hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Karl Wright (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HTTPCLIENT-1268) NTLM: Authenticating against some servers throws an exception
Date Fri, 21 Dec 2012 13:35:13 GMT

    [ https://issues.apache.org/jira/browse/HTTPCLIENT-1268?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13537857#comment-13537857

Karl Wright commented on HTTPCLIENT-1268:

Here's the status.

Against a Windows 2003 Server that has "NTLMv2 only" configured, authentication still fails
with the latest change.  And here's the weird part: the ManifoldCF-special commons-httpclient
3.1 ManifoldCF used to work with authenticates fine, but the HttpComponents/HttpClient 4.2.2
NTLMEngine fails (BEFORE the current series of improvements) and yet the latter seems functionally
identical to the former.  So we're doing packet captures to determine the difference.  Stay

NTLM2SessionResponse on Windows 2008 Server R2 still passes either way, as does NTLM and LM
on Windows 2000 Server and Windows 2003 server.  Still waiting for confirmation about NTLM
and LM on Windows 2008 Server R2 - there was a report of failure, but there has been a fix
since then, so it needs to be re-evaluated.

Over the holidays I may possibly have time to script a Windows 2008 Server R2 setup/teardown
in EC2, for the purpose of testing this stuff via an automated integration test.  For this
to be successful, ideally it would be great to have the following:

- An Apache MSDN license number we can include with the test, to keep the licensing fees low
- A place to put tests like this in the HttpClient tree

Since the test will likely be written in Python (unless there's experience around with EC2
libraries in Java) I'd also like some acknowledgement that this kind of thing is OK with everyone.
 We need to answer question such as - does it get shipped, or does it just hang around as
a convenience for developers?

> NTLM: Authenticating against some servers throws an exception
> -------------------------------------------------------------
>                 Key: HTTPCLIENT-1268
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1268
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>    Affects Versions: 4.2.2
>            Reporter: Karl Wright
>            Assignee: Karl Wright
>             Fix For: 4.2.3, 4.3 Alpha1
>         Attachments: HTTPCLIENT-1268.patch
> One of my real-world testers has determined that authenticating against latest Microsoft
NTLM builds, using NTLM2SessionResponse, the following exception is thrown:
> java.lang.ArrayIndexOutOfBoundsException: 190
> I will supply more details (and a patch) when I get them.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org

View raw message