> From: Sergey Gotvansky [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 12, 2006 4:28 PM > > Hi, > > I suppose that the problem of huge transfers is using of > per-request authentication instead of per-connection. The > widely used mod_auth_sspi uses per-request auth that leads to > resending of 3-phase SSPI auth information. I tried to jump > from per-request to per-connection by patching mod_auth_sspi > module and found it working ok.
Per connection authentification has some security problems by design (not only NTLM): http://www.gknw.de/phpbb/viewtopic.php?t=31 Malte [snip] _______________________________________________ neon mailing list [email protected] http://mailman.webdav.org/mailman/listinfo/neon
