Message-ID: <53525655.4010301@...1147...> Date: Sat, 19 Apr 2014 12:56:21 +0200 From: Jan Just Keijser MIME-Version: 1.0 References: <1397645317-20116-1-git-send-email-Holger.Kummert@...1516...> <20140418210522.GE16637@...1296...> In-Reply-To: <20140418210522.GE16637@...1296...> Content-Type: multipart/alternative; boundary="------------020901010400070808050105" Subject: Re: [Openvpn-devel] Fixes for HTTP proxy authentication with NTLM List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Gert Doering , Holger Kummert Cc: openvpn-devel@lists.sourceforge.net This is a multi-part message in MIME format. --------------020901010400070808050105 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi, On 18/04/14 23:05, Gert Doering wrote: > Hi, > > On Wed, Apr 16, 2014 at 12:48:35PM +0200, Holger Kummert wrote: >> Any opinions? > Any easy way to test this, without having a Windows domain around? > > (I already run a number of test cases from my t_client test sets using > socks proxy, http proxy, http proxy to ipv4 hosts over ipv6, ..., and > if I could "easily" add a proxy with NTML auth to that mix, it would help > ensure that we're not accidentially breaking things) actually: no ; when the original NTML problems were reported I tried to reproduce them in my Windows Domain less environment and couldn't ; the existing code was working quite nicely; even setting up a Samba domain did not help - that also worked, IIRC. For proper testing you'd have to have a Windows domain, and even worse, different version of the Domain Controller as well (Win2003, 2007, 2012 etc). JM2CW, JJK > gert > > --------------020901010400070808050105 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit

Hi,

On 18/04/14 23:05, Gert Doering wrote:

Hi,

On Wed, Apr 16, 2014 at 12:48:35PM +0200, Holger Kummert wrote:

Any opinions?

Any easy way to test this, without having a Windows domain around?

(I already run a number of test cases from my t_client test sets using
socks proxy, http proxy, http proxy to ipv4 hosts over ipv6, ..., and
if I could "easily" add a proxy with NTML auth to that mix, it would help 
ensure that we're not accidentially breaking things)

actually: no ; when the original NTML problems were reported I tried to reproduce them in my Windows Domain less environment and couldn't ; the existing code was working quite nicely; even setting up a Samba domain did not help - that also worked, IIRC. For proper testing you'd have to have a Windows domain, and even worse, different version of the Domain Controller as well (Win2003, 2007, 2012 etc).

JM2CW,

JJK

gert

--------------020901010400070808050105--