Re: Use NTLM only when needed

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Christian,

> On Tue, Nov 06, 2007 at 10:41:57PM +0100, Fabrizio Reale wrote:
>> I have a web application (Plone) which has its own authentication, but in
>> an intranet I set up the NTLM authentication using the mod_ntlm module.
>> It works very well when I am using a windows PC, but when I use my Linux
>> desktop I must login using the ugly NTLM popup window.
>> I would rather prefer to use the standard login of the web application.
>> So if I can perform the NTLM authentication the system should
>> authomatically log me, but if not I would like to see the application as
>> an anonimous user.
>> 
>> Does any one know how to do that?

> I can think of a hack including mod_rewrite and possibly mod_security,
> but it means a potential breach of your security and is really
> complicated. Unless you absolutely have to (and "ugly popup" sounds
> annoying, but not really lethal) I would stick with the situation
> as is. If you really have to, then there are a lot of learning
> opportunities ahead. ;)

The ugly popup is shown before any page, so the user can not even know where
is going and it is not easy to write a password without viewing a page.

What hack do you suggest?

> However, I'd be happy to hear about Firefox on Linux being able to respond
> to NTLM by itself. Have not checked that in quite some time. And it
> would solve your problem too, I suppose.

No, because sometimes I am not in the intranet.

Thank you,
Fabrizio

-- 
Fabrizio Reale                               fabrizio.reale@xxxxxxxxxxxx
Redomino S.r.l.                 Largo Valgioie 14 - 10146 Torino - Italy
Tel: +39 011 7499875 - Fax: +39 011 3716911    http://www.redomino.com/



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux