WebApp Sec mailing list archives

Re: IIS 5.0 with Integrated Window Authentication


From: Sebastian Flothow <sebastian () flothow de>
Date: Wed, 6 Nov 2002 23:27:54 +0100

The goofy three-message exchange that sets up the NTLM security doesn't seem to make it through the proxy,

AFAIK, NTLM _can_ _not_ work through proxies, by design. It seems it includes the client's IP address, which then doesn't match that of the proxy (which is the client from the server's point of view), or something similar.


Sebastian

--
Sebastian Flothow
sebastian () flothow de
#include <stddisclaimer.h>


Current thread: