Re: Join to discuss NTLM Authentication

Gary Price wrote:
>I was planning to go
> further and establish a guaranteed 1-1 connection between client
> and server connections, but it appears not to be necessary.

Henrik wrote:
>It is necessary for proper operation. Keeping the server and client
>connection detached allows for too many races where things may go
>wrong to be acceptable for production use.

>Also it is needed to not have a too much negative impact on the
>persistent connections cache when NTLM/NEGOTIATE authentication is
>not being used. Your change effectively invalidates the server
>persisten connection cache and reuse.
----------------------------------------------
So I need to
- detect when NTLM auth is required, say, by looking at response headers.
- put the corresponding FD in the pconn cache with a key that depends on the client IP and port
- set a much longer timeout on the FD than the pconn cache has at present
- recognize the corresponding client connection and use the appropriate key when accessing the cache.

Anything else?

Gary Price
ICT
Received on Sun Mar 02 2003 - 17:42:04 MST