cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: NTLM user name and password case sensitive or not?

From: Dan Fandrich <dan_at_coneharvesters.com>
Date: Tue, 14 Oct 2008 08:01:40 -0700

On Mon, Oct 13, 2008 at 11:00:07PM +0200, Daniel Stenberg wrote:
> I found this little code snippet in libcurl that decides when to re-use
> connections when they are made with NTLM over HTTP and it checks for user
> names and passwords in a case insensitive manner.
>
> Is that really correct? To me it feel wrong to consider them to be case
> insensitive, but then it struck me that perhaps there is a reason it was
> made this way and not just a bug. Or isn't there?

I seem to recall someone reporting the original case sensitive comparison
as a bug some time ago. I would imagine that at least the user name in
Windows would be case insensitive.

>>> Dan

-- 
http://www.MoveAnnouncer.com              The web change of address service
          Let webmasters know that your web site has moved
Received on 2008-10-14