Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config:

ProxyPass        /app http://myapplication:8080/myapp
ProxyPassReverse /app http://myapplication:8080/myapp

When I switch on NTLM authentication (using mod_ntlm) the authentication fails (it works fine when bypassing the proxy). A quick search reveals lots of issues when running NTLM behind a proxy due to the connection-specific NTLM specification.

Does anyone have a working Apache configuration that allows NTLM authentication through a proxy?

Thanks for any help.

share|improve this question

migrated from Jun 12 '11 at 23:18

This question came from our site for professional and enthusiast programmers.

I'm basing this on possibly dated knowledge here but I didn't think NTLM through a proxy worked at all, (excepting possibly the old microsoft isa server). – mahnsc Jun 13 '11 at 2:40
Thanks @mahnsc, that's my recollection as well, but I'm wondering if someone has some fancy-dan piece of Apache config magic that provides a workaround. :) – Nick Pierpoint Jun 13 '11 at 8:25
some interesting points on the subject : You can try a Squid Proxy instead, tehre's some options for NTLM support in Squid – regilero Jun 13 '11 at 10:11

NTLM is connection based therefore not suitable for HTTP-level proxying in general. HAProxy can do TCP reverse proxying which should work just fine. When used as a forward proxy for this situation it's not really packed with features (i.e caching, access control, filtering, etc). It should be just fine to use instead of Apache though.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.