Hello,
I am using modsec 2.9.0 with apache 2.4.8 on a ubuntu 16.04 LTS. I am using
apache as a reverse proxy. I have a website that is using NTLM
authentication.
The traffic seems to be proxied right as I get the authentication popup
window, but the window keeps popping up even after supplying correct
credentials.
In the modsec audit.log
I see 401 errors - Unauthorized: Access is denied due to invalid credentials
After researching it turned out to be related with maintaining persistent
connections. So, I added "KeepAlive On" to the virtual hosts config file,
but this doesn't seem to have helped.
I see many posts talking about these issues, but nothing recent. Could
anybody please help/advise?
Here are reference posts with similar problems, to give you some
understanding of my problem.
https://sourceforge.net/p/mod-security/mailman/message/10663229/
https://serverfault.com/questions/167046/apache-reverse-proxy-server-and-ssl-ntlm-sharepoint
https://lists.gt.net/apache/users/451692
Appreciate your help!
|