hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Oleg Kalnichevski (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HTTPCLIENT-1545) Possible infinite loop when WindowsNegotiateScheme authentication fails
Date Tue, 19 Aug 2014 09:15:19 GMT

    [ https://issues.apache.org/jira/browse/HTTPCLIENT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14102053#comment-14102053
] 

Oleg Kalnichevski commented on HTTPCLIENT-1545:
-----------------------------------------------

Ka-Lok

The test case included in your patch is failing for me with the following stack trace. Any
idea what may be happening?

{noformat}
Running org.apache.http.impl.auth.win.TestWindowsNegotiateScheme
Tests run: 1, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 1.675 sec <<< FAILURE!
- in org.apache.http.impl.auth.win.TestWindowsNegotiateScheme
testNoInfiniteLoopOnSPNOutsideDomain(org.apache.http.impl.auth.win.TestWindowsNegotiateScheme)
 Time elapsed: 1.519 sec  <<< ERROR!
java.lang.RuntimeException: Unexpected token
        at org.apache.http.impl.auth.win.WindowsNegotiateScheme.parseChallenge(WindowsNegotiateScheme.java:140)
        at org.apache.http.impl.auth.AuthSchemeBase.processChallenge(AuthSchemeBase.java:128)
        at org.apache.http.impl.auth.HttpAuthenticator.handleAuthChallenge(HttpAuthenticator.java:137)
        at org.apache.http.impl.execchain.MainClientExec.needAuthentication(MainClientExec.java:574)
        at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:292)
        at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:183)
        at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:87)
        at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:109)
        at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:119)
        at org.apache.http.impl.auth.win.TestWindowsNegotiateScheme.testNoInfiniteLoopOnSPNOutsideDomain(TestWindowsNegotiateScheme.java:106)
{noformat}

Oleg

> Possible infinite loop when WindowsNegotiateScheme authentication fails
> -----------------------------------------------------------------------
>
>                 Key: HTTPCLIENT-1545
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1545
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>          Components: HttpClient
>    Affects Versions: 4.4 Alpha1
>         Environment: Windows
>            Reporter: Ka-Lok Fung
>             Fix For: 4.4 Alpha2
>
>         Attachments: HTTPCLIENT-1545.patch.diff
>
>
> When {{WindowsNegotiateScheme}} authentication fails, it's possible for HttpClient to
retry the authentication in an endless loop because the {{continueNeeded}} flag is not set
to {{false}} when authentication fails.
> One possible way of causing authentication to fail is to use a service principle name
that is outside your Windows domain (e.g., HTTP/EXAMPLE.COM).



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


Mime
View raw message