NTLM performance

[kiran k. <cnv...@gm...>]

I started using curl-loader to test the performance of NTLM
Authencitation/HTTP-401 sequence of our HTTP-Server (based on apache).
The server authenticates every tcp session. I ran the program with
'-r' option so as not to reuse the tcp connection for subsequent
connections.

But after initial authentication, curl-loader  is re-using the
authenticated sessions for subsequent requests. I could not generate
traffic at required rate. Please find below the configuration file I'm
using. Packet Exchange is as follows.

1.Curl-loader sends Http Get request with NTLMSSP_NEGOTIATE payload.
2.Server responds with NTLMSSP_CHALLENGE.
3.Curl-loader responds with NTLMSSP_AUTH response.
4.Post authentication server sends a HTTP-302 message, pointing to a
different URL for 'NTLM-SUCCESS' case.
5.Curl-loader initiates new TCP session (S2) to fetch the new
effective URL. It did not terminate previous tcp session (S1)
immediately.
6.Curl-Loader sends subsequent GET requests on S1 without sending
NTLM_NEGOTIATE payload. Even when server sends '401-Authentication'
required message, it does not terminate the session.
Can someone suggest if there is some thing wrong in my configuration
or If I'm missing anything.


Best Regards,
Kiran


########### GENERAL SECTION ################################
BATCH_NAME= bulk
CLIENTS_NUM_MAX=100 # Same as CLIENTS_NUM
CLIENTS_NUM_START=10
CLIENTS_RAMPUP_INC=10
INTERFACE   =eth0
NETMASK=16
IP_ADDR_MIN= 10.130.17.29
IP_ADDR_MAX= 10.130.17.30
IP_SHARED_NUM=2
CYCLES_NUM= -1
URLS_NUM= 1

########### URL SECTION ####################################

URL=http://10.130.18.131:8080/ntlm/authenticate.php?
ip=10.130.17.3&policy=1&url=10.130.16.131/ntlm/ntlmSuccess.php

REQUEST_TYPE=GET
TIMER_URL_COMPLETION = 0
TIMER_AFTER_URL_SLEEP = 0
WEB_AUTH_METHOD = NTLM
WEB_AUTH_CREDENTIALS = "DomName\user:passwd"