Re: [squid-users] Question about authenticateNegotiateHandleReply

From: Markus Moeller <huaraz@dont-contact.us>
Date: Fri, 11 May 2007 20:09:12 +0100

I think I am very close to get my helper program to work. At least I have on
setup where it works fine and one where I get the below
messages about "User not fully authenticated". Can someone explain the order
of the authenticate calls and what means "now at '1'" '2'.. , etc. ?

Thank you
Markus

BTW Is anybody interested having a simple kerberos only authenticate helper
which works with IE7, Firefox and MIT or Heimdal Kerberos ?

2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'(nil)'.
2007/05/11 19:59:02| authenticateValidateUser: Auth_user_request was NULL!
2007/05/11 19:59:02| authenticateAuthenticate: broken auth or no proxy_auth
header. Requesting auth header.
2007/05/11 19:59:02| authenticateFixHeader: headertype:35 authuser:(nil)
2007/05/11 19:59:02| authenticateNegotiateFixErrorHeader: Sending type:35
header: 'Negotiate'
2007/05/11 19:59:02| authenticateAuthenticate: header Negotiate
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.
2007/05/11 19:59:02| authenticateAuthenticate: This is a new checklist test
on FD:22
2007/05/11 19:59:02| authenticateAuthenticate: no connection authentication
type
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20' now at '1'.
2007/05/11 19:59:02| authenticateDecodeAuth: header = 'Negotiate
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'
2007/05/11 19:59:02| authenticateAuthUserLock auth_user '0x80425cf0'.
2007/05/11 19:59:02| authenticateAuthUserLock auth_user '0x80425cf0' now at
'1'.
2007/05/11 19:59:02| authenticateDecodeNegotiateAuth: Negotiate
authentication
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| User not fully authenticated.
2007/05/11 19:59:02| authenticateNegotiateAuthenticateUser: auth state
negotiate none. Negotiate
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
2007/05/11 19:59:02| authenticateNegotiateAuthenticateUser: Locking
auth_user from the connection.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20' now at '2'.
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| User not fully authenticated.
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateStart: auth_user_request '0x8049fc20'
2007/05/11 19:59:02| authenticateNegotiateStart: auth state '1'
2007/05/11 19:59:02| authenticateNegotiateStart: state '1'
2007/05/11 19:59:02| authenticateNegotiateStart:
'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'
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20' now at '3'.
2007/05/11 19:59:02| authenticateNegotiateHandleReply: Helper: '0x8028c928'
{AF AAAAAAAAAAAAAAAAAADtAO0AAAAAAA== markus@SUSE.HOME}
2007/05/11 19:59:02| authenticateNegotiateHandleReply: Successfully
validated user via Negotiate. Username 'markus@SUSE.HOME'
2007/05/11 19:59:02| authenticateNegotiateReleaseServer: releasing server
'0x8028c928'
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthenticate: header Negotiate
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.
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| User not fully authenticated.
2007/05/11 19:59:02| authenticateNegotiateAuthenticateUser: need to
challenge client 'AAAAAAAAAAAAAAAAAADtAO0AAAAAAA=='!
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| User not fully authenticated.
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| User not fully authenticated.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20' now at '4'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user_request
'0x8049fc20' now at '3'.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestLock auth_user request
'0x8049fc20' now at '4'.
2007/05/11 19:59:02| authenticateFixHeader: headertype:35
authuser:0x8049fc20
2007/05/11 19:59:02| authenticateValidateUser: Validating Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateValidateUser: Validated Auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| User not fully authenticated.
2007/05/11 19:59:02| authenticateNegotiateFixErrorHeader: Sending type:35
header: 'Negotiate AAAAAAAAAAAAAAAAAADtAO0AAAAAAA=='
2007/05/11 19:59:02| authenticateFixHeader: headertype:35
authuser:0x8049fc20
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user_request
'0x8049fc20' now at '3'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user_request
'0x8049fc20' now at '2'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user_request
'0x8049fc20' now at '1'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user request
'0x8049fc20'.
2007/05/11 19:59:02| authenticateAuthUserRequestUnlock auth_user_request
'0x8049fc20' now at '0'.
2007/05/11 19:59:02| authenticateAuthUserRequestFree: freeing request
0x8049fc20
2007/05/11 19:59:02| authenticateAuthUserUnlock auth_user '0x80425cf0'.
2007/05/11 19:59:02| authenticateAuthUserUnlock auth_user '0x80425cf0' now
at '0'.
2007/05/11 19:59:02| authenticateFreeProxyAuthUser: Freeing auth_user
'0x80425cf0' with refcount '0'.
2007/05/11 19:59:02| authenticateNegotiateFreeUser: Clearing Negotiate
scheme data

"Henrik Nordstrom" <henrik@henriknordstrom.net> wrote in message
news:1178576725.17724.6.camel@henriknordstrom.net...
Received on Fri May 11 2007 - 13:09:49 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Jun 01 2007 - 12:00:08 MDT