Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Can I get HaProxy to forward windows auth credentials onto IIS? I have searched for a day and cannot find much information out there.

share|improve this question
    
How is the authentication captured by the webserver? HTTP Basic Auth? –  Kyle Smith Apr 2 '12 at 12:02
    
Hey @Kyle, At the moment just windows authentication is turned on, not basic. –  redsquare Apr 2 '12 at 12:18

2 Answers 2

What do you mean by "windows authentication" ? Is it NTLM auth over HTTP ? It's not very clear from your question. If it's NTLM auth, you need haproxy to work in tunnel mode because NTLM auth is not HTTP-compliant and authenticates the connection instead of the request. So you want haproxy to forward all traffic from the same connection to the same server. Using NTLM auth over proxies is dangerous BTW because you never know if proxies will multiplex connections or not, which could result in having multiple users browsing with the same account (haproxy does not do this right now).

share|improve this answer
    
well Integrated Windows authentication, formerly called NTLM. Thanks for the pointer on tunnel mode, not come across this but will check the docs. –  redsquare Apr 9 '12 at 17:19

I ran into this problem. HAProxy by default runs with option http-tunnel unless you specify something like option httpclose. I was trying something like this:

defaults
    option httpclose
    ...

backend http
    no option httpclose
    server devweb01 10.10.10.10:80 check

But this did not work. When I removed option httpclose from the defaults section, it worked. I also tried adding option http-tunnel inside my backend but this had no effect.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.