Forum Moderators: phranque

Message Too Old, No Replies

NTLM, SSPI, IE, and POST form i

My hair is all pulled out now

         

bbbaldie

3:10 pm on Sep 18, 2006 (gmt 0)

10+ Year Member



I'm running an intranet on a MS Server 2003 platform. After getting sick of trying to make PHP play nice with IIS 6, I was turned on to the idea of installing Apache with mod_auth_sspi. After dealing with the pooling issues, I got the AD user authentication working nicely without users being nagged for passwords! Hooray! Time to start migrating sites!

THEN, I got calls from users who couldn't submit info from forms using POST parameters. More maddeningly, the problem was intermittent.

Lots of googling later, I have identified the issue as a problem with IE using NTLM with Apache. It send a POST that's empty, making the page reload. I have seen where many others out there have the same issue. I've seen these suggestions:

Make all users authenticate. Done. No effect.
Set keepalive off. Tried it, it killed NTLM.
Turn keepalive up over 60 seconds, IE's default. Tried it, no effect.

We're a IE shop, unfortunately, otherwise I'd move everyone over to Firefox. My usesr will have to invisibly authenticate, otherwise I'm stuck with IIS (which gets flakier with every update).

Has ANYONE gotten past this IE POST form errors issue?

bbbaldie

5:20 pm on Sep 18, 2006 (gmt 0)

10+ Year Member



I THINK I FIGURED IT OUT!

Keepalive has to be on, but not for very long. I set it to expire after one second. Long enough for ntlm to work, and a user just has to have a web form display for a second before IE stops its idiotic re-authentication.

Moved a site over an hour ago, no complaints from users yet!