DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=39680>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=39680 Summary: mod_proxy opens connections that disturb NTLM Product: Apache httpd-2 Version: 2.2.0 Platform: Sun OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: mod_proxy AssignedTo: [email protected] ReportedBy: [EMAIL PROTECTED] The following configuration works fine with Apache 2.0 : - client : IE + Windows XP - Reverse Proxy : Apache 2.0 running on solaris 9 - IIS (Windows) server with NTLM authentication enabled When a protected page (via ACL on the IIS server) is accessed by the client, thanks to Windows integrated authentication, the page is displayed with any user intervention (user identification prompt). Since Apache 2.2, user receives an identification prompt and, although the username/password he enters are correct, he is not authorized. Looking at the network traffic, it seems that the NTLM authentication process is made of 3 requests. Between the client and the RP, they use a single connection (same port). Between the RP and the IIS server, they use a single connection if the RP is running on Apache 2.0; however, with Apache 2.2, the 3 requests use 3 different connections (3 ports), which make NTLM fail. This problem is reproductible at will. I tried the "ProxyPass keepalive=On" directive but it didn't help. Is there a workaround? -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
