{"action":"closed","issue":{"url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/41","labels_url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/41/labels{/name}","comments_url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/41/comments","events_url":"https://api.github.com/repos/stnoonan/spnego-http-auth-nginx-module/issues/41/events","html_url":"https://github.com/stnoonan/spnego-http-auth-nginx-module/issues/41","id":71104835,"number":41,"title":"Need some help figuring out whatis missing...","user":{"login":"GusPS","id":274401,"avatar_url":"https://avatars.githubusercontent.com/u/274401?v=3","gravatar_id":"","url":"https://api.github.com/users/GusPS","html_url":"https://github.com/GusPS","followers_url":"https://api.github.com/users/GusPS/followers","following_url":"https://api.github.com/users/GusPS/following{/other_user}","gists_url":"https://api.github.com/users/GusPS/gists{/gist_id}","starred_url":"https://api.github.com/users/GusPS/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GusPS/subscriptions","organizations_url":"https://api.github.com/users/GusPS/orgs","repos_url":"https://api.github.com/users/GusPS/repos","events_url":"https://api.github.com/users/GusPS/events{/privacy}","received_events_url":"https://api.github.com/users/GusPS/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-04-26T18:46:52Z","updated_at":"2015-06-04T01:19:30Z","closed_at":"2015-06-04T01:19:30Z","body":"Hi and thanks for your work writing this module.\r\n\r\nI'm having problem making it work.\r\n\r\nI've tested it using IE10, Chrome42 , FF37 on W8 and Nginx 1.8 on Ubuntu12.04.\r\n\r\nWhen a request gets into the server, I see the response:\r\n\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 HTTP/1.1 401 Unauthorized\r\nServer: nginx/1.8.0\r\nDate: Sun, 26 Apr 2015 18:31:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 194\r\nConnection: keep-alive\r\nWWW-Authenticate: Negotiate\r\n\r\nAnd then the browser sends ALWAYS NTLM:\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 http header: \"User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0\"\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 http header: \"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\"\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 http header: \"Accept-Language: es-AR,es;q=0.8,en-US;q=0.5,en;q=0.3\"\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 http header: \"Accept-Encoding: gzip, deflate\"\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 http header: \"Connection: keep-alive\"\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 http header: \"Cache-Control: max-age=0\"\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 http header: \"Authorization: Negotiate TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAvAjAAAADw==\"\r\n\r\necho TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAvAjAAAADw== | base64 -d\r\nNTLMSSP\r\n\r\na few lines downs:\r\n\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 Detect SPNEGO token\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 Token decoded: TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAvAjAAAADw==\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 Client sent a reasonable Negotiate header\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 GSSAPI authorizing\r\n\r\n\r\nAnd finally:\r\n2015/04/26 15:31:16 [debug] 12378#0: *41 GSSAPI failed\r\n\r\n\r\nI don't know what's missing that makes the browser always sent NTLM, which I know is out of this module. If I undestand why the browser always answers NTLM Auth token, I could try something different to solve it.\r\nMaybe some is related to some browser configuration, some AD configuration or some Nginx configuration.\r\n\r\nThanks a lot!\r\nGus.\r\n\r\n\r\n\r\n"}}