You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Igor Sereda (JIRA)" <ji...@apache.org> on 2010/01/15 20:48:54 UTC
[jira] Commented: (HTTPCLIENT-579) NTLMv2 support
[ https://issues.apache.org/jira/browse/HTTPCLIENT-579?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12800879#action_12800879 ]
Igor Sereda commented on HTTPCLIENT-579:
----------------------------------------
Guys,
It's a pity NTLMv2 won't be supported -- this seriously limits the use of the library in corporate environment, where Windows AD is used very often.
We have used Commons HttpClient 3.0 in our application (JIRA Desktop Client), but because of the lack of NTLMv2 we now dynamically switch to Java SDK-provided classes (java.net). They are inferior in some ways, but not only do they support NTLMv2, they are also integrated with Windows (through some native code, I guess) -- so if the user is logged in into a Windows domain, he is authenticated automatically, without asking for username and password! This is a killer reason to stay with java.net for a corporate app.
I understand there are issues with proprietary protocol and licensing, so I have no solution to offer. Just my two cents for those desperate to get NTLMv2 working.
Cheers,
Igor
> NTLMv2 support
> --------------
>
> Key: HTTPCLIENT-579
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-579
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpAuth
> Affects Versions: 3.0 Final
> Environment: WIndows 2000 Pro SP4, JDK 1.4.2
> Reporter: Konstantin Kasatkin
> Fix For: 3.1 Alpha 1
>
> Attachments: ntlmv2-session-security.diff, NTLMv2.rar, NTLMV21.RAR
>
>
> Hello guys,
> recently I've encouner the problem how to interact with HTTP resourses protected tough security policy allowed to use only NTLMv2 authorization scheme from a java application.
> Earlier I used httpclient to accomplish NTLMv1 authorization, but when I was requested to move to NTLMv2 I was surprised, that httpclient does not support this.
> I've dug all the Internet and found some articles and examples how to implement it, and finally having compiled all this enormous heap of information, I have a couple modified classes from httpclient project, that I'd like to share with you and other users of httpclient.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org