You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Ricardo Pereira (JIRA)" <ji...@apache.org> on 2013/07/07 04:19:48 UTC
[jira] [Reopened] (HTTPCLIENT-1383) NTLM authentication can enter
in infinite loop
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1383?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ricardo Pereira reopened HTTPCLIENT-1383:
-----------------------------------------
Tested with both the latest trunk and branch 4.2.x.
The "original" issue is fixed but, even if not likely to happen, it's still possible to get the authentication to enter in infinite loop.
> NTLM authentication can enter in infinite loop
> ----------------------------------------------
>
> Key: HTTPCLIENT-1383
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1383
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpAuth
> Affects Versions: Snapshot
> Reporter: Ricardo Pereira
> Fix For: 4.2.6, 4.3 Beta3
>
> Attachments: ClientNtlmProxyAuthentication.java, wire.log
>
>
> If the NTLM proxy sends, always, a challenge message the authentication enters in infinite loop.
> This happened with an user account that got suspended because of too many failed authentication attempts, after that the server started to send, always, the (same) challenge message causing an infinite loop with the HttpClient.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org