Re: Squid-2.5.STABLE5 planned

Hi Robert, Henrik,

At 23.41 04/02/2004, Robert Collins wrote:

>On Thu, 2004-02-05 at 01:45, Henrik Nordstrom wrote:
>
> > The patch to fix the challenge and helper maintenance rips out the
> > "deferred" support layer in the stateful helpers. It was too complex to
> > look into what things went wrong there and with the use somewhat dubious
> > in terms of stability I see no reason to keep this.
>
>It was only ever needed for challenge reuse. I haven't looked at the
>patch you've done yet - have you eliminated the challenge reuse option
>too? (You need to). The reason for the deferring was to ensure that the
>helper didn't change the challenge unexpectedly : the early helpers
>didn't have enough protocol control to choose their own challenge. With
>Samba3 thats fixed. However, the only reason for reuse was to avoid
>saturating the old compatability mode interface to the PDC with
>expensive calls, which invariable dropped the link to the helper. Thus -
>get rid of reuse and it will be a lot simpler.
>
> > Robert: If you want to keep the "deferrer" stateful helper support in
> > Squid-3 then you may want to look into the interactions with NTLM helpers
> > as there was very bad interactions between the two in Squid-2.5. If not
> > lets rip it out in favor of implementing the overlapped requests
> > management. Implementing overlapped requests for stateful helpers is
> > significantly with the deferred layer ripped out.
>
> ^easier^ ?
>
>Yes, rip it out. We can't quite eliminate stateful helpers completely,
>until we can get a challenge from helper 1 and submit it to helper 2.
>But we can certainly (with Samba3 & Guido's helper) have multiple
>parallel challenges in use.

Currently I'm out of office. I will merge in the nt-2_5 branch the latest
NTLM changes Saturday and after I will start to testing immediately to see
if the Windows helper is now happy.

FYI: For the use of NTLM NEGOTIATE with Samba 3, the ntlm_auth from the
incoming Samba 3.0.2 release is needed.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l.
Via Gorizia, 69 10136 - Torino - ITALY
Tel. : +39.011.3249426 Fax. : +39.011.3293665
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Thu Feb 05 2004 - 09:03:27 MST