You are viewing a plain text version of this content. The canonical link for it is here.
Posted to modperl@perl.apache.org by "Hess, Fraser" <fh...@cmglending.com> on 2004/12/28 21:05:13 UTC
Problems with Apache::AuthenNTLM on Apache 2
Hi,
I was hoping that you could help me. I running Apache 2.0.52/mod_perl
1.99.19/Apache::AuthenNTLM 2.08 on Fedora Core 3 and I'm running into a
problem. In the browser both IE and Firefox NTLM pass-thru
authentication seems to fail and I get prompted for my username and
password, but the realm that I set in the AuthName is missing. It says
'Enter username and password for "" at http...' Anything I enter here
still fails to authenicate, correct or not. However, if I press the
Cancel button, I get prompted for my password again and this time the
realm shows up in the dialog box in the quotes, I enter the correct
username and password and up comes my web site.
My config is as follows:
<Location />
PerlAuthenHandler Apache::AuthenNTLM
AuthType ntlm,basic
AuthName test
Require valid-user
PerlAddVar ntdomain "cmg-corp co-dc1"
PerlSetVar defaultdomain cmg-corp
PerlSetVar ntlmdebug 1
</Location>
Here is the log. 9599 is the transaction when I first call the web page
in the browser. 9600 is when I try on log on when the realm is blank.
9601 is from when I successfully authenicate, using basic it seems.
[Tue Dec 28 09:26:43 2004] [notice] Apache/2.0.52 (Unix) mod_ssl/2.0.52
OpenSSL/0.9.7a mod_perl/1.99_19 Perl/v5.8.5 configured -- resuming
normal operations
[9599] AuthenNTLM: Config Domain = cmg-corp pdc = co-dc1 bdc =
[9599] AuthenNTLM: Config Default Domain = cmg-corp
[9599] AuthenNTLM: Config Fallback Domain =
[9599] AuthenNTLM: Config AuthType = ntlm,basic AuthName = test
[9599] AuthenNTLM: Config Auth NTLM = 1 Auth Basic = 1
[9599] AuthenNTLM: Config NTLMAuthoritative = on BasicAuthoritative =
on
[9599] AuthenNTLM: Config Semaphore key = 23754 timeout = 2
[9599] AuthenNTLM: Config SplitDomainPrefix =
[9599] AuthenNTLM: Authorization Header <not given>
[Tue Dec 28 09:26:54 2004] [error] Bad/Missing NTLM/Basic Authorization
Header for /
[9600] AuthenNTLM: Config Domain = cmg-corp pdc = co-dc1 bdc =
[9600] AuthenNTLM: Config Default Domain = cmg-corp
[9600] AuthenNTLM: Config Fallback Domain =
[9600] AuthenNTLM: Config AuthType = ntlm,basic AuthName = test
[9600] AuthenNTLM: Config Auth NTLM = 1 Auth Basic = 1
[9600] AuthenNTLM: Config NTLMAuthoritative = on BasicAuthoritative =
on
[9600] AuthenNTLM: Config Semaphore key = 23754 timeout = 2
[9600] AuthenNTLM: Config SplitDomainPrefix =
[9600] AuthenNTLM: Authorization Header NTLM
[9600] AuthenNTLM: protocol=NTLMSSP, type=1,
flags1=7(NEGOTIATE_UNICODE,NEGOTIATE_OEM,REQUEST_TARGET),
flags2=130(NEGOTIATE_ALWAYS_SIGN,NEGOTIATE_NTLM), domain length=0,
domain offset=0, host length=0, host offset=0, host=, domain=
[9600] AuthenNTLM: Connect to pdc = co-dc1 bdc = domain = cmg-corp
[9600] AuthenNTLM: enter lock
[9600] AuthenNTLM: verify handle
[9600] AuthenNTLM: charencoding = 1
[9600] AuthenNTLM: flags2 = 130
[9600] AuthenNTLM: Send header: NTLM ...
[9600] AuthenNTLM: Start NTLM Authen handler pid = 9600, connection =
163322120 conn_http_hdr = keep-alive main = cuser = remote_ip =
10.0.0.101 remote_port = remote_host = <> version = 2.08
[9600] AuthenNTLM: leave lock
[9600] AuthenNTLM: Setup new object
[9600] AuthenNTLM: Config Domain = cmg-corp pdc = co-dc1 bdc =
[9600] AuthenNTLM: Config Default Domain = cmg-corp
[9600] AuthenNTLM: Config Fallback Domain =
[9600] AuthenNTLM: Config AuthType = ntlm,basic AuthName = test
[9600] AuthenNTLM: Config Auth NTLM = 1 Auth Basic = 1
[9600] AuthenNTLM: Config NTLMAuthoritative = on BasicAuthoritative =
on
[9600] AuthenNTLM: Config Semaphore key = 23754 timeout = 2
[9600] AuthenNTLM: Config SplitDomainPrefix =
[9600] AuthenNTLM: Authorization Header NTLM
[9600] AuthenNTLM: protocol=NTLMSSP, type=3, user=f^@h^@e^@s^@s
<ma...@s> ^@, host=c^@o^@-^@h^@r^@-^@w^@e^@b^@0^@2
<ma...@2> ^@, domain=,
msg_len=0[9600] handler type == 3
[Tue Dec 28 09:27:38 2004] [error] SMB Server connection not open in
state 3 for /
[9601] AuthenNTLM: Config Domain = cmg-corp pdc = co-dc1 bdc =
[9601] AuthenNTLM: Config Default Domain = cmg-corp
[9601] AuthenNTLM: Config Fallback Domain =
[9601] AuthenNTLM: Config AuthType = ntlm,basic AuthName = test
[9601] AuthenNTLM: Config Auth NTLM = 1 Auth Basic = 1
[9601] AuthenNTLM: Config NTLMAuthoritative = on BasicAuthoritative =
on
[9601] AuthenNTLM: Config Semaphore key = 23754 timeout = 2
[9601] AuthenNTLM: Config SplitDomainPrefix =
[9601] AuthenNTLM: Authorization Header Basic
[9601] AuthenNTLM: basic auth username = cmg-corp\fhess
[9601] AuthenNTLM: Connect to pdc = co-dc1 bdc = domain = cmg-corp
[9601] AuthenNTLM: enter lock
[9601] AuthenNTLM: verify handle fhess
[9601] AuthenNTLM: Verify user fhess via smb server
[9601] AuthenNTLM: leave lock
[9601] AuthenNTLM: OK pid = 9601, connection = 163322120 cuser =
cmg-corp\fhess ip = 10.0.0.101
[9601] AuthenNTLM: Start NTLM Authen handler pid = 9601, connection =
163322120 conn_http_hdr = keep-alive main =
Apache::RequestRec=SCALAR(0x9bbcb20) cuser = remote_ip = 10.0.0.101
remote_port = remote_host = <> version = 2.08
[9601] AuthenNTLM: Setup new object
[9601] AuthenNTLM: Config Domain = cmg-corp pdc = co-dc1 bdc =
[9601] AuthenNTLM: Config Default Domain = cmg-corp
[9601] AuthenNTLM: Config Fallback Domain =
[9601] AuthenNTLM: Config AuthType = ntlm,basic AuthName = test
[9601] AuthenNTLM: Config Auth NTLM = 1 Auth Basic = 1
[9601] AuthenNTLM: Config NTLMAuthoritative = on BasicAuthoritative =
on
[9601] AuthenNTLM: Config Semaphore key = 23754 timeout = 2
[9601] AuthenNTLM: Config SplitDomainPrefix =
[9601] AuthenNTLM: Authorization Header Basic
[9601] AuthenNTLM: basic auth username = cmg-corp\fhess
[9601] AuthenNTLM: Connect to pdc = co-dc1 bdc = domain = cmg-corp
[9601] AuthenNTLM: enter lock
[9601] AuthenNTLM: verify handle fhess
[9601] AuthenNTLM: Verify user fhess via smb server
[9601] AuthenNTLM: leave lock
[9601] AuthenNTLM: OK pid = 9601, connection = 163322120 cuser =
cmg-corp\fhess ip = 10.0.0.101
[9601] AuthenNTLM: Start NTLM Authen handler pid = 9601, connection =
163322120 conn_http_hdr = keep-alive main =
Apache::RequestRec=SCALAR(0x9bbcb20) cuser = remote_ip = 10.0.0.101
remote_port = remote_host = <> version = 2.08
Fraser Hess
Re: Problems with Apache::AuthenNTLM on Apache 2
Posted by Shannon Eric Peevey <sp...@erikin.com>.
Hess, Fraser wrote:
>
> Here is the log. 9599 is the transaction when I first call the web page
> in the browser. 9600 is when I try on log on when the realm is blank.
> 9601 is from when I successfully authenicate, using basic it seems.
>
> [9600] AuthenNTLM: protocol=NTLMSSP, type=3, user=f^@h^@e^@s^@s
> <ma...@s>^@, host=c^@o^@-^@h^@r^@-^@w^@e^@b^@0^@2
> <ma...@2>^@, domain=,
> msg_len=0[9600] handler type == 3
> [Tue Dec 28 09:27:38 2004] [error] SMB Server connection not open in
> state 3 for /
I saw this error myself, and believe that it is caused by the patch that
we applied on the last version of AuthenNTLM.
What SMB server are you authenticating against?
--
Shannon Eric Peevey
President - EriKin Corporation
speeves@erikin.com
(940) 391-6777
http://www.erikin.com
--
Report problems: http://perl.apache.org/bugs/
Mail list info: http://perl.apache.org/maillist/modperl.html
List etiquette: http://perl.apache.org/maillist/email-etiquette.html