[squid-users] The issue NTLM_AUTH with --require-membership-of

[Amos Jeffries]

On 21/02/19 9:35 pm, WANG TOM wrote:
> ----------------------------------------------------------------------------------------------
> And I have tested run ntlm_auth directly, it looks successfully.
> "ntlm_auth --require-membership-of='IBM\Domain Users'
> --username=Administrators --password=123456
> NT_STATUS_OK: The operation completed successfully. (0x0)"
> ----------------------------------------------------------------------------------------------
> I have no idea what I have missed or made mistake, could someone can help.
> 

Very likely that whitespace in the parameter string. Squid does not
support double-quote encoding of most parameters.

That means the helper will be passed two different environment
arguments.  One being "--require-membership-of='IBM\Domain".
The second being "Users'"

IIRC you can probably %-encode that (as "IBM\Domain%20Users").


If not that then you are going to have to debug what the helper is doing.


NP: This helper is provided by Samba, it is not part of Squid. So
questions about its abilities and encodings supported are a question for
their help channels. Someone here _might_ know, but do not count on that.


Amos