[jira] [Created] (CXF-5890) NTLM authentication does not work

["Kim Monnens (JIRA)" <ji...@apache.org>]

Kim Monnens created CXF-5890:
--------------------------------

             Summary: NTLM authentication does not work
                 Key: CXF-5890
                 URL: https://issues.apache.org/jira/browse/CXF-5890
             Project: CXF
          Issue Type: Bug
          Components: Core
    Affects Versions: 3.0.0
         Environment: Java: jdk1.7.0_13
Application server: Tomcat 6 / Weblogic 12.1.1
Operating system: Windows 7
            Reporter: Kim Monnens
            Priority: Blocker


>From a MicroSoft SharePoint WSDL I have generated java web service and client using wsdl2java.

On SharePoint (HTTP protocol) NTLM is enabled and I need to provide a specific username and password.

I have tried several solutions that I could find, but none of them seem to work.

Here is most of the code that I have tested. The result of the method should return the status of the server.

{code}
public String getStatus() {
	try {
		Authenticator.setDefault(new Authenticator() { 
			protected PasswordAuthentication getPasswordAuthentication() { 
				return new PasswordAuthentication ("DOMAIN\MY_USER", "MY_PASSWORD".toCharArray()); 
			} 
		});
		
		QueryService queryService = new QueryService();
		QueryServiceSoap port = queryService.getQueryServiceSoap();
		BindingProvider bindingProvider = (BindingProvider) port;
		bindingProvider.getRequestContext().put(BindingProvider.USERNAME_PROPERTY, "DOMAIN\MY_USER");
		bindingProvider.getRequestContext().put(BindingProvider.PASSWORD_PROPERTY, "MY_PASSWORD");
		//bindingProvider.getRequestContext().put("use.async.http.conduit", Boolean.TRUE);
		Client client = ClientProxy.getClient(port);
		HTTPConduit conduit = (HTTPConduit) client.getConduit();
		conduit.getClient().setAllowChunking(false);
		//conduit.getClient().setAutoRedirect(true);
		conduit.getAuthorization().setAuthorizationType("NTLM");
		conduit.getAuthorization().setUserName("DOMAIN\MY_USER");
		conduit.getAuthorization().setPassword("MY_PASSWORD");
		
		/*AuthorizationPolicy authorization = new AuthorizationPolicy();
		authorization.setAuthorizationType("NTLM");
		authorization.setUserName("DOMAIN\MY_USER");
		authorization.setPassword("MY_PASSWORD");
		conduit.setAuthorization(authorization);*/
		
		/*HTTPClientPolicy httpClientPolicy = new HTTPClientPolicy();
		httpClientPolicy.setConnectionTimeout(36000);
		httpClientPolicy.setAllowChunking(false);
		conduit.setClient(httpClientPolicy);*/
		return port.status();
	} catch (Exception e) {
		e.printStackTrace();
	}
	return "";
}
{code}

*Result on Tomcat 6:*
The service returns a result, but is does not use the provided username and password. It uses my account, the username name and password that I use to login on my PC.)

*Result on Weblogic 12.1.1:*
The service does not return a result, the following exception is thrown:

2014-07-18 08:58:10,503 WARN   org.apache.cxf.phase.PhaseInterceptorChain - Interceptor for {http://microsoft.com/webservices/OfficeServer/QueryService}QueryService#{http://microsoft.com/webservices/OfficeServer/QueryService}Status has thrown exception, unwinding now
org.apache.cxf.interceptor.Fault: Could not send Message.
        at org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:64)
        at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
        at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:514)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:423)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:326)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:279)
        at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
        at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:137)
        at sun.proxy.$Proxy128.status(Unknown Source)
...
Caused by: org.apache.cxf.transport.http.HTTPException: HTTP response '401: Unauthorized' when communicating with http://myurl/_vti_bin/search.asmx
        at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1573)
        at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1525)
        at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1330)
        at org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
        at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:638)
        at org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
        at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
        at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:514)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:423)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:326)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:279)
        at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
        at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:137)



--
This message was sent by Atlassian JIRA
(v6.2#6252)