Re: IIS 5.0 with Integrated Window Authentication

From: Dave Aitel (daveat_private)
Date: Thu Nov 07 2002 - 11:35:23 PST

  • Next message: Dave Aitel: "Re: [Spike] Re: IIS 5.0 with Integrated Window Authentication"

    Hmm. My basterdized SPIKE Proxy NTLM auth does, in fact, work through
    the proxy though.
    
    Client->SPIKE Proxy->Server
    
    Where Client is sending Proxy-Authorization, and SPIKE Proxy is
    translating that into Authorization: and sending it to the server and so
    on. I get access on IIS 5.0, at least.
    
    
    -dave
    
    On Wed, 6 Nov 2002 23:27:54 +0100
    Sebastian Flothow <sebastianat_private> wrote:
    
    > > The goofy three-message exchange that sets up the NTLM security
    > > doesn't seem to make it through the proxy,
    > 
    > AFAIK, NTLM _can_ _not_ work through proxies, by design. It seems it 
    > includes the client's IP address, which then doesn't match that of the
    > 
    > proxy (which is the client from the server's point of view), or 
    > something similar.
    > 
    > 
    > Sebastian
    > 
    > --
    > Sebastian Flothow
    > sebastianat_private
    > #include <stddisclaimer.h>
    > 
    > 
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Thu Nov 07 2002 - 16:47:55 PST