RE: RE: excessive data transfer with SSPI

> From: Sergey Gotvansky [mailto:Serge.Gotvansky@materialise.kiev.ua]
> Sent: Thursday, January 12, 2006 4:28 PM
>
> Hi,
>
> I suppose that the problem of huge transfers is using of
> per-request authentication instead of per-connection. The
> widely used mod_auth_sspi uses per-request auth that leads to
> resending of 3-phase SSPI auth information. I tried to jump
> from per-request to per-connection by patching mod_auth_sspi
> module and found it working ok.

Per connection authentification has some security problems by
design (not only NTLM):

http://www.gknw.de/phpbb/viewtopic.php?t=31

Malte

[snip]

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Jan 12 20:57:43 2006