[Catalyst] Re: Announcement - New Authen/Authz plugins
Kiefer, Sascha
sk at intertivity.com
Wed Nov 9 21:54:29 CET 2005
Update:
The wild thing is handling a POST.
IE and the rest of the world are doing it differently.
But usally it is like that:
C sends POST + DATA
S sends NTLM
C sends POST + Token (usally no DATA, but Firefox does it when talking to
localhost :) )
S sends NTLM + Challenge
C sends POST + Response + DATA
So, if DATA is send, the server has to eat the data before responding or it
will end up in a mess.
--esskar
> -----Original Message-----
> From: catalyst-bounces at lists.rawmode.org
>
> Yes, NTLM is 3 done in 3 steps.
> As long as the connection is open (the socket is not closed),
> access is granded. If the client connects using a different
> connection (a 2nd or 3rd in
> parallel) or the
> connection resets, the NTLM process has to start again.
>
> If you want me to implement it, let me know.
> I need it as soon as possible! ;p
>
> --esskar
>
More information about the Catalyst
mailing list