curl-library
Re: NTLM user name and password case sensitive or not?
From: Dan Fandrich <dan_at_coneharvesters.com>
Date: Tue, 14 Oct 2008 08:01:40 -0700
Date: Tue, 14 Oct 2008 08:01:40 -0700
On Mon, Oct 13, 2008 at 11:00:07PM +0200, Daniel Stenberg wrote:
> I found this little code snippet in libcurl that decides when to re-use
> connections when they are made with NTLM over HTTP and it checks for user
> names and passwords in a case insensitive manner.
>
> Is that really correct? To me it feel wrong to consider them to be case
> insensitive, but then it struck me that perhaps there is a reason it was
> made this way and not just a bug. Or isn't there?
I seem to recall someone reporting the original case sensitive comparison
as a bug some time ago. I would imagine that at least the user name in
Windows would be case insensitive.
>>> Dan
-- http://www.MoveAnnouncer.com The web change of address service Let webmasters know that your web site has movedReceived on 2008-10-14