Steve,

> > One difference I see in the source code of the SSPI authentication
> > module of FireFox is that SSPI function InitializeSecurityContext is
> > called without any of the flags libcurl is using:
>
> I wonder whether we are being "too strict" in some respects. The libcurl
> NTLM SSPI code (as far as I can remember) has been like that for years.
>
> Have you tried and if not can you try removing some or even all of
> those flags and passing 0 in your version of libcurl?

I discovered this difference just yesterday. That is, I haven't tried yet to
remove those flags. However, this is easy to accomplish. I will test such a
modified version within my own company today ... and within the user's
company tomorrow.

Regards,

Ulrich

-- 
E-Mail privat:  Ulrich.Telle_at_gmx.de
World Wide Web: http://www.telle-online.de
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html