Hello,

I am also interested in this patch, as we encounter lots of problems with 
some POSTed forms over here. Sometimes we get several "Inernal Server 
Errors" until the form gets processed correctly. It usually is enough to 
click on 'Reload' to get the form processed. This behaviour occurs only 
using IE 5.5SP2 (Exact version: 5.50.4807.2300). Mozilla is working fine, 
obviusly without using NTLM...

Gerald, was the logfile I sent you helpful?


Thanks,
Frank


----- Weitergeleitet von Frank Zimper/BUH/CH/SB_PLC am 27.11.2002 14:17 
-----


"Gerald Richter" <[EMAIL PROTECTED]>
11.11.2002 09:33

 
        An:     "Gerald Combs" <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
        Kopie: 
        Thema:  Re: NTLM Authentication patch




> We recently installed AuthenNTLM where I work, and ran into the POST
> problems described in the thread at
>
>     http://marc.theaimsgroup.com/?t=103177365400006&r=1&w=2
>
> After looking through a couple of network traces I think I've found the
> problem.  It appears that after IE authenticates via NTLM, it sends type 
1
> messages for subsequent requests during a keepalive session.  This is 
fine
> and dandy unless you're sending a POST request - when it sends the type 
1
> message, it also sends a "Content-length: 0", and doesn't append the 
POST
> data.  Since the browser has successfully authenticated itself earlier 
in
> the keepalive session, AuthenNTLM validates the request and a POST with 
no
> accompanying POST data gets passed to the server.
>

Yes, I have seen the same from traces people have send me, but could not
reproduce it here (my IE always sends the POST data)

I have modified your patch to handle both situations and to have the old
behaviour in case of GET requests (for performance reasons)

I send you the updated version per private mail, please give it a try if 
it
still works correct for you and let me know. I will release it to CPAN as
soon as somebody who had had the problem reports me that the new version
solves it.

Gerald


-------------------------------------------------------------
Gerald Richter    ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting

Post:       Tulpenstrasse 5         D-55276 Dienheim b. Mainz
E-Mail:     [EMAIL PROTECTED]         Voice:    +49 6133 925131
WWW:        http://www.ecos.de      Fax:      +49 6133 925152
-------------------------------------------------------------






Reply via email to