[squid-users] Umlauts in usernames (repost)

This is a discussion on [squid-users] Umlauts in usernames (repost) within the Squid Users forums, part of the Web Server and Related Forums category; Hi, I am reposting this because I am still stuck and did not find a workaround so far. The basic ...


Go Back   Usenet Forums > Web Server and Related Forums > Squid Users

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 10-16-2003
Jan Heyelmann
 
Posts: n/a
Default [squid-users] Umlauts in usernames (repost)

Hi,
I am reposting this because I am still stuck and did not find a
workaround so far. The basic question is how does squid handle
non-english characters in usernames it gets using ntlm when it passes
them on to external helpers and redirectors. From previous posts on this
list I already know that it converts them to url-encoded characters when
it writes acces.log. But to even puzzle me more in the example posted
below the character =F6 is written as %99 in access.log, the charts I
found so far on the net assume that =F6 should be converted to %f6. Am I
using a wrong chart here?=20
But since logfiles are treated differently as external helpers and
redirectors how are these characters passed on to those instances and is
there a difference between the two?
Sorry about posting this again, but I could really use some help here.
Thanks=20
Jan

This is what I posted on 09/25:
*****
Hi,
I am running squid-2.5STABLE4 with the patch regarding spaces in login
names in an actice directory environment. Squid gets usernames using
NTLM and checks this using external helper ip_user_check. This works
fine, unfortunatly there are some usernames with umlauts in them and
those checks fail. When looking in access.log and cache.log I see
different username entries.
As an example we used a user with the name =22n=F6=22:
access.log:
1064478528.646 14 192.168.1.11 TCP_DENIED/403 1716 GET
http://www.microsoft.com/isapi/redir.dll? domain=5Cn%99 NONE/-
text/html

cache.log:
2003/09/25 10:19:33=7C aclMatchExternal: groupcheck user not
authenticated (-1)
2003/09/25 10:19:33=7C aclMatchExternal: groupcheck(=22192.168.1.11
domain=5C=5Cn=7EY=22) =3D lookup needed
2003/09/25 10:19:33=7C externalAclLookup: lookup in =27groupcheck=27 for
=27192.168.1.11 domain=5C=5Cn=7EY=27
2003/09/25 10:19:33=7C external_acl_cache_add: Adding =27192.168.1.11
domain=5C=5Cn=7EY=27 =3D -1
2003/09/25 10:19:33=7C externalAclHandleReply: reply=3D=22ERR=22
2003/09/25 10:19:33=7C external_acl_cache_add: Adding =27192.168.1.11
domain=5C=5Cn=7EY=27 =3D 0
2003/09/25 10:19:33=7C aclMatchExternal: groupcheck =3D 0

The file ip_user_check uses contains a line
192.168.1.11 domain=5C=5Cn=F6
and it is called with this line
external_acl_type groupcheck %SRC %LOGIN /usr/sbin/ip_user_check -f
/etc/squid/proxyuser.conf

So can squid handle usernames with umlauts at all and if so, how do
those names get encoded (or is this done by the browser?). Is there a
difference between the encoding regarding helpers and redirectors?
I would really appreciate any help or suggestion.

Jan=20

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:36 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0