Re: Bug Report: proxy_auth -i case-insensitive matching broken in Squid 6.x
Alex Rousskov <[email protected]> Thu, 5 Mar 2026 09:40:27 -0500
| Newsgroups | gmane.comp.web.squid.general |
|---|---|
| Message-ID | <[email protected]> |
On 2026-03-04 17:44, Andre Bolinhas wrote: > The |proxy_auth -i| ACL (case-insensitive user matching) is broken in > Squid 6.x. Yes, there are several bugs/problems there. See a long comment above Acl::Option class declaration for how things are supposed to work. If you can volunteer to work on a fix, please post a pull request as discussed at https://wiki.squid-cache.org/MergeProcedure#pull-request In that pull request, instead of Option A and Option B, please do this: 1. Split ACLUserData::userDataNames into two sets: caseSensitiveNames and caseInsensitiveNames. Add tokens to the right set, depending on the current CaseInsensitive_ value. Search/print both sets as needed. Remove flags.case_insensitive. 2. Ignore any '-i' and '+i' tokens in ACLUserData::parse(), with a level-1 warning, instead of adding them to a set as if they were user names. 3. Check other ACLs that use lineOptions() for similar bugs. Thank you, Alex. P.S. I am sorry that our Bugzilla is still down, preventing you from using it to report this bug. We can continue to discuss this on GitHub.