Re: Load Balancing NTLM over HTTP with NGINX

2022-11-19 Thread Michael B Allen
On Sat, Nov 19, 2022 at 4:04 PM Maxim Dounin wrote: > Hello! > > On Fri, Nov 18, 2022 at 10:30:29PM -0500, Michael B Allen wrote: > > > NTLM over HTTP is a 3 request "handshake" that must occur over the same > TCP > > connection. > > My HTTP service i

Re: Load Balancing NTLM over HTTP with NGINX

2022-11-19 Thread Maxim Dounin
Hello! On Fri, Nov 18, 2022 at 10:30:29PM -0500, Michael B Allen wrote: > NTLM over HTTP is a 3 request "handshake" that must occur over the same TCP > connection. > My HTTP service implements the NTLMSSP acceptor and uses the clients remote > address and port like "

Re: Load Balancing NTLM over HTTP with NGINX

2022-11-19 Thread Michael B Allen
On Fri, Nov 18, 2022 at 10:30 PM Michael B Allen wrote: > Now I want to load balance NTLM through NGINX. For this I used the > following: > > upstream backend { > ip_hash; > server localhost:8080; > server localhost:8081; > } > > server { > locat

Load Balancing NTLM over HTTP with NGINX

2022-11-18 Thread Michael B Allen
Hi, NTLM over HTTP is a 3 request "handshake" that must occur over the same TCP connection. My HTTP service implements the NTLMSSP acceptor and uses the clients remote address and port like "10.11.12.13:54433" to track the authentication state of each TCP connection. My impl

Re: NTLM sharepoint when use nginx reverse proxy

2018-03-04 Thread sonpg
; server ecm.test.vn:443 weight=5; server 10.68.8.182:444 max_fails=3 fail_timeout=30s; ntlm on; } server { listen 444 ssl;#Line 27 ssl_certificate /etc/nginx/ssl/test/test.pem; ssl_certificate_key

Re: NTLM sharepoint when use nginx reverse proxy

2018-03-02 Thread Francis Daly
listen on the same ip:port. You use "http" because you want nginx to reverse-proxy one or more web sites. You use "stream" because you want nginx to reverse-proxy one ntlm-authentication web site, and you know that nginx does not reverse-proxy ntlm. You use "stream" to send

Re: NTLM sharepoint when use nginx reverse proxy

2018-03-02 Thread sonpg
my design is : enduser --> nginx --> sites (sharepoint site:443, web:80; 443) if server listen in 80 will redirect to 443 i try to use stream block but it can't use same port. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278737,278885#msg-278885

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-25 Thread Payam Chychi
On Sun, Feb 25, 2018 at 1:18 PM Francis Daly wrote: > On Sun, Feb 25, 2018 at 11:34:17AM -0500, sonpg wrote: > > Hi there, > > > i using nginx to reverse proxy for sharepoint site: ecm.test.com:80 and > > redirect test.com:80 to https://test.com:443. > > it show "nginx: [emerg] bind() to 0.0.0.0:

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-25 Thread Francis Daly
On Sun, Feb 25, 2018 at 11:34:17AM -0500, sonpg wrote: Hi there, > i using nginx to reverse proxy for sharepoint site: ecm.test.com:80 and > redirect test.com:80 to https://test.com:443. > it show "nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in > use)" You have something othe

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-25 Thread sonpg
here is my issue, i using nginx to reverse proxy for sharepoint site: ecm.test.com:80 and redirect test.com:80 to https://test.com:443. it show "nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)" Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278737,278753#msg-27

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-25 Thread Francis Daly
On Sun, Feb 25, 2018 at 04:40:36AM -0500, sonpg wrote: Hi there, > i try and it work but have new issue. Some site i need redirect from port 80 > to 443 and it use same port 80 with sharepoint site What request do you make? What response do you get? What response do you want to get instead?

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-25 Thread sonpg
i try and it work but have new issue. Some site i need redirect from port 80 to 443 and it use same port 80 with sharepoint site My code is: events { worker_connections 1024; } stream { upstream ecm.test.com { hash $remote_addr consistent; server ecm.test.com:81 weight=5;

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-23 Thread Jason Whittington
I posted this a few weeks ago – I hope it helps you. I did this with nginx plus, so it may not work if you are using the open-source product. NTLM authentication authenticates connections instead of requests, and this is somewhat contradicts HTTP protocol, which is expected to be stateless

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-23 Thread Payam Chychi
On Fri, Feb 23, 2018 at 4:32 AM Francis Daly wrote: > On Fri, Feb 23, 2018 at 04:15:31AM -0500, sonpg wrote: > > Hi there, > > > myserver requires NTLM authentication. I access myserver through nginx > proxy > > and provide correct auth info,but the browser

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-23 Thread Francis Daly
On Fri, Feb 23, 2018 at 04:15:31AM -0500, sonpg wrote: Hi there, > myserver requires NTLM authentication. I access myserver through nginx proxy > and provide correct auth info,but the browser prompt auth again. http://nginx.org/r/ntlm nginx does not support NTLM authentication. If yo

Re: NTLM sharepoint when use nginx reverse proxy

2018-02-23 Thread sonpg
myserver requires NTLM authentication. I access myserver through nginx proxy and provide correct auth info,but the browser prompt auth again. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278737,278738#msg-278738 ___ nginx mailing list

NTLM sharepoint when use nginx reverse proxy

2018-02-23 Thread sonpg
Hi everyone, I have issue with authentication when use nginx reverse proxy. it always require input user/pass my config file: # upstream test.com { server test.com; keepalive 16; } server { listen 80; server_name test.com; location / {

RE: NTLM

2018-01-10 Thread Otto Kucera
Hi Maxim, -Original message- From: Maxim Konovalov  Sent: Wednesday 10th January 2018 12:40 To: nginx@nginx.org; Otto Kucera Subject: Re: NTLM Hi Otto, On 10/01/2018 14:37, Otto Kucera wrote: > Hi all, > > > I am testing ntlm for a reverse proxy secanrio. [...] > I

Re: NTLM

2018-01-10 Thread Maxim Konovalov
Hi Otto, On 10/01/2018 14:37, Otto Kucera wrote: > Hi all, > > > I am testing ntlm for a reverse proxy secanrio. [...] > I always get this error: > > nginx: [emerg] *unknown directive "ntlm"* in > /etc/nginx/conf.d/test.conf:4 <https://proxy.h09.org/weba

Re: NTLM

2018-01-10 Thread Lucas Rolff
It’s only available for nginx-plus Get Outlook for iOS<https://aka.ms/o0ukef> From: nginx on behalf of Otto Kucera Sent: Wednesday, January 10, 2018 12:37:49 PM To: nginx@nginx.org Subject: NTLM Hi all, I am testing ntlm for a reverse proxy secanrio.

NTLM

2018-01-10 Thread Otto Kucera
Hi all, I am testing ntlm for a reverse proxy secanrio. Info: http://nginx.org/en/docs/http/ngx_http_upstream_module.html#ntlm <http://nginx.org/en/docs/http/ngx_http_upstream_module.html#ntlm> this is my config: upstream http_backend { server 127.0.0.1:8080; ntlm; }

Re: Advise for NTLM-Auth

2016-04-19 Thread Max Clements
Andreas, Kerberos and NTLM are two completely different ways of authenticating a user. Whilst they essentially do the same thing, the main difference that you care about is that Kerberos works correctly over HTTP, unlike NTLM which does not. - which module you may suggest There are a number of

Re: Advise for NTLM-Auth

2016-04-19 Thread A. Schulze
Max Clements: Depending on the versions of Windows and what you are trying to do, it may be possible to use Kerberos via Nginx, rather than NTLM. that's what I mean saying "I don't care if it's named NTLM or ugly_voodoo" You name it "Kerberos" - fine

Re: Advise for NTLM-Auth

2016-04-19 Thread Max Clements
Depending on the versions of Windows and what you are trying to do, it may be possible to use Kerberos via Nginx, rather than NTLM. It requires some foo setting up Service Principal Names, but does work properly via an HTTP proxy, and provides passthrough auth, which seems to be what the desire

Re: Advise for NTLM-Auth

2016-04-19 Thread Aleksandar Lazic
Hi. Am 18-04-2016 22:59, schrieb A. Schulze: Maxim Dounin: Just a side note: NTLM auth is broken by design and violates HTTP basic rules. Avoid using it if you can. to be clear: I don't care if it's named NTLM or ugly_voodoo The goal is a nginx accesses by a IE/edge browser. Us

Re: Advise for NTLM-Auth

2016-04-18 Thread Payam Chychi
On Apr 18, 2016, 6:25 PM -0700, Maxim Dounin, wrote: > Hello! > > On Mon, Apr 18, 2016 at 02:28:19PM -0700, Payam Chychi wrote: > > > > Maxim Dounin: > > > > > > > Just a side note: NTLM auth is broken by design and violates HTTP > > > > b

Re: Advise for NTLM-Auth

2016-04-18 Thread Maxim Dounin
Hello! On Mon, Apr 18, 2016 at 02:28:19PM -0700, Payam Chychi wrote: > >Maxim Dounin: > > > >>Just a side note: NTLM auth is broken by design and violates HTTP > >>basic rules. Avoid using it if you can. > > > >to be clear: I don't care if it&#

Re: Advise for NTLM-Auth

2016-04-18 Thread Payam Chychi
Maxim Dounin: Just a side note: NTLM auth is broken by design and violates HTTP basic rules. Avoid using it if you can. to be clear: I don't care if it's named NTLM or ugly_voodoo The goal is a nginx accesses by a IE/edge browser. Users should not be bothered with authenticatio

Re: Advise for NTLM-Auth

2016-04-18 Thread A. Schulze
Maxim Dounin: Just a side note: NTLM auth is broken by design and violates HTTP basic rules. Avoid using it if you can. to be clear: I don't care if it's named NTLM or ugly_voodoo The goal is a nginx accesses by a IE/edge browser. Users should not be bothered with authenticatio

Re: Advise for NTLM-Auth

2016-04-18 Thread Maxim Dounin
ainst the > domain activ directory using https://github.com/kvspb/nginx-auth-ldap > > But I think the MS browser could do NTLM auth as well. > > Are there suggested nginx modules to let a MS browser transparent login into > a webapp run on nginx? > I found https://github.com/stnoon

Advise for NTLM-Auth

2016-04-18 Thread A. Schulze
MS browser could do NTLM auth as well. Are there suggested nginx modules to let a MS browser transparent login into a webapp run on nginx? I found https://github.com/stnoonan/spnego-http-auth-nginx-module so far. Before I start playing I'll ask if there are other / better / suggested mo

Re: NTLM or HTTP Digest authentication to Parent proxy

2015-06-23 Thread Francis Daly
On Mon, Jun 22, 2015 at 04:00:51PM -0700, Russel D'Souza wrote: Hi there, > I need to configure a proxy on my machine to use another proxy (installed > on another machine) as the parent proxy. nginx is not a proxy server, and does not talk to proxy servers. > Please let me know if there is any

NTLM or HTTP Digest authentication to Parent proxy

2015-06-22 Thread Russel D'Souza
Hi, I need to configure a proxy on my machine to use another proxy (installed on another machine) as the parent proxy. The parent proxy requires HTTP Digest or NTLM authorization. I want to to set up a local proxy which deals with the parent proxy's authorization details and pro