Error 401 with concurrent requests

[jon4hz]

When I tried to use this library with concurrent api calls, I sometimes get an error 401.

url, user, password := "http://www.example.com/secrets", "robpike", "pw123"
client := &http.Client{
  Transport: ntlmssp.Negotiator{
    RoundTripper:&http.Transport{},
  },
}
var wg sync.WaitGroup
for i := 0; i < 10; i++ {
  wg.Add(1)
  go func() {
    defer wg.Done()
    req, _ := http.NewRequest("GET", url, nil)
    req.SetBasicAuth(user, password)
    res, _ := client.Do(req)
    fmt.Println(resp.StatusCode)
  }()
}
wg.Wait()

If I make sure that the client only uses 1 active connection, I don't get any error. So I'm guessing this is a bug, right?

client := &http.Client{
  Transport: ntlmssp.Negotiator{
    RoundTripper:&http.Transport{
      MaxConnsPerHost: 1,  // limit connections
    },
  },
}

[Neustradamus]

@jon4hz: After my contact to Microsoft Security team, a new go-ntlmssp team has been selected.
A lot of good work has been done :)

Can you look if your ticket is solved with latest changes?

• https://github.com/Azure/go-ntlmssp
• https://github.com/Azure/go-ntlmssp/releases

Thanks in advance.

[jon4hz]

Unfortunately not, I've switched jobs in the meantime and now work at a linux only company where I don't have to deal with ntlm anymore :)

Feel free to close the issue, tho