Re: [Samba] mod_ntlm_winbind on Apache vs. IE6, no POST method

--===============0513567212==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="=-dtGSuj9/gnr+jZ06Q2gx"


--=-dtGSuj9/gnr+jZ06Q2gx
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Mon, 2005-10-03 at 14:34 -0600, Todd Garrison wrote:
> Hello,
>=20
> I have setup mod_ntlm_winbind=20

Firstly, I presume this is the version from lorikeet SVN?

> to provide authentication for an Apache
> 1.3.33 webserver running on Fedora Core 3. The authentication works,
> but I have run into a problem when using Internet Explorer.
>=20
> It seems that the problem might be with Internet Explorer itself, but
> here is what I think is happening - the browser will not submit any
> forms with a POST method on a website protected with NTLM Auth.
>=20
> Everything seems to work fine when using Firefox/Mozilla, but IE6 has
> a problem. Attached is the text extracted from a packet capture using
> both browsers:

> You can see that IE6 sends content-length: 0 and includes the NTLM
> hash again, whereas Firefox does not.
>=20
> Is this a bug in mod_ntlm_winbind, IE6, or just a configuration error?

It looks like MSIE is avoiding resubmitting the POST twice for the
multiple round trips of the NTLM exchange. Firefox is probably still
sitting on an existing connection.

So, I think the issue might be that apache is not handling the NTLM
authentication request to the module, but we would need to see more
server-side logs and a real (uncensored, unfortunately) packet capture.

A small group of developers trying to take mod_ntlm_winbind further are
gathering, I think we need to setup a public webpage and some contact
details...

Andrew Bartlett

--=20
Andrew Bartlett http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc. http://suse.de
Authentication Developer, Samba Team http://samba.org
Student Network Administrator, Hawker College http://hawkerc.net

--=-dtGSuj9/gnr+jZ06Q2gx
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDQaDqz4A8Wyi0NrsRAvk/AJ4wBJFKvpTorWsvRdkcVB2sS86CqwCdGRpR
yhglb1V1ydDYYA1U6PB8vos=
=IRne
-----END PGP SIGNATURE-----

--=-dtGSuj9/gnr+jZ06Q2gx--


--===============0513567212==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--===============0513567212==--