On Fri, 11 Nov 2011, Jorge Lodos Vigil wrote:

> The problem is constructing the client authentication header to send for the
> first time, when there is still no connection. I will try to solve this
> myself and send a patch back. In the mean time, this is how to reproduce:
>
> 1. ISA Server 2006 with basic authentication disabled.
> 2. Use curl with authentication CURLAUTH_ANYSAFE

I don't have any "ISA Server 2006" around so it'll be much better if you try
to write up a test to repeat the problem with the curl test suite.

> The problem must be solved either in Curl_http_output_auth or
> output_auth_headers (or both). The function output_auth_headers is designed
> so a specific authentication method must be already picked, however no such
> selection is performed in Curl_http_output_auth.

It is also made so that if you have more than one type set, it will not add
any auth headers at all since then it needs to "try" without auth and instead
(possibly) respond on the headers that is then received in the response.

> I'm not sure what will be best: change output_auth_headers semantics or
> ensure that a single method is selected and loop in Curl_http_output_auth.

Can you post a full trace/log of the HTTP requests and responses and a
description of the exact problems with the headers? I don't quite understand
your problem.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html