bclzvs / serf

Automatically exported from code.google.com/p/serf
0 stars 0 forks source link

Problems with proxies with NLTM authentication #168

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
We use an integrated subversion client in out software and updated from 1.6.x 
to 1.8.x recently. We also use latest released version of serf, 1.3.8.
Everything is ok without proxies. But we made some tests with a proxy which 
requires NTLM authentication and the checkout process breaks after a few files 
with an "The handle is invalid" message. TortoiseSvn 1.8.10 is also affected.

The invalid handle error results from a call to InitializeSecurityContext in 
auth_spnego_sspi.c. I think, the problem is related to the fact, that serf uses 
the same authentication context for proxies for all connections, unlike the 
context for server authentication. NTLM is a multiphase authentication protocol 
and the responses seam to overlap which leads to problems.
We need to release our software soon, so I changed the code to store the proxy 
authentication infos in the connection object as well and everything works.
Could you please investigate it?

Original issue reported on code.google.com by michael....@gmail.com on 17 Jun 2015 at 8:15