On Sun, Feb 16, 2014 at 02:33:06PM +0100, Daniel Stenberg wrote:

> On Sun, 16 Feb 2014, Daniel Stenberg wrote:
> 
> >Right, the problem is there to make sure that a NTLM-auth
> >connection with different credentials aren't re-used. NTLM with its
> >connection-oriented authentication breaks the traditional HTTP
> >paradigms and before this change there was a risk that libcurl
> >would wrongly re-use a NTLM connection that was done with different
> >credentials!
> >
> >I suspect we introduced a regression here with that fix. I'll dig into this.
> 
> Thanks for pointing this out!
> 
> I could repeat this problem with a curl test case so I wrote up two,
> and then I made a fix to curl:
> 
>   https://github.com/bagder/curl/commit/d765099813f5

Thanks for the quick turnaround. I've confirmed that your patch fixes
both my limited test case and Git itself (when using just the curl_easy
interface).

-Peff
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to