[users@httpd] Mod_proxy and authentication

[Jérôme Tytgat <je...@asterion.fr>]

Re hello

I reverse proxy a authentication to a IIS server.

On the web page there's just a loading of a JAVA application.

I'm facing several situation :

* If I use BASIC authentication through the proxy :
- In firefox I get TWO authentication (one for the web page, one for the JAVA application)
- Same behaviour for Internet Explorer

* If I use WINDOWS authentication through the proxy :
- In Firefox I get ONE authentication (for the web page, the credentials are correctly
used for the JAVA application)
- IE fail with a 401 error

* If I use WINDOWS authentication directly :
- In Firefox I get ONE authentication (for the web page, the credentials are correctly
used for the JAVA application)
- IE works as Firefox do.

I've made some sniffing and noted that Firefox try TWO NTML type (ntmlssp and another
one I don't remember), but IE not.

Have you any clues ?

Thanks.

Jerome

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Mod_proxy and authentication

[Jérôme Tytgat <je...@asterion.fr>]

TWO NTML = TWO NTLM...

sorry folks :)

I wonder if it's possible to have only ONE sign on.

I don't know if mod_auth can help.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org