Re: Using AD groups from negotiate_kerberos_auth in ssl-bumped connections.
Alex Rousskov <[email protected]> Tue, 24 Mar 2026 08:53:19 -0400
| Newsgroups | gmane.comp.web.squid.general |
|---|---|
| Message-ID | <[email protected]> |
T24gMjAyNi0wMy0yNCAwNzowNSwgQW5kcmV5IEsgd3JvdGU6Cj4gSSBjb25kdWN0ZWQgc2V2ZXJh bCB0ZXN0cyBhbmQgZm91bmQgdGhhdCB3aGVuIHRoZSBhdXRoZW50aWNhdGlvbiBoZWxwZXIgCj4g cmV0dXJucyBtdWx0aXBsZSBncm91cHMgaW4gdGhlICdjbHRfY29ubl90YWcnIGF0dHJpYnV0ZXMs IGFsbCBvZiB0aGVtIAo+IGFyZSBhdmFpbGFibGUgb25seSBkdXJpbmcgdGhlIGluaXRpYWwgQ09O TkVDVCB0cmFuc2FjdGlvbi4gSW4gc3Vic2VxdWVudCAKPiB0cmFuc2FjdGlvbnMsIG9ubHkgdGhl IGZpcnN0IGdyb3VwIHJlbWFpbnMgYXZhaWxhYmxlLgo+IAo+IERldGFpbHM6Cj4gSSdtIHRyYWNr aW5nICdjbHRfY29ubl90YWcnIHZpYcKgbG9nczoKPiAgwqAgwqBsb2dmb3JtYXQgbXktc3F1aWQg JXJtIGdyb3VwPSVub3Rle2dyb3VwfSAKPiBjbHRfY29ubl90YWc9JW5vdGV7Y2x0X2Nvbm5fdGFn fQo+IEV4YW1wbGUgb2YgdGhlIEJhc2ljQXV0aC1oZWxwZXI6Cj4gIMKgICMhL2Jpbi9iYXNoCj4g IMKgIHdoaWxlIHJlYWQgLXIgdXNlciBwYXNzOyBkbwo+ICDCoCDCoCBlY2hvICJPSyB1c2VyPXVz ZXIxIGdyb3VwPWdyb3VwMSBncm91cD1ncm91cDIgY2x0X2Nvbm5fdGFnPWdyb3VwMSAKPiBjbHRf Y29ubl90YWc9Z3JvdXAyIgo+ICDCoCBkb25lCj4gCj4gU2luZ2xlIGN1cmwgcmVxdWVzdCBsb2dz Ogo+ICDCoCBDT05ORUNUIGdyb3VwPWdyb3VwMSxncm91cDIgY2x0X2Nvbm5fdGFnPWdyb3VwMSxn cm91cDIKPiAgwqAgR0VUIGdyb3VwPS0gY2x0X2Nvbm5fdGFnPWdyb3VwMQo+IAo+IElzIHRoaXMg dGhlIGV4cGVjdGVkIGJlaGF2aW91cj8KCktpbmQgb2YuIEl0IGlzIGRpZmZpY3VsdCBmb3IgbWUg dG8gZ2l2ZSB5b3UgYSBjbGVhciAieWVzIiBvciAibm8iIGFuc3dlciAKYmVjYXVzZSBTcXVpZCBi ZWhhdmlvciBpbiB0aGlzIGFyZWEgaXMgcG9vcmx5IGRvY3VtZW50ZWQgYW5kIHNvbWUgCmltcGxl bWVudGF0aW9uIGJ1Z3MgcHJvYmFibHkgc3RpbGwgcmVtYWluIGFmdGVyIHNldmVyYWwgcm91bmRz IG9mIGZpeGVzLgoKSG93ZXZlciwgSSBjYW4gc3VnZ2VzdCB0aGUgZm9sbG93aW5nIGFkanVzdG1l bnRzIGFzIHRoZSBuZXh0IHN0ZXA6CgoxLiBBZGp1c3QgdGhlIGhlbHBlciB0byByZXR1cm4gYSBz aW5nbGUgY2x0X2Nvbm5fdGFnIGtleT12YWx1ZSBwYWlyOgoKICAgICBPSyB1c2VyPXVzZXIxIGdy b3VwPWdyb3VwMSBncm91cD1ncm91cDIgY2x0X2Nvbm5fdGFnPWdyb3VwMSxncm91cDIKCjIuIEFk anVzdCB5b3VyIG5vdGUgQUNMcyB0byBhZGQgIi1tIiBmbGFnIGFzIG5lZWRlZC4gU2VhcmNoIGZv ciAiYWNsIAphY2xuYW1lIG5vdGUiIGFuZCAiLW0iIGluIHNxdWlkLmNvbmYuZG9jdW1lbnRlZCBm b3IgbW9yZSBpbmZvcm1hdGlvbi4KCgpIVEgsCgpBbGV4LgoKCj4+ICAgICBPbiBNYXIgNCwgMjAy NiwgYXQgMjM6MjMsIEFtb3MgSmVmZnJpZXMgPHNxdWlkM0B0cmVlbmV0LmNvLm56Cj4+ICAgICA8 bWFpbHRvOnNxdWlkM0B0cmVlbmV0LmNvLm56Pj4gd3JvdGU6Cj4+Cj4+ICAgICBPbiAwNC8wMy8y MDI2IDE5OjMzLCBBbmRyZXkgSyB3cm90ZToKPj4+ICAgICBIZWxsbywgQW1vcywKPj4+ICAgICBU aGFua3MgZm9yIHRoZSBpbmZvcm1hdGlvbi4KPj4+ICAgICBDYW55b3UgYWxzb3RlbGxtZToKPj4+ ICAgICAxLiBJcyBpdCBwb3NzaWJsZSB0byB1c2UgYSBtYWNybyBpbiB0aGUgYW5ub3RhdGVfY2xp ZW50IEFDTCB0bwo+Pj4gICAgIGNvcHkgSFRUUCByZXF1ZXN0IG5vdGVzIHRvIGEgVENQIGNvbm5l Y3Rpb24/IFNvbWV0aGluZyBsaWtlOgo+Pj4gICAgIGFjbCBhbm5vdGF0ZV9ncm91cHMgYW5ub3Rh dGVfY2xpZW50IGdyb3Vwcz0le2dyb3VwfW5vdGUKPj4KPj4gICAgIFRoYXQgaXMgbm90IHN1cHBv cnRlZC4gV2hpY2ggaXMgd2hhdCBJIG1lYW50IGJ5IHRoZXNlIGhhdmluZyB0byBiZQo+PiAgICAg Y29uZmlndXJlZCBtYW51YWxseS4gWW91IG5lZWQgYW4gQUNMIHRvIG1hdGNoIHRoZSBncm91cCBu b3RlLCBhbmQKPj4gICAgIGFub3RoZXIgdG8gc2V0IHRoZSBuZXcgbm90ZSwgcmVwZWF0ZWQgZm9y IGVhY2ggZ3JvdXAgbmFtZSB5b3Ugd2FudAo+PiAgICAgdG8gbGluayBiZXR3ZWVuIHRoZSB0cmFu c2FjdGlvbnMuCj4+Cj4+Cj4+PiAgICAgMi4gSG93IGRvIHlvdSB0aGluayzCoHNob3VsZCB3ZSBw cm9jZXNzIHRoZSAiZ3JvdXAiIGF0dHJpYnV0ZSBhdAo+Pj4gICAgIHRoZSBjb25uZWN0aW9uIHN0 YXRlIGxldmVsIGFzIHdlIGRvIHdpdGggdGhlICJjbHRfY29ubl90YWciPyBJCj4+PiAgICAgdGhp bmsgdGhpcyBjYW4gYmUgZWFzaWx5IGltcGxlbWVudGVkIGluIHRoZSBVcGRhdGVSZXF1ZXN0Tm90 ZXMoKQo+Pj4gICAgIGZ1bmN0aW9uIChzcmMvIEh0dHBSZXF1ZXN0LmNjKSBieSBzaW1wbHkgY29w eWluZyBhbmQgcGFzdGluZyBhCj4+PiAgICAgZmV3IGxpbmVzIG9mIGNvZGU6Cj4+Cj4+ICAgICBU aGlzIGlzIG5vdCBncmVhdCBzaW5jZSBncm91cCBpcyBub3QgbGltaXRlZCB0byBOZWdvdGlhdGUg YW5kIE5UTE0KPj4gICAgIGF1dGhlbnRpY2F0aW9uIHR5cGVzLiBPdGhlciBhdXRoIHNjaGVtZXMg aGF2ZSBncm91cCBvbmx5IGJlaW5nCj4+ICAgICB2YWxpZCBvbiBvbmUgSFRUUCB0cmFuc2FjdGlv bi4KPj4KPj4KPj4gICAgIEkgd291bGQgc3VnZ2VzdCBoYXZpbmcgYSBuZXcgYWNjZXNzIGNvbnRy b2wgZGlyZWN0aXZlIHRoYXQgcGVybWl0cwo+PiAgICAgb3IgZGVuaWVzIGFubm90YXRpb25zIHRv IGJlIG1hcHBlZCB3aGVuIHRoZSBDT05ORUNUIGlzIGJ1bXBlZC4KPj4gICAgIFRoYXQgd291bGQg YWxsb3cgYW55IGV4aXN0aW5nIGFubm90YXRpb24gb2YgdGhlIENPTk5FQ1QKPj4gICAgIHRyYW5z YWN0aW9uIHRvIGJlIGFwcGxpZWQgYXMgYSBjb25uZWN0aW9uLWFubm90YXRpb24gZm9yIHRoZQo+ PiAgICAgYnVtcCdlZCByZXF1ZXN0Lgo+Pgo+PiAgICAgSFRICj4+ICAgICBBbW9zCj4+Cj4+ICAg ICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+PiAgICAg c3F1aWQtdXNlcnMgbWFpbGluZyBsaXN0Cj4+ICAgICBzcXVpZC11c2Vyc0BsaXN0cy5zcXVpZC1j YWNoZS5vcmcKPj4gICAgIDxtYWlsdG86c3F1aWQtdXNlcnNAbGlzdHMuc3F1aWQtY2FjaGUub3Jn Pgo+PiAgICAgaHR0cHM6Ly9saXN0cy5zcXVpZC1jYWNoZS5vcmcvbGlzdGluZm8vc3F1aWQtdXNl cnMKPj4gICAgIDxodHRwczovL2xpc3RzLnNxdWlkLWNhY2hlLm9yZy9saXN0aW5mby9zcXVpZC11 c2Vycz4KPiAKPiAgICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KPiAgICAgc3F1aWQtdXNlcnMgbWFpbGluZyBsaXN0Cj4gICAgIHNxdWlkLXVzZXJzQGxp c3RzLnNxdWlkLWNhY2hlLm9yZwo+ICAgICA8bWFpbHRvOnNxdWlkLXVzZXJzQGxpc3RzLnNxdWlk LWNhY2hlLm9yZz4KPiAgICAgaHR0cHM6Ly9saXN0cy5zcXVpZC1jYWNoZS5vcmcvbGlzdGluZm8v c3F1aWQtdXNlcnMKPiAgICAgPGh0dHBzOi8vbGlzdHMuc3F1aWQtY2FjaGUub3JnL2xpc3RpbmZv L3NxdWlkLXVzZXJzPgo+IAo+IAo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fCj4gc3F1aWQtdXNlcnMgbWFpbGluZyBsaXN0Cj4gc3F1aWQtdXNlcnNAbGlz dHMuc3F1aWQtY2FjaGUub3JnCj4gaHR0cHM6Ly9saXN0cy5zcXVpZC1jYWNoZS5vcmcvbGlzdGlu Zm8vc3F1aWQtdXNlcnMKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fCnNxdWlkLXVzZXJzIG1haWxpbmcgbGlzdApzcXVpZC11c2Vyc0BsaXN0cy5zcXVpZC1j YWNoZS5vcmcKaHR0cHM6Ly9saXN0cy5zcXVpZC1jYWNoZS5vcmcvbGlzdGluZm8vc3F1aWQtdXNl cnMK