[squid-users] Squid Auth Question

[OTR Comm]

Hello,

I have read in the Squid code someplace, but can't remember where now,
but what does Squid expect back from the authentication program?  I use
ncsa_auth, and I see in ncsa_auth.c:

<snip>
        u = (user_data *)hash_lookup(hash, user);
        if (u == NULL) {
            printf("ERR\n");
        } else if (strcmp(u->passwd, (char *) crypt(passwd, u->passwd))
== 0) {
            printf("OK\n");
        } else if (strcmp(u->passwd, (char *) crypt_md5(passwd,
u->passwd)) == 0) {
            printf("OK\n");
        } else {
            printf("ERR\n");
        }
<snip>

So if Squid 'sees' an 'OK' from the auth program, it passes the users
and if Squid 'sees' an 'ERR' it calls the auth program again.  Is this
correct?

Thanks,

Murrah Boswell