Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of apache-users@m.gmane.org
 designates 80.91.229.2 as permitted sender)
To: users@httpd.apache.org
From: Fabrizio Reale <fabrizio.reale@redomino.com>
Date: Fri, 09 Nov 2007 11:17:18 +0100
Lines: 40
Message-ID: <fh1c3e$bv7$1@ger.gmane.org>
References: <fgqn35$3o0$1@ger.gmane.org>
 <20071109070238.GA17851@w032y7.pnet.ch>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
User-Agent: KNode/0.10.5
Sender: news <news@ger.gmane.org>
Subject: [users@httpd]  Re: Use NTLM only when needed

Hi Christian,

> On Tue, Nov 06, 2007 at 10:41:57PM +0100, Fabrizio Reale wrote:
>> I have a web application (Plone) which has its own authentication, but in
>> an intranet I set up the NTLM authentication using the mod_ntlm module.
>> It works very well when I am using a windows PC, but when I use my Linux
>> desktop I must login using the ugly NTLM popup window.
>> I would rather prefer to use the standard login of the web application.
>> So if I can perform the NTLM authentication the system should
>> authomatically log me, but if not I would like to see the application as
>> an anonimous user.
>> 
>> Does any one know how to do that?

> I can think of a hack including mod_rewrite and possibly mod_security,
> but it means a potential breach of your security and is really
> complicated. Unless you absolutely have to (and "ugly popup" sounds
> annoying, but not really lethal) I would stick with the situation
> as is. If you really have to, then there are a lot of learning
> opportunities ahead. ;)

The ugly popup is shown before any page, so the user can not even know where
is going and it is not easy to write a password without viewing a page.

What hack do you suggest?

> However, I'd be happy to hear about Firefox on Linux being able to respond
> to NTLM by itself. Have not checked that in quite some time. And it
> would solve your problem too, I suppose.

No, because sometimes I am not in the intranet.

Thank you,
Fabrizio

-- 
Fabrizio Reale                               fabrizio.reale@redomino.com
Redomino S.r.l.                 Largo Valgioie 14 - 10146 Torino - Italy
Tel: +39 011 7499875 - Fax: +39 011 3716911    http://www.redomino.com/


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org