hi,

I have just subscribed to this mailing list,
so I hope I'm doing everything right...

my problem:

I'm running a reverse proxy with apache 1.3.x
and mod_proxy on debian. For the authentication
libapache-authensmb is used, so there's a
connection to the domain controller present and
working.
Everything is fine, but for each request sent
by the browser, the module needs to authenticate
on the nt-domain. As I was told, the domain
controller can't handle all the requests, so it's
compareble with an DOS-attack. Because of this,
the browser opens multiple times the popup for
filling in the authentication data (although it's
not necessary).
To prevent this, I tried the following ideas I
have found in the web:

a) exclude images from being authenticated
b) AuthenCache
c) AuthzCache

I've been searching for days in the web for a
perfect solution, but all I've tried doesn't
work as wanted. a) combined b) or c) makes it
a little bit better, but still every second
click opens the popup again.

Now I'm trying to use PAM in hope it can do
better then the rest. But it's not running
properly at the moment...

I think this problem is already OT, but I
couldn't find the needed threads in the
archives. It would be great, if somebody
could give me some further information to
fix this problem.


regards
mathias


-- 
Reporting bugs: http://perl.apache.org/bugs/
Mail list info: http://perl.apache.org/maillist/modperl.html

Reply via email to