NTLM / Kerberos test infrastructure

We need to be able to test Nuxeo and Nuxeo Connect Client with NTLM and Kerberos :

• be able to authenticate to Nuxeo using NTLM or Kerberos
  • we already have plugins for that
• be able to acces Connect Server (using Nuxeo Connect Client), even if the http proxy requires NTLM authentication
  • the apache lib we use should be able to do that

In both cases, we are missing a real test infrastructure :

• so we can test some configuration for support purpose
• so we can make Connect Client work

From my understanding, this infrastructure should contain :

• a Windows server (responsible for holding accounts and providing auth)
• an http proxy that uses NTLM
• a windows client that can authenticate via NTLM to the Windows server
• a windows client that can authenticate via Kerberos to the Wndows server

All of this can be VM, but we may need to have these VMs internally hosted to avoid having Windows boxes with a lot of open port on the Internet (right ?).