Package: squid
Severity: important
Tags: patch
Hi!
I have seen this on a stable (etch) system while trying to check the users
against a windows domain, the config used to work on sarge, but was broken
after upgrading to etch.
What I have on my squid config among other stuff is:
external_acl_type domain_groups concurrency=5 %LOGIN
/usr/lib/squid/wbinfo_group.pl
However after adding a -d that wbinfo_group.pl line I got this info on my
logs:
Got 0 USERNAME GROUP from squid
Could not convert sid S-1-whatever-sid to gid
User: -0-
Group: -USERNAME-
SID: -S-1-whatever-sid-
GID: --
Could not get groups for user 0
Sending OK to squid
What I could see here is that squid was sending a "0" before sending the
username, I don't know if this is supposed to be like that and we should fix
wbinfo_group.pl or squid is broken and it is sending something it shouldn't,
in any case, for a quick fix I patched wbinfo_group.pl like this:
--- wbinfo_group.pl 2006-05-22 22:42:06.000000000 +0200
+++ wbinfo_group_patched.pl 2007-05-21 15:06:14.000000000 +0200
@@ -85,7 +85,7 @@
while (<STDIN>) {
chop;
&debug ("Got $_ from squid");
- ($user, @groups) = split(/\s+/);
+ ($ans, $user, @groups) = split(/\s+/);
$user =~ s/%([0-9a-fA-F][0-9a-fA-F])/pack("c",hex($1))/eg;
# test for each group squid send in it's request
foreach $group (@groups) {
so that the "0" was skipped and that the user groups get where they were
supposed to, and right now it is working ok.
I don't know if this problem can affect other helpers or not, if you need
any other info on the problem just let me know.
Regards!
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
