Escape/Unescape of helper input/output question

["Markus Moeller" <huaraz@xxxxxxxxxxxxxxxx>]

Hi Amos,

 Which helper has to do which rfc1738_(un)escape  ?    I am running the 
negotiate wrapper with NTLM and Kerberos.  When I authenticate with NTLM I 
see the following in the log

2013/12/23 17:45:48| negotiate_wrapper: received type 3 NTLM token
2013/12/23 17:45:48| negotiate_wrapper: Return 'AF = WIN2003R2\mm
'

But my external helper does not get the \.   Does the wrapper need to escape 
the return value ( I would have thought the wrapper just forwards waht is 
gets from the real auth helper) ?

kerberos_ldap_group.cc(329): pid=16122 :2013/12/23 17:45:58| 
kerberos_ldap_group: MM: Got User: WIN2003R2mm
kerberos_ldap_group.cc(331): pid=16122 :2013/12/23 17:45:58| 
kerberos_ldap_group: MM: Got unescaped User: WIN2003R2mm

I added my debug around line 330 of 
helpers/external_acl/kerberos_ldap_group/kerberos_ldap_group.cc

       user = strtok(buf, " \n");
       if (!user) {
           debug((char *) "%s| %s: INFO: No Username given\n", LogTime(), 
PROGRAM);
           SEND_ERR("Invalid request. No Username");
           continue;
       }
debug((char *) "%s| %s: MM: Got User: %s\n", LogTime(), PROGRAM, user);
       rfc1738_unescape(user);
debug((char *) "%s| %s: MM: Got unescaped User: %s\n", LogTime(), PROGRAM, 
user);


This is with

2013/12/23 17:45:29 kid1| Starting Squid Cache version 3.4.1-BZR for 
x86_64-suse-linux-gnu...


Thank you
Markus