acl_cache_add: Adding =27192.168.1.11 domain=5C=5Cn=7EY=27 =3D 0 2003/09/25 10:19:33=7C aclMatchExternal: groupcheck =3D 0 The file ip_user_check uses contains a line 192.168.1.11 domain=5C=5Cn=F6 and it is called with this line external_acl_type groupcheck %SRC %LOGIN /usr/sbin/ip_user_check -f /etc/squid/proxyuser.conf So can squid handle usernames with umlauts at all and if so, how do those names get encoded (or is this done by the browser?). Is there a difference between the encoding regarding helpers and redirectors? I would really appreciate any help or suggestion. Jan=20 |