TQsoft-GmbH / mod_authn_ntlm

Apache 2.4 SSPI NTLM based authentication module for windows
Other
85 stars 27 forks source link

POST redirections not authenticated or not accomplish requirements #47

Open ricardocedex opened 4 years ago

ricardocedex commented 4 years ago

I have a problem when using Drupal with mod_authn_ntlm. There are some request that cannot be accomplished properly. So when loading a webpage almost all the requested are served (they are served with GET method) but there are a few POST request and they fail. The apache log says the user does not meet requirements. However all the other requests were granted.

As user I receive the following errors in Apache: [Tue Apr 07 10:08:37.229231 2020] [authz_user:debug] [pid 18540:tid 1644] mod_authz_user.c(77): [client ::1:49909] AH01663: access to /intraceh/index.php/es/history/36/read failed, reason: user 'CEDEXINT\rhsantos' does not meet 'require'ments for user to be allowed access, referer: http://localhost:9090/intraceh/index.php/es/FlujoContratoMenor

Debugging with Google Chrome it says it is a POST request. When I launch the same request directly throug Chrome it is a GET request and it is properly shown (just a number). Here it is the object that fails to download: Request URL: http://ceh-pxi-05.interno.cedex.es:9090/intraceh/es/history/36/read Request Method: POST Status Code: 401 Unauthorized Remote Address: XXX.xxx.XXX.xxx:9090 Referrer Policy: no-referrer-when-downgrade

Thanks for the help! Regards, Ricardo