On Sun, 16 Feb 2014, Daniel Stenberg wrote:

Right, the problem is there to make sure that a NTLM-auth connection with different credentials aren't re-used. NTLM with its connection-oriented authentication breaks the traditional HTTP paradigms and before this change there was a risk that libcurl would wrongly re-use a NTLM connection that was done with different credentials!

I suspect we introduced a regression here with that fix. I'll dig into this.

Thanks for pointing this out!

I could repeat this problem with a curl test case so I wrote up two, and then I made a fix to curl:

  https://github.com/bagder/curl/commit/d765099813f5

--

 / daniel.haxx.se
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to