comparison xml/en/docs/http/ngx_http_upstream_module.xml @ 1587:c2a0a18e65ba

Added keepalive info for ntlm.
author Yaroslav Zhuravlev <yar@nginx.com>
date Mon, 26 Oct 2015 22:18:06 +0300
parents 201bf8fa69e5
children 0ba4b2e561bd
comparison
equal deleted inserted replaced
1586:c4520ec8ce64 1587:c2a0a18e65ba
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_upstream_module" 10 <module name="Module ngx_http_upstream_module"
11 link="/en/docs/http/ngx_http_upstream_module.html" 11 link="/en/docs/http/ngx_http_upstream_module.html"
12 lang="en" 12 lang="en"
13 rev="43"> 13 rev="44">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_upstream_module</literal> module 18 The <literal>ngx_http_upstream_module</literal> module
531 once the client sends a request with the <header>Authorization</header> 531 once the client sends a request with the <header>Authorization</header>
532 header field value 532 header field value
533 starting with “<literal>Negotiate</literal>” or “<literal>NTLM</literal>”. 533 starting with “<literal>Negotiate</literal>” or “<literal>NTLM</literal>”.
534 Further client requests will be proxied through the same upstream connection, 534 Further client requests will be proxied through the same upstream connection,
535 keeping the authentication context. 535 keeping the authentication context.
536 </para>
537
538 <para>
539 In order for NTLM authentication to work,
540 it is necessary to enable keepalive connections to upstream servers.
541 The <link doc="ngx_http_proxy_module.xml" id="proxy_http_version"/>
542 directive should be set to “<literal>1.1</literal>”
543 and the <header>Connection</header> header field should be cleared:
544 <example>
545 upstream http_backend {
546 server 127.0.0.1:8080;
547
548 ntlm;
549 }
550
551 server {
552 ...
553
554 location /http/ {
555 proxy_pass http://http_backend;
556 proxy_http_version 1.1;
557 proxy_set_header Connection "";
558 ...
559 }
560 }
561 </example>
562 </para>
563
564 <para>
565 <note>
566 When using load balancer methods other than the default
567 round-robin method, it is necessary to activate them before
568 the <literal>ntlm</literal> directive.
569 </note>
536 </para> 570 </para>
537 571
538 <para> 572 <para>
539 <note> 573 <note>
540 This directive is available as part of our 574 This directive is available as part of our