[Pound Mailing List] NTLM vs Basic Authentication
Brückler Michael <[email protected]>
| Newsgroups | gmane.comp.web.pound.general |
|---|---|
| Message-ID | <[email protected]> |
Hi Folks, I've just successfully implemented pound as a reverse proxy for Exchange 2010 OWA / Active Sync / Outlook Anywhere Everything is running fine expect EWS (Exchange Web Service) for our MAC Clients from outside It seems that pound doesn't fully handover the NTLM handshake to the exchange IIS. Well - never mind: I've changed IIS EWS Directory to Basic auth (SSL, thus no problem), but unfortunately pound doesn't not handover the basic auth realm (username/pass) to IIS. This happens to approx. every second request. One request is successful (HTTP 200), the following not (HTTP 401)... The same request from the internal network direct to IIS is always successful. Here are the pound logs: Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 401 - "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 401 - "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 401 - "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 200 1738 "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 200 1823 "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 401 - "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 200 1121 "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP- - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 200 1116 "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6)" Mar 17 15:49:56 pound: domain IP - - [17/Mar/2015:15:49:56 +0100] "POST /EWS/Exchange.asmx HTTP/1.1" 401 - "" "Mac OS X/10.9.5 (13F34); ExchangeWebServices/4.0 (193); Mail/7.3 (1878.6) Here are the corresponding IIS logs, the unsuccessful attempts have no username information... POST /EWS/Exchange.asmx - 443 - Mac+OS+X/10.9.5+(13F34);+ExchangeWebServices/4.0+(193);+Mail/7.3+(1878.6) 401 0 0 46 POST /EWS/Exchange.asmx - 443 - Mac+OS+X/10.9.5+(13F34);+ExchangeWebServices/4.0+(193);+Mail/7.3+(1878.6) 401 0 0 46 POST /EWS/Exchange.asmx - 443 - Mac+OS+X/10.9.5+(13F34);+ExchangeWebServices/4.0+(193);+Mail/7.3+(1878.6) 401 1 2148074254 15 Any ideas? Best Michael