Mercurial > hg > nginx-site
comparison xml/en/docs/http/ngx_http_upstream_module.xml @ 1587:c2a0a18e65ba
Added keepalive info for ntlm.
author | Yaroslav Zhuravlev <yar@nginx.com> |
---|---|
date | Mon, 26 Oct 2015 22:18:06 +0300 |
parents | 201bf8fa69e5 |
children | 0ba4b2e561bd |
comparison
equal
deleted
inserted
replaced
1586:c4520ec8ce64 | 1587:c2a0a18e65ba |
---|---|
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> | 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> |
9 | 9 |
10 <module name="Module ngx_http_upstream_module" | 10 <module name="Module ngx_http_upstream_module" |
11 link="/en/docs/http/ngx_http_upstream_module.html" | 11 link="/en/docs/http/ngx_http_upstream_module.html" |
12 lang="en" | 12 lang="en" |
13 rev="43"> | 13 rev="44"> |
14 | 14 |
15 <section id="summary"> | 15 <section id="summary"> |
16 | 16 |
17 <para> | 17 <para> |
18 The <literal>ngx_http_upstream_module</literal> module | 18 The <literal>ngx_http_upstream_module</literal> module |
531 once the client sends a request with the <header>Authorization</header> | 531 once the client sends a request with the <header>Authorization</header> |
532 header field value | 532 header field value |
533 starting with “<literal>Negotiate</literal>” or “<literal>NTLM</literal>”. | 533 starting with “<literal>Negotiate</literal>” or “<literal>NTLM</literal>”. |
534 Further client requests will be proxied through the same upstream connection, | 534 Further client requests will be proxied through the same upstream connection, |
535 keeping the authentication context. | 535 keeping the authentication context. |
536 </para> | |
537 | |
538 <para> | |
539 In order for NTLM authentication to work, | |
540 it is necessary to enable keepalive connections to upstream servers. | |
541 The <link doc="ngx_http_proxy_module.xml" id="proxy_http_version"/> | |
542 directive should be set to “<literal>1.1</literal>” | |
543 and the <header>Connection</header> header field should be cleared: | |
544 <example> | |
545 upstream http_backend { | |
546 server 127.0.0.1:8080; | |
547 | |
548 ntlm; | |
549 } | |
550 | |
551 server { | |
552 ... | |
553 | |
554 location /http/ { | |
555 proxy_pass http://http_backend; | |
556 proxy_http_version 1.1; | |
557 proxy_set_header Connection ""; | |
558 ... | |
559 } | |
560 } | |
561 </example> | |
562 </para> | |
563 | |
564 <para> | |
565 <note> | |
566 When using load balancer methods other than the default | |
567 round-robin method, it is necessary to activate them before | |
568 the <literal>ntlm</literal> directive. | |
569 </note> | |
536 </para> | 570 </para> |
537 | 571 |
538 <para> | 572 <para> |
539 <note> | 573 <note> |
540 This directive is available as part of our | 574 This directive is available as part of our |