]> git.ipfire.org Git - thirdparty/squid.git/commitdiff
Stop emitting (Proxy-)Authentication-Info for Negotiate
authorAmos Jeffries <squid3@treenet.co.nz>
Sat, 31 Jan 2015 14:10:25 +0000 (06:10 -0800)
committerAmos Jeffries <squid3@treenet.co.nz>
Sat, 31 Jan 2015 14:10:25 +0000 (06:10 -0800)
This header is not defined for use by RFC 4559, and there seem to
be no clients actually using it.

The syntax Squid was using to emit the details was also clashing
with the syntax defined for use in Digest which is becoming the
standardized ABNF syntax for the header in general.

src/auth/negotiate/UserRequest.cc
src/auth/negotiate/UserRequest.h

index 4ac86dcb866b2d87d1c617b761c1de047e2df613..baf605d60db1d976e392d7a7eb727f76419662d0 100644 (file)
@@ -390,23 +390,3 @@ Auth::Negotiate::UserRequest::HandleReply(void *data, const Helper::Reply &reply
     r->handler(r->data);
     delete r;
 }
-
-void
-Auth::Negotiate::UserRequest::addAuthenticationInfoHeader(HttpReply * rep, int accel)
-{
-    http_hdr_type type;
-
-    if (!server_blob)
-        return;
-
-    /* don't add to authentication error pages */
-    if ((!accel && rep->sline.status() == Http::scProxyAuthenticationRequired)
-            || (accel && rep->sline.status() == Http::scUnauthorized))
-        return;
-
-    type = accel ? HDR_AUTHENTICATION_INFO : HDR_PROXY_AUTHENTICATION_INFO;
-    httpHeaderPutStrf(&rep->header, type, "Negotiate %s", server_blob);
-
-    safe_free(server_blob);
-}
-
index 73c9744dc2a72188733b093c8b3f622b2c65b545..12baeb5fd8168bf1f96ac2a6fff412d93e98ddec 100644 (file)
@@ -35,8 +35,6 @@ public:
     virtual void startHelperLookup(HttpRequest *request, AccessLogEntry::Pointer &al, AUTHCB *, void *);
     virtual const char *credentialsStr();
 
-    virtual void addAuthenticationInfoHeader(HttpReply * rep, int accel);
-
     virtual const char * connLastHeader();
 
     /* we need to store the helper server between requests */