Hi,
If my memory is corrected in Microsft documentation NTLM can't be proxy
unless you configure NTLM in a very specific way. Even Microsoft proxy
did not support NTLM.
Good luck !
Guillaume
Morris, Nat a écrit :
Hi all,
We've been using HAProxy internally for a few years now, we've got a pair of
Ubuntu boxes (VRRP between them) infront of a selection of identical IIS
boxes,
hosting our business apps, CRM, HR, intranet etc.
I've added a new site onto the web servers, this is the first one that uses
NTLM to authenticate users without them logging in. Using Internet Explorer
if I connect direct to a server it works, but when I going via HAProxy no
page
is returned.
I ran Ethereal on one of the web servers to see what was happening and saw
the
client and server negotiate via HAProxy, after negotiation was complete IE
sent
"Connection: Keep-Alive\r\n".
When I turned keep alive off in IIS and tried connecting direct it failed
too,
am I right in presuming as HAProxy doesn't support keep alive NTLM won't
work?
Thanks,
Nat.
--
Guillaume Bourque, B.Sc.,
consultant, infrastructures technologiques
Logisoft Technologies inc.
514 576-7638
http://www.logisoftech.com
