You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by bu...@apache.org on 2006/01/01 10:35:46 UTC
DO NOT REPLY [Bug 38072] - Http Client: NTLM Authorization does not work with servers that require NTLM response in the authorization
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=38072>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=38072
------- Additional Comments From twaisel@mercury.com 2006-01-01 10:35 -------
Hi Oleg,
I understand, but from what I saw we don't send the NTLM response at all, only
the LAN Manager
>From your reply I understand that this is also a part of NTLMv2?,
I was reading a tutorial on NTLM and it seems to say that there should be an
NTLM reponse for both v1 and v2 (though different)
(http://davenport.sourceforge.net/ntlm.html#theType3Message, see relevant part
below)
Thanks,
Tali.
Responding to the Challenge
The client creates one or more responses to the Type 2 challenge, and sends
these in the Type 3 message. There are five types of responses:
LM (LAN Manager) Response - Sent by most clients, this is the "original"
response type.
NTLM Response - This is sent by NT-based clients, including Windows 2000 and
XP.
NTLMv2 Response - A newer response type, introduced in Windows NT Service Pack
4. This replaces the NTLM response on systems that have NTLM version 2 enabled.
LMv2 Response - The replacement for the LM response on NTLM version 2 systems.
NTLM2 Session Response - Used when NTLM2 session security is negotiated without
NTLMv2 authentication, this scheme alters the semantics of both the LM and NTLM
responses.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-dev-help@jakarta.apache.org