[
https://issues.apache.org/jira/browse/HTTPCLIENT-1268?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13537857#comment-13537857
]
Karl Wright commented on HTTPCLIENT-1268:
-----------------------------------------
Here's the status.
Against a Windows 2003 Server that has "NTLMv2 only" configured, authentication
still fails with the latest change. And here's the weird part: the
ManifoldCF-special commons-httpclient 3.1 ManifoldCF used to work with
authenticates fine, but the HttpComponents/HttpClient 4.2.2 NTLMEngine fails
(BEFORE the current series of improvements) and yet the latter seems
functionally identical to the former. So we're doing packet captures to
determine the difference. Stay tuned...
NTLM2SessionResponse on Windows 2008 Server R2 still passes either way, as does
NTLM and LM on Windows 2000 Server and Windows 2003 server. Still waiting for
confirmation about NTLM and LM on Windows 2008 Server R2 - there was a report
of failure, but there has been a fix since then, so it needs to be re-evaluated.
Over the holidays I may possibly have time to script a Windows 2008 Server R2
setup/teardown in EC2, for the purpose of testing this stuff via an automated
integration test. For this to be successful, ideally it would be great to have
the following:
- An Apache MSDN license number we can include with the test, to keep the
licensing fees low
- A place to put tests like this in the HttpClient tree
Since the test will likely be written in Python (unless there's experience
around with EC2 libraries in Java) I'd also like some acknowledgement that this
kind of thing is OK with everyone. We need to answer question such as - does
it get shipped, or does it just hang around as a convenience for developers?
> NTLM: Authenticating against some servers throws an exception
> -------------------------------------------------------------
>
> Key: HTTPCLIENT-1268
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1268
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Affects Versions: 4.2.2
> Reporter: Karl Wright
> Assignee: Karl Wright
> Fix For: 4.2.3, 4.3 Alpha1
>
> Attachments: HTTPCLIENT-1268.patch
>
>
> One of my real-world testers has determined that authenticating against
> latest Microsoft NTLM builds, using NTLM2SessionResponse, the following
> exception is thrown:
> java.lang.ArrayIndexOutOfBoundsException: 190
> I will supply more details (and a patch) when I get them.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
