Re: Patch for squid-2 to better detect spnego support for squid_kerb_auth

From: Henrik Nordstrom <henrik_at_henriknordstrom.net>
Date: Mon, 03 Aug 2009 21:57:23 +0200

mån 2009-08-03 klockan 13:05 +0100 skrev Markus Moeller:

> As long as squid_kerb_auth has a bigger buffer then defined in
> auth_negotiate.c(c) it should be fine. The theortical maximum is 64k if I
> remember right for data in an uathentication header or ?

Current 3.0 limit is 64KB for whole header including request line I
think.. but it's subject to change.

What some of the other helpers do when receiving a too large request is
to respond with an error (i.e. BH) and make sure to eat up the rest of
the request until a newline is seen.

Regards
Henrik
Received on Mon Aug 03 2009 - 20:29:21 MDT

This archive was generated by hypermail 2.2.0 : Tue Aug 04 2009 - 12:00:06 MDT