Mailing-List: contact axis-dev-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: axis-dev@ws.apache.org
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: NTLM Authentication
Date: Mon, 15 Mar 2004 14:38:53 -0000
Message-ID: 
 <BEE603600AE93E478A8313A9E77890B805417C@ukglasex01.mottmac.group.int>
Thread-Topic: NTLM Authentication
Thread-Index: AcQKmzzijppyOQQJTEihb96DQYJrXQ==
From: "Russell, Brian" <Brian.Russell@mottmac.com>
To: <axis-dev@ws.apache.org>

I posted to the axis-user group recently, enquiring about support within
Axis for using proxies that mandate using NTLM. There was no response to
my post.

To give a little bit of background, we have a major customer for whom we
have developed a client server application. The requirements were to
allow the clients to operate over their corporate internet connection to
a remote server. Their security restrictions mandated using http, and
port 80 as the external server port to allow access through their
firewall. We developed the system using Axis, as this gave us a head
start remoting our method calls, and keeping within the comms
requirements.

However, when we have gone to install the system, the clients MS proxy
server is inhibiting the http requests that our Axis client is making,
because it fails to authenticate with the proxy using NTLM.

We have done some experimentation using the standard Java class
java.net.URLConnection, and with JDK 1.4.2 upwards, this succesfully
authenticates with the proxy using NTLM.

I am therefore trying to understand why the authentication is not
happening with Axis. Does axis internally have it's own replacement for
the Java URLConnection which is why the support from JDK1.4.2 is not
automatically being picked up?

I have not tried the Axis 1.2 alpha yet. Is it likely that this will
support NTLM proxies? If not, how big a job is it to add this support?
Is it something that I could do (with a reasonably limited understanding
of the Axis internals) and then add back to CVS? Is it something that is
planned (albeit NTLM is quite out dated, and from what I can gather, not
particularily secure)?

If I can't use Axis, my other options are to implement custom http
request/response message handling, which I would very much like to avoid
doing.

Any comments or help would be appreciated.

Thanks,

Brian.