[Samba] mod_ntlm_winbind on Apache vs. IE6, no POST method
collen at zeist.hermanjordan.nl
Mon Oct 10 09:42:10 GMT 2005
Is the mod_ntlm_winbind already apache 2.XX ready ??
or is it still written for the 1.3.XX version ?
Andrew Bartlett wrote:
> On Mon, 2005-10-03 at 14:34 -0600, Todd Garrison wrote:
>> I have setup mod_ntlm_winbind
> Firstly, I presume this is the version from lorikeet SVN?
>> to provide authentication for an Apache
>> 1.3.33 webserver running on Fedora Core 3. The authentication works,
>> but I have run into a problem when using Internet Explorer.
>> It seems that the problem might be with Internet Explorer itself, but
>> here is what I think is happening - the browser will not submit any
>> forms with a POST method on a website protected with NTLM Auth.
>> Everything seems to work fine when using Firefox/Mozilla, but IE6 has
>> a problem. Attached is the text extracted from a packet capture using
>> both browsers:
>> You can see that IE6 sends content-length: 0 and includes the NTLM
>> hash again, whereas Firefox does not.
>> Is this a bug in mod_ntlm_winbind, IE6, or just a configuration error?
> It looks like MSIE is avoiding resubmitting the POST twice for the
> multiple round trips of the NTLM exchange. Firefox is probably still
> sitting on an existing connection.
> So, I think the issue might be that apache is not handling the NTLM
> authentication request to the module, but we would need to see more
> server-side logs and a real (uncensored, unfortunately) packet capture.
> A small group of developers trying to take mod_ntlm_winbind further are
> gathering, I think we need to setup a public webpage and some contact
> Andrew Bartlett
More information about the samba