RE: NTLM module

[Harnish, Joe]

Title: RE: NTLM module





True, it will be awesome if it can be fixed.  But to get Adam going he can implement some sort of Sessions (which he already has), use $r->headers_out->set(Connection => 'close'); (to force a new connection), and a whole lot of duct tape.

I think I may tweak that patch I sent you to be able to add in any type of session state maintaining modules (Cookies, Apache::Session, etc).  I am looking forward to your feedback.  

Do you know if this is still an issue with Apache 2.0?  I was planning on trying it to see what happens but haven't gotten a box setup with Apache 2.0 and mod_perl yet.  

Joseph  


-Original Message-
From: Gerald Richter [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 11, 2002 12:29 AM
To: Harnish, Joe; 'Kaye-Smith Adam'
Cc: [EMAIL PROTECTED]
Subject: Re: NTLM module



RE: NTLM module>I am not sure if you have resolved this issue.


The POST issuse is still on my todo list


>  I have had the same issue with our system where post data would
dissappear.
> I ended up creating a Cookie add on >  module for Apache::AuthenNTLM that
> would write a cookie once authenticated and use that before
re-authenticating them.
>  This allowed me to lower the keepalive timeout setting and has almost
completely
> eliminated this loss of data.


Since it works with IIS, there should be an offical way to do it. I have to
investigate it.


> I created it for a semi friendly environment so the security is somewhat
lacking.


That's the reason why I didn't included your patch so far in AuthenNTLM, but
I have to go over it more in detail and will send you an feedback then.


Gerald


-
Gerald Richter    ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting


Post:   Tulpenstrasse 5 D-55276 Dienheim b. Mainz
E-Mail: [EMAIL PROTECTED] Voice:    +49 6133 925131
WWW:    http://www.ecos.de  Fax:  +49 6133 925152
-

RE: NTLM module

[Harnish, Joe]

Title: RE: NTLM module





Adam,


I am not sure if you have resolved this issue.  I have had the same issue with our system where post data would dissappear.  I ended up creating a Cookie add on module for Apache::AuthenNTLM that would write a cookie once authenticated and use that before re-authenticating them.  This allowed me to lower the keepalive timeout setting and has almost completely eliminated this loss of data.  I created it for a semi friendly environment so the security is somewhat lacking.  If you would like to take a look at it I can send you the code.  I have not tried the latest version of AuthenNTLM yet.  But it should still work.

Joseph Harnish




-Original Message-
From: Kaye-Smith Adam [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 02, 2002 9:48 PM
To: Gerald Richter
Cc: [EMAIL PROTECTED]
Subject: RE: NTLM module



Hello Gerald,



I believe I am on top of my issues with NTLM. Everything seems to work
fine when httpd is in single user mode as the 1 process has an
understanding of what has been authenticated before hand & whethor it
needs to re-authenticate subsequent requests from the same browser/user.
ie with the request for one page there may be many items that need to be
sent  by the server (images, html,etc).



When we go to several httpd process, it appears that the response to one
request from a browser which may be made up of many files that need to
be sent back, these requests can be handled by any of the http processes
(which is ok by itself ) but when this occurs, a password request(and
perhaps an SMB query) is made for each of the httpd process. The httpd
processes appear to operate independently of each other, unless the
browser sends all its requests down the 1 tcp channel.


I have started to add to the code to log authentications to disc, so
that each httpd process can also reference this disc file to verify if
it has authenticated a user beforehand from another process.


I hope I am going about this the right way..



My more immediate problem is that I am currently losing the contents of
posted variables in a request packet whenever I use the AuthenNTLM
module, but when I choose to use the standard mod_auth,  my posted
variables get through everytime. This problem occured with the
AuthenNTLM code without any alterations. This problem is also
intermittant. 4 out of 5 time the problem will occur. By inserting the
line at the top of handler sub ' $printme = $r -> content ' I can see
the posted variables get though to the perl module .



Any ideas



Thanks


Adam











The information in this e-mail together with any attachments is
intended only for the person or entity to which it is addressed
and may contain confidential and/or privileged material.


Any form of review, disclosure, modification, distribution
and/or publication of this e-mail message is prohibited.  


If you have received this message in error, you are asked to
inform the sender as quickly as possible and delete this message
and any copies of this message from your computer and/or your
computer system network.  

RE: Internet Explorer sending nothing in subsequent posts

[Harnish, Joe]

Title: Internet Explorer sending nothing in subsequent posts



I am 
running IE 5.50.4807.2300 on Win2k, all defaults.  

  -Original Message-From: Slava Bizyayev 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, June 12, 2002 2:06 
  PMTo: Harnish, Joe; [EMAIL PROTECTED]Subject: Re: 
  Internet Explorer sending nothing in subsequent posts
  Please, could you give us details about your 
  MSIE: version, platform, User-Agent mask?
  Thanks,
  Slava
   
  
- Original Message - 
From: 
Harnish, Joe 
To: '[EMAIL PROTECTED]' 
Sent: Wednesday, June 12, 2002 9:28 
AM
Subject: Internet Explorer sending 
nothing in subsequent posts

When Internet Explorer hits a mod_perl page that uses the 
post method in the form it will run the first time but all the subsequent 
posts will not get anything sent.
Does anyone know why this happens?  Is there a 
workaround for mod_perl or in the Web browser? 
Thanks 
Joe 

Internet Explorer sending nothing in subsequent posts

[Harnish, Joe]

Title: Internet Explorer sending nothing in subsequent posts





When Internet Explorer hits a mod_perl page that uses the post method in the form it will run the first time but all the subsequent posts will not get anything sent.

Does anyone know why this happens?  Is there a workaround for mod_perl or in the Web browser?


Thanks


Joe

RE: AuthenNTLM, IE, KeepAlives, Post?

[Harnish, Joe]

Title: RE: AuthenNTLM, IE, KeepAlives, Post?





Ged,


Will this help even when I am not up loading files?  


Here is the test.pl script I am using.


#!/usr/bin/perl
require CGI;
use strict;


my $q = new CGI;
print $q->header;
print <





    
    


EODUMP


print $q->param('foo');
print "";


this works fine with a get method but a post doesn't.  It runs the first time but the second it repeats the original request.

Thanks


Joe


-Original Message-
From: Ged Haywood [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 11, 2002 1:18 PM
To: Harnish, Joe
Cc: '[EMAIL PROTECTED]'
Subject: RE: AuthenNTLM, IE, KeepAlives, Post?



Hi there,


On Tue, 11 Jun 2002, Harnish, Joe wrote:


> Does anyone know of issues with mod_perl and post?


Here's one.


73,
Ged.



From [EMAIL PROTECTED] Tue Jun 11 18:16:11 2002
Date: Wed, 20 Mar 2002 19:20:29 + (GMT)
From: Ged Haywood <[EMAIL PROTECTED]>
To: Stas Bekman <[EMAIL PROTECTED]>
Subject: Re: mod_perl does not see multipart POSTs --> SOLVED


Hi Stas,


On Thu, 21 Mar 2002, Stas Bekman wrote:


> Vuillemot, Ward W wrote:
> > Using the POST2GET snippet was interferring.


I kept trying to tell him that...


> Ward, Ernest, can you please send the me the required changes


If you look in CGI.pm you'll see that the file upload code won't get
called if the request is GET, so POST2GET guarantees that it will fail
for CGI.pm.  Here's a snippet from the modified CGI.pm that I sent to
him and which it seems he never bothered to try out.


--
  # Process multipart postings, but only if the initializer is
  # not defined.


# debugging... --GWH--
my $tempEnvContentType = $ENV{'CONTENT_TYPE'};
print STDERR "CGI.pm: \$ENV{'CONTENT_TYPE'}=[$tempEnvContentType]\n";
print STDERR "CGI.pm: \$meth=[$meth]\n";
  if ($meth eq 'POST'
      && defined($ENV{'CONTENT_TYPE'})
      && $ENV{'CONTENT_TYPE'}=~m|^multipart/form-data|
      && !defined($initializer)
      ) {
      my($boundary) = $ENV{'CONTENT_TYPE'} =~ /boundary=\"?([^\";,]+)\"?/;
      $self->read_multipart($boundary,$content_length);
      last METHOD;
  } 
--


73,
Ged.

RE: AuthenNTLM, IE, KeepAlives, Post?

[Harnish, Joe]

Title: RE: AuthenNTLM, IE, KeepAlives, Post?





Well, I have narrowed it down to the "POST" method on my forms.  If I replace them with "get"s it works 100%.  


I am kind of wondering if this has to do with mod_perl and post because I have had this issue before when using mod_perl and post without AuthenNTLM.

Does anyone know of issues with mod_perl and post?  I went through the docs and changed my use CGI; to require CGI; like it says.  Is there anything else I should try?

Thanks


Joe

RE: AuthenNTLM, IE, KeepAlives

[Harnish, Joe]

Title: RE: AuthenNTLM, IE, KeepAlives





I changed to Apache::Registry and have been monkeying around with it.  I am going to look more into converting my CGI stuff to mod_perl.   I also changed my use CGI; to require CGI; like the documentation says but now it looks like it is sending the same params even though they change.  So I don't know.

Joe



-Original Message-
From: Gerald Richter [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 10, 2002 2:34 PM
To: Harnish, Joe; [EMAIL PROTECTED]
Subject: Re: AuthenNTLM, IE, KeepAlives



RE: AuthenNTLM, IE, KeepAlives


>I am using Apache::PerlRun instead of Apache::Registry.  Could this be an
issue?


I am not using PerlRun, but maybe. Can try without it? Maybe just a small
test script.


Gerald



-
Gerald Richter    ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting
Post:   Tulpenstrasse 5 D-55276 Dienheim b. Mainz
E-Mail: [EMAIL PROTECTED] Voice:    +49 6133 925131
WWW:    http://www.ecos.de  Fax:  +49 6133 925152
-

RE: AuthenNTLM, IE, KeepAlives

[Harnish, Joe]

Title: RE: AuthenNTLM, IE, KeepAlives





I am using Apache::PerlRun instead of Apache::Registry.  Could this be an issue?  


-Original Message-
From: Harnish, Joe 
Sent: Monday, June 10, 2002 8:34 AM
To: 'Gerald Richter - ecos gmbh'; Harnish, Joe;
'[EMAIL PROTECTED]'
Subject: RE: AuthenNTLM, IE, KeepAlives



I am using the CGI module(latest from CPAN).  


-Original Message-
From: Gerald Richter - ecos gmbh [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 10, 2002 3:44 AM
To: Harnish, Joe; [EMAIL PROTECTED]
Subject: Re: AuthenNTLM, IE, KeepAlives



> 
> The issue that I am having is that when I have KeepAlive turned on my
> scripts won't get the params from the URI.  But this only happens in
> Internet Explorer.  Opera works fine.  
> 


This normaly should not happen.


How do you retrieve the parameters ?


Gerald



-
Gerald Richter    ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting


Post:   Tulpenstrasse 5 D-55276 Dienheim b. Mainz
E-Mail: [EMAIL PROTECTED] Voice:    +49 6133 925131
WWW:    http://www.ecos.de  Fax:  +49 6133 925152
-

RE: AuthenNTLM, IE, KeepAlives

[Harnish, Joe]

Title: RE: AuthenNTLM, IE, KeepAlives





I am using the CGI module(latest from CPAN).  


-Original Message-
From: Gerald Richter - ecos gmbh [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 10, 2002 3:44 AM
To: Harnish, Joe; [EMAIL PROTECTED]
Subject: Re: AuthenNTLM, IE, KeepAlives



> 
> The issue that I am having is that when I have KeepAlive turned on my
> scripts won't get the params from the URI.  But this only happens in
> Internet Explorer.  Opera works fine.  
> 


This normaly should not happen.


How do you retrieve the parameters ?


Gerald



-
Gerald Richter    ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting


Post:   Tulpenstrasse 5 D-55276 Dienheim b. Mainz
E-Mail: [EMAIL PROTECTED] Voice:    +49 6133 925131
WWW:    http://www.ecos.de  Fax:  +49 6133 925152
-

AuthenNTLM, IE, KeepAlives

[Harnish, Joe]

Title: AuthenNTLM, IE, KeepAlives





I am running an Apache server using AuthenNTLM for authentication.  This is because we are migrating an old NT site to Linux.  

The issue that I am having is that when I have KeepAlive turned on my scripts won't get the params from the URI.  But this only happens in Internet Explorer.  Opera works fine.  

I have played around with KeepAliveTimeout, MaxKeepAliveRequests trying to get it to work.  Which puts me into a catch-22.  If I put low numbers in them, the scripts will work fine.  But the pop-up login window keeps poping up.  And if I put in higher number the pop-up windows go away but the scripts only work the first time.

Thanks for any help


Joe

Apache Oracle and Perl

[Harnish, Joe]

Title: Apache Oracle and Perl





When I start getting this error, I can shutdown the httpd server, and the
machine and it will still give this error.  If I wait a while(sometimes hours, sometimes days) it will come
back.  Sometimes it is a few hours.  Sometimes it is days.  I have installed
Apache::DBI in hopes of a possible fix.  
 
The error I get is:
Software error:


Can't load
'/usr/lib/perl5/site_perl/5.6.0/i386-linux/auto/DBD/Oracle/Oracle.so' for
module DBD::Oracle: libclntsh.so.8.0: cannot open shared object file: No
such file or directory at /usr/lib/perl5/5.6.0/i386-linux/DynaLoader.pm line
200. at (eval 13) line 3 


For help, please send mail to the webmaster (root@localhost
), giving this error message and the time and date of
the error. 



__


This is on a Dell running RedHat Linux 7.  The file is there and it readable
by everyone (along with the path to get there).  Is there a way I can
compile it statically?  Because 95% of  my scripts  access the Oracle
Database.  I have put the so files in their proper places.  


I really need to solve this to prove that my choice of using Apache/Perl for our
development is actually worth it.  Has anyone ever seen this problem?  


Thanks


 


Joe