Is the mod_ntlm_winbind already apache 2.XX ready ??
or is it still written for the 1.3.XX version ?

Collen

Andrew Bartlett wrote:
On Mon, 2005-10-03 at 14:34 -0600, Todd Garrison wrote:
Hello,

I have setup mod_ntlm_winbind

Firstly, I presume this is the version from lorikeet SVN?

to provide authentication for an Apache
1.3.33 webserver running on Fedora Core 3. The authentication works,
but I have run into a problem when using Internet Explorer.

It seems that the problem might be with Internet Explorer itself, but
here is what I think is happening - the browser will not submit any
forms with a POST method on a website protected with NTLM Auth.

Everything seems to work fine when using Firefox/Mozilla, but IE6 has
a problem. Attached is the text extracted from a packet capture using
both browsers:

You can see that IE6 sends content-length: 0 and includes the NTLM
hash again, whereas Firefox does not.

Is this a bug in mod_ntlm_winbind, IE6, or just a configuration error?

It looks like MSIE is avoiding resubmitting the POST twice for the
multiple round trips of the NTLM exchange.   Firefox is probably still
sitting on an existing connection.

So, I think the issue might be that apache is not handling the NTLM
authentication request to the module, but we would need to see more
server-side logs and a real (uncensored, unfortunately) packet capture.

A small group of developers trying to take mod_ntlm_winbind further are
gathering, I think we need to setup a public webpage and some contact
details...

Andrew Bartlett



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to