ISA, NTLM and Mass Downloader (MD)
|Lev Shisterov||01/20/2005 10:17 pm|
|If problem not solved yet.
I try 3.0 SR1 and have this problem.
I have a suggetion (and bad english :).
1. MD first try connect to proxy unathorised, then it closed this port (TCP) because of 407;
2. Opens next port (number +1) and send HTTP request with NTLM (phase 1 in NTLM chalenge/response). Gets reply with NTLM response and _close_ this port.
3. Open next port and send second NTLM (phase 2) signed HTTP request, but ISA wait on _new_ connection for fisrt NTLM (1 phase) - and of couse MD receive 407 Proxy Authentication Required.
Is this a feature or bug?
Why not try all communication with proxy over one (1) connection (for one download tread) as IE does?
|Oleg Chernavin||01/21/2005 07:55 am|
|In fact, Mass Downloader uses MS IE downloading code (Wininet) for NTLM authentication. So, we do not have much control over it, but we will try to find our how to improve that.