On Wed, 20 Apr 2005, Ralph Mitchell wrote:

> How does --anyauth work? Is it pinging the server first, then examining the
> returned headers to see what kind of auth might be being demanded?

Yes, it runs the operation first without any authorization header at all. If
that works, all is fine. If not, it checks the response headers to see what
auth methods the server accepts and picks one of them and re-sends the request
using that.

In some cases, this will cause curl to send the whole POST once just to have
it discarded by the server and then it sends it again using one of the
"suggested" authentication methods.

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html