[squid-users] Bug Report: proxy_auth -i case-insensitive matching broken in Squid 6.x

[Alex Rousskov]

On 2026-03-06 12:32, Andre Bolinhas wrote:

> I can't create the pull request, returns the message "Pull request 
> creation failed. Validation failed: must be a collaborator"

Googling suggests that you might be trying to modify the official git 
repository directly. Instead, fork the official git repository, make 
your changes in your forked repository, and then submit a pull request 
to merge your changes into the official repository. This process is 
typical for open source projects.

The following wiki page has related git hints:
https://wiki.squid-cache.org/DeveloperResources/GitHints

HTH,

Alex.


> On 2026-03-05 2:40 p.m., Alex Rousskov wrote:
>> On 2026-03-04 17:44, Andre Bolinhas wrote:
>>
>>> The |proxy_auth -i| ACL (case-insensitive user matching) is broken in 
>>> Squid 6.x.
>>
>> Yes, there are several bugs/problems there. See a long comment above 
>> Acl::Option class declaration for how things are supposed to work.
>>
>> If you can volunteer to work on a fix, please post a pull request as 
>> discussed at https://wiki.squid-cache.org/MergeProcedure#pull-request
>>
>> In that pull request, instead of Option A and Option B, please do this:
>>
>> 1. Split ACLUserData::userDataNames into two sets: caseSensitiveNames 
>> and caseInsensitiveNames. Add tokens to the right set, depending on 
>> the current CaseInsensitive_ value. Search/print both sets as needed. 
>> Remove flags.case_insensitive.
>>
>> 2. Ignore any '-i' and '+i' tokens in ACLUserData::parse(), with a 
>> level-1 warning, instead of adding them to a set as if they were user 
>> names.
>>
>> 3. Check other ACLs that use lineOptions() for similar bugs.
>>
>>
>> Thank you,
>>
>> Alex.
>> P.S. I am sorry that our Bugzilla is still down, preventing you from 
>> using it to report this bug. We can continue to discuss this on GitHub.
>>