lp://qastaging/~yadi/squid/auth-ng

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

13793. By Amos Jeffries on 2014-12-26

De-duplicate basic Negotiate, Kerberos and NTLM UserRequest objects

Make Kerberos and NTLM scheme UserRequest objects inherit from Negotiate
scheme's object and include all data members, and basic state accessors.
But not the core scheme operational methods.

Build the libnegotiate library whenever Kerberos or NTLM are built, but
only build Negotiate-specific code when Negotiate is allowed.

13792. By Amos Jeffries on 2014-12-25

Shuffle auth initializatio into Config class

13791. By Amos Jeffries on 2014-12-24

Merge duplicate Auth::User objects from NTLM, Negotiate, Kerberos schemes

13790. By Amos Jeffries on 2014-12-24

Docs: Add Kerberos mention to auth_param

13789. By Amos Jeffries on 2014-12-24

Clone Kerberos authentication scheme from Negotiate

It turns out there is a scheme called Kerberos. Older Squid-2 used to
accept it and respond with Negotiate. That was wrong and we remoed it
but the scheme was being used by some, it should have just been
responding with 'Kerberos' schemes name.

We now make it an accepted scheme and also advertise it as available.

The scheme itself behaves exactly as Negotiate does, but using the
scheme label 'Kerberos' and GSSAPI tokens instead of NTLMSSP tokens.

13788. By Amos Jeffries on 2014-12-23

Typo in auth/User.cc

13787. By Amos Jeffries on 2014-12-23

Replace Auth::User::auth_type fixed member with typeCode() accessor

... based on Auth::User::config member.

When Auth::User is not associated with an Auth::Config the type code is
presented as Auth::AUTH_UNKNOWN. All other users have a type code for
the scheme they are associated with. Use the Config member pointer to
access this type generically instead of managing type code in the
credentials themselves.

13786. By Amos Jeffries on 2014-12-23

Fix missing stub definitions

13785. By Amos Jeffries on 2014-12-22

Drop special state AUTH_BROKEN

Merge it into AUTH_UNKNOWN as a sub-case where credentials are
Auth::Falied instead of Auth::Unknown. Since the broken cases we have
credentials but they are invalid for the apparent scheme.

13784. By Amos Jeffries on 2014-12-22

Split Auth::Config::Find()

... into two config object lookup functions:

FindByLabel() takes the HTTP header scheme string (also from config file)

FindByType() takes the Squid internal Auth::Type code for auth schemes