From: Daniel Stenberg <daniel@haxx.se>
Date: Sun, 16 Feb 2014 13:33:06 GMT
Subject: Re: [BUG?] git http connection reuse
Message-ID: <alpine.DEB.2.00.1402161431230.10435@tvnag.unkk.fr>
In-Reply-To: <alpine.DEB.2.00.1402161307160.10435@tvnag.unkk.fr>

On Sun, 16 Feb 2014, Daniel Stenberg wrote:

> Right, the problem is there to make sure that a NTLM-auth connection with 
> different credentials aren't re-used. NTLM with its connection-oriented 
> authentication breaks the traditional HTTP paradigms and before this change 
> there was a risk that libcurl would wrongly re-use a NTLM connection that 
> was done with different credentials!
>
> I suspect we introduced a regression here with that fix. I'll dig into this.

Thanks for pointing this out!

I could repeat this problem with a curl test case so I wrote up two, and then 
I made a fix to curl:

   https://github.com/bagder/curl/commit/d765099813f5

-- 

  / daniel.haxx.se