[
https://issues.apache.org/jira/browse/HTTPCLIENT-919?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12837717#action_12837717
]
Oleg Kalnichevski commented on HTTPCLIENT-919:
----------------------------------------------
Karl,
NTLMvis a very touchy subject. I understand a lot of hard work has gone into
this patch but I am afraid at this point of time it cannot be accepted. The
trouble is we, as well as ASF in general, cannot distribute NTLM
implementations for legal reasons. NTLM encryption algorithms may be covered by
patents held by Microsoft, which would make commercial users of open-source
NTLM implementations liable for the use of Microsoft intellectual property.
Various high ranking ASF people are aware of the situation and promised to have
this issue up with Microsoft, but to my knowledge there has been no practical
outcome so far.
I would even go as far as _strongly_ suggesting that the custom extensions to
HttpClient that implement NTLM encryption algorithms be removed from Lucene
Connector Framework, for the same reason they have been removed from HttpClient
For details on NTLM support in HttpClient 4.0 see:
http://hc.apache.org/httpcomponents-client/ntlm.html
Oleg
> NTLM implementation lacks support for NTLMv1, NTLMv2, and NTLM2 Session forms
> of NTLM
> -------------------------------------------------------------------------------------
>
> Key: HTTPCLIENT-919
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-919
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpAuth
> Reporter: Karl Wright
> Fix For: Future
>
> Attachments: ntlmv2-etc.patch
>
>
> The current HttpClient implementation lacks support for all enhancements to
> NTLM after Windows 95. That includes NTLMv1, NTLMv2, and NTLM2 Session
> Response varieties of the protocol.
> This seriously impacts the usability of HttpClient in enterprise situations,
> which has required the Lucene Connector Framework team to extend HttpClient
> to address the issue.
> I've attached a patch which contains the implementation used by LCF.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
