hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Franklin (JIRA)" <j...@apache.org>
Subject [jira] Updated: (HTTPCLIENT-579) NTLMv2 support
Date Thu, 21 Feb 2008 05:28:49 GMT

     [ https://issues.apache.org/jira/browse/HTTPCLIENT-579?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Andrew Franklin updated HTTPCLIENT-579:
---------------------------------------

    Attachment: ntlmv2-session-security.diff

Konstantin,

I've added a patch to the code you provided above to handle the case in Windows Server 2003
where "Require NTLMv2 session security" is set as an option inside "Network security: Minimum
session security for NTLM SSP based (including secure RPC) servers".

The changes I made were a result of reading of: http://davenport.sourceforge.net/ntlm.html
+ experiments through WireShark so while I'd happily licence my change under the Apache Licence.
Although, I don't believe it's allowed as the original patch was under the LGPL.

Maybe it is possible as per Oleg's request that we can create an external project (on sourceforge
or wherever) with a LGPL licence?

Andrew

> NTLMv2 support
> --------------
>
>                 Key: HTTPCLIENT-579
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-579
>             Project: HttpComponents HttpClient
>          Issue Type: Improvement
>          Components: HttpAuth
>    Affects Versions: 3.0 Final
>         Environment: WIndows 2000 Pro SP4, JDK 1.4.2
>            Reporter: Konstantin Kasatkin
>             Fix For: 3.1 Alpha 1
>
>         Attachments: ntlmv2-session-security.diff, NTLMv2.rar
>
>
> Hello guys,
> recently I've encouner the problem how to interact with HTTP resourses protected tough
security policy allowed to use only NTLMv2 authorization scheme from a java application.
> Earlier I used httpclient to accomplish NTLMv1 authorization, but when I was requested
to move to NTLMv2 I was surprised, that httpclient does not support this.
> I've dug all the Internet and found some articles and examples how to implement it, and
finally having compiled all this enormous heap of information, I have a couple modified classes
from httpclient project, that I'd like to share with you and other users of httpclient.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


Mime
View raw message