------------------------------------------------------------ revno: 13008 revision-id: squid3@treenet.co.nz-20131013133249-xtpts1gpydh1o4ia parent: squid3@treenet.co.nz-20131007123502-tsimddegpiswfai4 author: Elmar Vonlanthen committer: Amos Jeffries branch nick: 3.4 timestamp: Sun 2013-10-13 07:32:49 -0600 message: ntlm_fake_auth: pass DOMAIN data to Squid in original case Lower-casing the domain field can cause base ACL match results if the ACL is checking for case-sensitive or upper-case domain label. The helper should be emitting the standard UPPER case domain and many administrators will be expecting taht when they write ACLs. ------------------------------------------------------------ # Bazaar merge directive format 2 (Bazaar 0.90) # revision_id: squid3@treenet.co.nz-20131013133249-xtpts1gpydh1o4ia # target_branch: http://bzr.squid-cache.org/bzr/squid3/3.4 # testament_sha1: db972dcb58c958c31edd5a5db8063a35eef9cc12 # timestamp: 2013-10-13 13:35:16 +0000 # source_branch: http://bzr.squid-cache.org/bzr/squid3/3.4 # base_revision_id: squid3@treenet.co.nz-20131007123502-\ # tsimddegpiswfai4 # # Begin patch === modified file 'helpers/ntlm_auth/fake/ntlm_fake_auth.cc' --- helpers/ntlm_auth/fake/ntlm_fake_auth.cc 2012-11-15 09:00:29 +0000 +++ helpers/ntlm_auth/fake/ntlm_fake_auth.cc 2013-10-13 13:32:49 +0000 @@ -224,7 +224,6 @@ } else if (ntlm_validate_packet(packet, NTLM_AUTHENTICATE) == NTLM_ERR_NONE) { if (ntlm_unpack_auth((ntlm_authenticate *)packet, user, domain, decodedLen) == NTLM_ERR_NONE) { lc(user); - lc(domain); if (strip_domain_enabled) { SEND2("AF %s", user); } else { @@ -232,7 +231,6 @@ } } else { lc(user); - lc(domain); SEND4("NA invalid credentials, user=%s%s%s", domain, (*domain?"\\":""), user); } } else {