[squid-users] garbled characters sent by squid to wbinfo_group.pl

From: Ian Clancy <clancyian@dont-contact.us>
Date: Tue, 10 Jan 2006 23:08:29 +0000

Hi,
I'm using squid2.5 stable5 (ntlm_assert.patch) with samba 3.14a on RH9.
I want to use the wbinfo_group.pl plugin to authenicate users who are
member of a windows group called ProxyUsers. Samba, wbinfo etc .. all
appear to work fine. When i run wbinfo from the shell it also works
fine. However, when i use wbinfo_group.pl in squid i get the following
errors in my cache.log when trying to access the web as Administrator
(using tac)..

  -g, --domain-groups Lists all domain groups
  -u, --domain-users Lists all domain users
Usage: [OPTION...]
Invalid option
GID: -5008-
SID: -S-1-5-21-193554404-1789558652-91453608-1593 Domain Group (2)-
Group: -ProxyUsers-
User: -^@^@^@^@nistrator-
User = ^@^@^@^@nistrator, Group = ProxyUsers
Got ^@^@^@^@nistrator ProxyUsers from squid
Sending ERR to squid
GID: -5008-
SID: -S-1-5-21-193554404-1789558652-91453608-1593 Domain Group (2)-
Group: -ProxyUsers-
User: -À%nistrator-
User = À%nistrator, Group = ProxyUsers
Malformed UTF-8 character (unexpected non-continuation byte 0x25,
immediately af
ter start byte 0xc0) in pattern match (m//) at
/usr/local/squid/libexec/wbinfo_g
roup.pl line 56, <STDIN> line 6.
Got Ànistrator ProxyUsers from squid

The first 4 character of the administrator user appear to have been
corrupted. Other users are similar ?

Here are the relevant auth lines from my squid.conf

# authentication configuration - ntlm
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
auth_param ntlm max_challenge_reuses 5
auth_param ntlm max_challenge_lifetime 5 minutes

# authentication configuration - basic
# Used by browsers other than than the above
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

# external authentication application
external_acl_type nt_group ttl=0 concurrency=5 %LOGIN
/usr/local/squid/libexec/w
binfo_group.pl

# Authenticate Users who are members of the ProxyUsers group
acl InternetUsers external nt_group ProxyUsers

Any Idea's,
thanks
Ian
Received on Tue Jan 10 2006 - 16:08:48 MST

This archive was generated by hypermail pre-2.1.9 : Wed Feb 01 2006 - 12:00:01 MST