Remove Header

shannontuten

I'd like to remove just the Negotiate from a WWW-Authenticate header, anyone have a suggest for how to accomplish this?

I'm SSL offloading a website that is offering up Basic, Negotiate and NTLM in the Auth header. I'd like to remove just the negotiate if that possible such that the client doesn't try to use the Negotiate.

Any tips would be appreciated.

tmitsuhata

Hi shannontuten,
In case it still helps, you can use aFleX to remove the "WWW-Authenticate: Negotiate" option header from HTTP header. Here is a sample aFleX.

when HTTP_RESPONSE {
set auth [HTTP::header values WWW-Authenticate]
if {$auth contains "Negotiate"} {
HTTP::header remove WWW-Authenticate
regsub -all Negotiate $auth {} newauth
set cnt_auth [llength $newauth]
for {set i 0} {$i < $cnt_auth} {incr i} {
HTTP::header insert WWW-Authenticate [lindex $newauth $i]
}
}
}

Please note that the above aFleX includes some commands supported in ACOS 2.7.0 and above.
Hope it helps.