Mailing-List: contact dev-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpComponents Project" <dev@hc.apache.org>
Date: Fri, 21 Dec 2012 13:35:13 +0000 (UTC)
From: "Karl Wright (JIRA)" <jira@apache.org>
To: dev@hc.apache.org
Message-ID: <JIRA.12618871.1354712712192.42284.1356096913059@arcas>
In-Reply-To: <JIRA.12618871.1354712712192@arcas>
References: <JIRA.12618871.1354712712192@arcas>
Subject: [jira] [Commented] (HTTPCLIENT-1268) NTLM: Authenticating against
 some servers throws an exception
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HTTPCLIENT-1268?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13537857#comment-13537857 ] 

Karl Wright commented on HTTPCLIENT-1268:
-----------------------------------------

Here's the status.

Against a Windows 2003 Server that has "NTLMv2 only" configured, authentication still fails with the latest change.  And here's the weird part: the ManifoldCF-special commons-httpclient 3.1 ManifoldCF used to work with authenticates fine, but the HttpComponents/HttpClient 4.2.2 NTLMEngine fails (BEFORE the current series of improvements) and yet the latter seems functionally identical to the former.  So we're doing packet captures to determine the difference.  Stay tuned...

NTLM2SessionResponse on Windows 2008 Server R2 still passes either way, as does NTLM and LM on Windows 2000 Server and Windows 2003 server.  Still waiting for confirmation about NTLM and LM on Windows 2008 Server R2 - there was a report of failure, but there has been a fix since then, so it needs to be re-evaluated.

Over the holidays I may possibly have time to script a Windows 2008 Server R2 setup/teardown in EC2, for the purpose of testing this stuff via an automated integration test.  For this to be successful, ideally it would be great to have the following:

- An Apache MSDN license number we can include with the test, to keep the licensing fees low
- A place to put tests like this in the HttpClient tree

Since the test will likely be written in Python (unless there's experience around with EC2 libraries in Java) I'd also like some acknowledgement that this kind of thing is OK with everyone.  We need to answer question such as - does it get shipped, or does it just hang around as a convenience for developers?


> NTLM: Authenticating against some servers throws an exception
> -------------------------------------------------------------
>
>                 Key: HTTPCLIENT-1268
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1268
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>    Affects Versions: 4.2.2
>            Reporter: Karl Wright
>            Assignee: Karl Wright
>             Fix For: 4.2.3, 4.3 Alpha1
>
>         Attachments: HTTPCLIENT-1268.patch
>
>
> One of my real-world testers has determined that authenticating against latest Microsoft NTLM builds, using NTLM2SessionResponse, the following exception is thrown:
> java.lang.ArrayIndexOutOfBoundsException: 190
> I will supply more details (and a patch) when I get them.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org