You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Andrew Franklin (JIRA)" <ji...@apache.org> on 2008/02/21 06:28:49 UTC
[jira] Updated: (HTTPCLIENT-579) NTLMv2 support
[ https://issues.apache.org/jira/browse/HTTPCLIENT-579?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Franklin updated HTTPCLIENT-579:
---------------------------------------
Attachment: ntlmv2-session-security.diff
Konstantin,
I've added a patch to the code you provided above to handle the case in Windows Server 2003 where "Require NTLMv2 session security" is set as an option inside "Network security: Minimum session security for NTLM SSP based (including secure RPC) servers".
The changes I made were a result of reading of: http://davenport.sourceforge.net/ntlm.html + experiments through WireShark so while I'd happily licence my change under the Apache Licence. Although, I don't believe it's allowed as the original patch was under the LGPL.
Maybe it is possible as per Oleg's request that we can create an external project (on sourceforge or wherever) with a LGPL licence?
Andrew
> NTLMv2 support
> --------------
>
> Key: HTTPCLIENT-579
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-579
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpAuth
> Affects Versions: 3.0 Final
> Environment: WIndows 2000 Pro SP4, JDK 1.4.2
> Reporter: Konstantin Kasatkin
> Fix For: 3.1 Alpha 1
>
> Attachments: ntlmv2-session-security.diff, NTLMv2.rar
>
>
> Hello guys,
> recently I've encouner the problem how to interact with HTTP resourses protected tough security policy allowed to use only NTLMv2 authorization scheme from a java application.
> Earlier I used httpclient to accomplish NTLMv1 authorization, but when I was requested to move to NTLMv2 I was surprised, that httpclient does not support this.
> I've dug all the Internet and found some articles and examples how to implement it, and finally having compiled all this enormous heap of information, I have a couple modified classes from httpclient project, that I'd like to share with you and other users of httpclient.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org