From 8bf707bb827e84b2301d3330ce56dccde7da4d36 Mon Sep 17 00:00:00 2001
From: Amos Jeffries
The helper binary bundled with Squid under the name ntlm_auth has been renamed to accurately reflect +its real behavior and to prevent confusion with the more useful Samba helper using the same name.
+Despite being used for NTLM, the helper does not in fact provide true NTLM function. What it does provide is +SMB LanManager authentication through the NTLM interface without the need for a domain controller. Thus the +new name is ntlm_smb_lm_auth.
+WARNING: due to the name clash with Samba helper, admin should be careful to only update their squid.conf if the +squid bundled binary is used and needed. If the Samba helper is in use, the squid.conf should not be altered.
+The previous default behavour (rotate per-request) of this setting causes failover clashes with IPv6 built-in mechanisms. It has thus been turned off by default. Making the 'best choice' IP continue in use for any hostname until it encounters a connection failure and failover drops to the next known IP. @@ -1319,6 +1328,10 @@ This options requires a linux kernel 2.6.25 or later for embeded netfilter TPROX
Deprecated. Remains only to support old TPROXY version 2.2 installations.
+Helper previously built by SMB is now built by smb_lm. +It also has a new squid.conf name for usage, see auth_param above for details.
+Better support for Linux using the external DNS helper. The helper will now compile and work with dns_nameservers on more variants of Linux than previously.
diff --git a/doc/release-notes/release-3.1.sgml b/doc/release-notes/release-3.1.sgml index 560e9361af..652412b2b6 100644 --- a/doc/release-notes/release-3.1.sgml +++ b/doc/release-notes/release-3.1.sgml @@ -776,6 +776,15 @@ NOCOMMENT_START acl aclname peername myPeer ... # cache_peer ... name=myPeer +The helper binary bundled with Squid under the name ntlm_auth has been renamed to accurately reflect + its real behavior and to prevent confusion with the more useful Samba helper using the same name. +
Despite being used for NTLM, the helper does not in fact provide true NTLM function. What it does provide is + SMB LanManager authentication through the NTLM interface without the need for a domain controller. Thus the + new name is ntlm_smb_lm_auth. +
WARNING: due to the name clash with Samba helper, admin should be careful to only update their squid.conf if the
+ squid bundled binary is used and needed. If the Samba helper is in use, the squid.conf should not be altered.
+
The previous default behavour (rotate per-request) of this setting causes failover clashes with IPv6 built-in mechanisms.
It has thus been turned off by default. Making the 'best choice' IP continue in use for any hostname until it encounters a connection failure and failover drops to the next known IP.
@@ -1086,6 +1095,10 @@ This section gives an account of those changes in three categories:
Deprecated. Remains only to support old TPROXY version 2.2 installations.
+
Helper previously built by SMB is now built by smb_lm.
+ It also has a new squid.conf name for usage, see auth_param above for details.
+
Better support for Linux using the external DNS helper. The helper will now compile and work with dns_nameservers on more variants of Linux than previously. -- 2.47.3