Hussein,

I'm using XXE to edit documents stored on a remote server that is protected 
with NTLM authentication.  The authentication itself works just fine, but the 
credentials are not being properly cached between editing sessions.  I have 
tracked this down to a slight problem in the AuthenticatorModuleImpl class.  

When a java.net.Authenticator is challanged for credentials in NTLM scheme, a 
call to java.net.Authenticator's getRequestingPrompt() will return an empty 
string (not a null as I would expect).  When this is flushed out to the 
preferences.properties and read back in, the prompt is read back in as a null 
value.  This causes the AuthenticatorModuleImpl.Entry method boolean equals to 
fail on otherwise equal entries which means that the AuthenticatorModuleImpl 
doesn't recognize your saved credentials.  In order to fix this issue, you can 
modify the AuthenticatorModuleImpl.Entry.parse method from:

if (line.length() > 7)
  entry.prompt = line.substring(7);

to:

if (line.length() > 7)
  entry.prompt = line.substring(7);
else 
  entry.prompt = "";

Please let me know if I'm not being clear enough.

Any word on a release date for XXE > 3.7.0?

Cheers,
Mike


-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
http://www.xmlmind.com/pipermail/xmleditor-support/attachments/20080102/1105b632/attachment.htm
 

Reply via email to