Re: Needing state in NTLMSSP

tor 2003-01-16 klockan 21.13 skrev Robert Collins:

> Hmm.
> here's the quandry: A failed digest auth should not drop persistent
> connections. A failed basic auth should not drop persistent connections.
> A failed NTLM auth should drop persistent connections.
>
> We only need to drop the conenction after sending a set of HTTP auth
> challenges if NTLM is active. If NTLM is not active, IE does the right
> thing and authenticates on the same persistent connection.

Perfectly fine. Neither Andrew or me opposes this. What we oppose is
having Squid even attempting to look into the NTLMSSP packets. The
NTLMSSP is none of Squid's business.

Connection management between Squid and the client is Squid's business,
and if it is the case that rules like the above needs to be designed
those will belong in Squid, and needs to be used as input when designing
a correct helper protocol.

-- 
Henrik Nordstrom <hno@squid-cache.org>
MARA Systems AB, Sweden