Re: Info about forward port of patches to 3.0

On Thu, 2005-03-10 at 14:53 +0100, Henrik Nordstrom wrote:
> On Thu, 10 Mar 2005, Serassio Guido wrote:
>
> > Now there are some 2.5 patches (1256, 1257, 1259) affecting legacy helpers,
> > should they forward ported to 3.0 ?
>
> The "native" winbind helpers should be removed from squid-3.0 as these are
> for Samba-2.2.X which is no longer actively maintained by the Samba team.
> Having the old winbind helpers in the Squid distribution is only confusing
> to the users. Better to document the recommendation to use the Samba
> provided helper for authentication.

Agreed. The Squid winbind helpers only cause confusion these days.

> The rest should be forward ported, at least for now. While I am not very
> fond of the quality of the SMB helpers (or actually the old libraries they
> all build upon and the hacky NTLMSSP implementation used in the ntlm
> helpers) they still provide a valueable alternative to winbind.

If the issue is independence from winbindd (for a vital testing point of
separation), then I would note that I added a --password option to
ntlm_auth a little while back. This option causes ntlm_auth not to
contact winbindd, but to instead simply use that fixed password.

Naturally, this is useless in production, but it can nicely remove
winbindd from the problem space, during debugging.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net