Re: [mod-security-users] OT: anyone doing reverse proxies for NTLM servers?

[Brian R. <Bri...@br...>]

Jason Haar wrote:
> Hi there
> 
> We've got a case to put a SharePoint server behind an Apache/modsecurity
> reverse proxy, and the IIS server is set exclusively to NTLM.
> 
> Normally this isn't doable - NTLM is a transaction that has to occur
> directly between the browser and server - but RFC-4559 states a way
> around it using session cookies (SPNEGO). Squid supports it, but I can't
> see any evidence Apache/mod_proxy does?
> 
> Does anyone know if this is doable, if not, I'll get I'll submit an
> Apache bugzilla...

I do not know a solution off hand.  If you do find a solution, pleas let
the list know, though (a few people want this).

thanks,
-B


-- 
Brian Rectanus
Breach Security