[Samba] mod_ntlm_winbind on Apache vs. IE6, no POST method

[Collen Blijenberg]

Is the mod_ntlm_winbind already apache 2.XX ready ??
or is it still written for the 1.3.XX version ?

Collen

Andrew Bartlett wrote:
> On Mon, 2005-10-03 at 14:34 -0600, Todd Garrison wrote:
>> Hello,
>>
>> I have setup mod_ntlm_winbind 
> 
> Firstly, I presume this is the version from lorikeet SVN?
> 
>> to provide authentication for an Apache
>> 1.3.33 webserver running on Fedora Core 3. The authentication works,
>> but I have run into a problem when using Internet Explorer.
>>
>> It seems that the problem might be with Internet Explorer itself, but
>> here is what I think is happening - the browser will not submit any
>> forms with a POST method on a website protected with NTLM Auth.
>>
>> Everything seems to work fine when using Firefox/Mozilla, but IE6 has
>> a problem. Attached is the text extracted from a packet capture using
>> both browsers:
> 
>> You can see that IE6 sends content-length: 0 and includes the NTLM
>> hash again, whereas Firefox does not.
>>
>> Is this a bug in mod_ntlm_winbind, IE6, or just a configuration error?
> 
> It looks like MSIE is avoiding resubmitting the POST twice for the
> multiple round trips of the NTLM exchange.   Firefox is probably still
> sitting on an existing connection.
> 
> So, I think the issue might be that apache is not handling the NTLM
> authentication request to the module, but we would need to see more
> server-side logs and a real (uncensored, unfortunately) packet capture.
> 
> A small group of developers trying to take mod_ntlm_winbind further are
> gathering, I think we need to setup a public webpage and some contact
> details...
> 
> Andrew Bartlett
> 
>