HTTP Digest Authentication Problems (K 3.2.3/Apache 2.0.50)

[Karsten Künne]

On Monday 23 August 2004 17:05, Sean Lynch wrote:
>
> Firefox works with it, for what its worth.
>
> Sean

Are you sure firefox uses "Negotiate" authentication? I tried to access this 
site with firefox and it used "NTLM", not "Negotiate"! The "Negotiate" was 
rejected because the default preference for "Negotiate" is that it requires 
"https://". After I changed that preference it tried to use "Negotiate" but 
it failed because it tried to find the kerberos principal for the server and 
then it fell back to "NTLM" and finally it blew up with a SEGV (apparently 
some bug in the negotiateauth extension). Try to run firefox with 
"NSPR_LOG_MODULES=nsHttp:5" and "NSPR_LOG_FILE=logfile.log" set and check for 
the response firefox sends back to the server, it probably contains something 
like:

....
Cookie: ASPSESSIONIDQASBBTTA=PHJOBABCPMFCIPIGEBBGPOAL
Authorization: NTLM ********************************************

NTLM authentication is not implemented in the http kioslave and I have no 
intention to implement it.


Karsten.
-- 
Any clod can have the facts, but having an opinion is an art.
		-- Charles McCabe
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <https://mail.kde.org/mailman/private/kfm-devel/attachments/20040823/6267a184/attachment.sig>