On Wed, 2008-02-27 at 15:18 -0800, [EMAIL PROTECTED] wrote: > Hi Oleg, >
Hi Cathy > I am investigating what it would take to add NTLMv2 support to the Apache > HttpClient as well as integrated Windows authentication for both NTLMv1 and > v2. I have seen your name on numerous messages in the forum regarding NTLM, > so thought I write you. Is this support something you would be interested to > see contributed back to the HttpClient? What are the restrictions on this? > Absolutely. We would love to see a better support for NTLMv2 in HttpClient. However, we cannot accept any code unless we are absolutely sure (1) it can be licensed or re-licensed under ASLv2 and (2) it does not infringe on any Microsoft patents. The latter condition pretty much implies some company with close ties to Microsoft and lots of legal muscles going into the trouble of taking this issue up directly with Microsoft. Exactly for the above stated reasons we would like to use an external library for the NTLM support to be free of having to deal with all these legal troubles. > I saw on the NTLM FAQ page that the use of jCIFS is currently under > investigation for licensing issues. Has anything more come of that? > No, it has not. No one volunteered so far to do all the leg work. > Are there any plans to add support for NTLMv2 or the integrated Windows > authentication in the near future? > Currently not a single active committer on the project expressed any interest in working on it in the foreseeable future. So, essentially we are waiting for some external contributor to turn up with a solution "scratching his/her own itch", so to speak. Oleg PS: I am sending a copy of this message to the HttpComponents dev list to keep the rest of the team in the loop. It would be really great if you subscribed to the list, should you be interested in discussing the subject further. http://hc.apache.org/mail-lists.html > Thanks. > Cathy Kegley > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
