While trying to investigate Bug 2936 it seems the auth refcounting state in trunk is somewhat borked.
The state of ntlm auth is considerably worse in trunk than 3.1. - Fails if external acls is used (any, not just with grace=.. as in 3.1) - Fails with refcount error on second NTLM handshake. Regards Henrik
