Bug #7529 for Apache-AuthenNTLM: Authentications hang...

Tue Aug 31 11:54:54 2004 Guest - Ticket created

Subject:

Authentications hang...

We are using Apache-AuthenNTLM-2.05 for a couple of months and it works well most of the time. But once in a while, the authentication just hangs for no apparent reason. When this happen, the last line of the apache error_log looks like: "[13256] AuthenNTLM: Verify user simonr via smb server". It seems that the authentication hangs until another request is made to the apache server. Then that new authentication request hangs in the same way. Restarting Apache seems the fix the problem. Here's our config: -Modules: Authen-Smb-0.91 apache_1.3.29 mod_perl-1.0-current php-4.3.4 Apache-AuthenNTLM-2.05 -NTLM config (from httpd.conf): <Directory "/prod/intranet/ho"> Options FollowSymLinks PerlAuthenHandler Apache::AuthenNTLM AuthType ntlm AuthName ho PerlAddVar ntdomain "CHATEAU NT_CONTROL NT_FINANCE" PerlSetVar defaultdomain CHATEAU PerlSetVar ntlmdebug 1 PerlSetVar splitdomainprefix 1 require valid-user </Directory> -Perl version: v5.6.1 built for i386-linux -OS REDHAT AS Linux version 2.4.9-e.38enterprise (gcc version 2.96 20000731 (Red Hat Linux 7.2 2.96-124.7.2))

Wed Jul 27 12:57:16 2005 Guest - Correspondence added

From:

Stefano

Hi all, I have the same problem with 2.07 version of AuthenNTLM. Anyone have some idea about fix this bug? Thanks, Stefano [guest - Tue Aug 31 11:54:54 2004]: Show quoted text

> We are using Apache-AuthenNTLM-2.05 for a couple of months and it > works well most of the time. But once in a while, the > authentication just hangs for no apparent reason. When this happen, > the last line of the apache error_log looks like: "[13256] > AuthenNTLM: Verify user simonr via smb server". It seems that the > authentication hangs until another request is made to the apache > server. Then that new authentication request hangs in the same way. > Restarting Apache seems the fix the problem. > > Here's our config: > > -Modules: > > Authen-Smb-0.91 > apache_1.3.29 > mod_perl-1.0-current > php-4.3.4 > Apache-AuthenNTLM-2.05 > > -NTLM config (from httpd.conf): > > <Directory "/prod/intranet/ho"> > Options FollowSymLinks > PerlAuthenHandler Apache::AuthenNTLM > AuthType ntlm > AuthName ho > PerlAddVar ntdomain "CHATEAU NT_CONTROL NT_FINANCE" > PerlSetVar defaultdomain CHATEAU > PerlSetVar ntlmdebug 1 > PerlSetVar splitdomainprefix 1 > require valid-user > </Directory> > > -Perl version: > > v5.6.1 built for i386-linux > > -OS > > REDHAT AS > Linux version 2.4.9-e.38enterprise > (gcc version 2.96 20000731 (Red Hat Linux 7.2 2.96-124.7.2)) >

Tue Apr 18 13:30:38 2006 Guest - Correspondence added

From:

Steve Gray (sagray at NOSPAM tycoelectronics-dot-com)

I'm having the same issue with the following (on a Solaris 2.6 server): Apache 2.0.53 mod_perl 1.99 AuthenNTLM 2.10 I also noticed that when the authentication hangs, I can open another window and essentially "kick" the hanging session into working. I've set up a couple of workarounds. One involves a (very frequent) periodic "bump" of the authentication process via LWP. If the process is going to hang, I'd rather it be on one of my little bots than with an actual user. Second, I schedule a HUP to the Apache process to occur at regular intervals. I was doing it every hour, but it looks like I was still getting some frustrated users, so I now HUP every half hour during regular working hours (when I get the most traffic). The problem with doing this is when the server gets HUPed in the middle of a request and it fails, popping up an authentication prompt. It confuses the users, because they aren't used to seeing it. So I thought I'd chime in to say that this bug is still happening, and to see if anybody has worked out a proper solution.

Tue Apr 18 13:30:39 2006 The RT System itself - Status changed from 'new' to 'open'