[Samba] mod_ntlm_winbind on Apache vs. IE6, no POST method

[Andrew Bartlett]

On Mon, 2005-10-03 at 14:34 -0600, Todd Garrison wrote:
> Hello,
> 
> I have setup mod_ntlm_winbind 

Firstly, I presume this is the version from lorikeet SVN?

> to provide authentication for an Apache
> 1.3.33 webserver running on Fedora Core 3. The authentication works,
> but I have run into a problem when using Internet Explorer.
> 
> It seems that the problem might be with Internet Explorer itself, but
> here is what I think is happening - the browser will not submit any
> forms with a POST method on a website protected with NTLM Auth.
> 
> Everything seems to work fine when using Firefox/Mozilla, but IE6 has
> a problem. Attached is the text extracted from a packet capture using
> both browsers:

> You can see that IE6 sends content-length: 0 and includes the NTLM
> hash again, whereas Firefox does not.
> 
> Is this a bug in mod_ntlm_winbind, IE6, or just a configuration error?

It looks like MSIE is avoiding resubmitting the POST twice for the
multiple round trips of the NTLM exchange.   Firefox is probably still
sitting on an existing connection.

So, I think the issue might be that apache is not handling the NTLM
authentication request to the module, but we would need to see more
server-side logs and a real (uncensored, unfortunately) packet capture.

A small group of developers trying to take mod_ntlm_winbind further are
gathering, I think we need to setup a public webpage and some contact
details...

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20051004/bfba75cc/attachment.bin