To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=104417 Issue #|104417 Summary|webdav NTLMv2 support Component|ucb Version|OOo 3.1 Platform|Unknown URL| OS/Version|All Status|UNCONFIRMED Status whiteboard| Keywords| Resolution| Issue type|ENHANCEMENT Priority|P4 Subcomponent|code Assigned to|mhu Reported by|unordained
------- Additional comments from unordai...@openoffice.org Fri Aug 21 18:09:07 +0000 2009 ------- 3.1.0 provides working NTLM support (thank you), as measured against jCIFS's NtlmHttpServlet. Switching to JESPA's NtlmHttpServlet (which adds support for NTLMv2, because of Vista/IE8 switching to disallowing NTLMv1) seems to work fine with IE6-8 and Firefox on XP and Vista, but breaks OOo 3.1's NTLM. It will attempt to log in, but JESPA then logs an error server-side and throws a 403: java.io.IOException: Not a Type 1 message. at jcifs.ntlmssp.Type1Message.parse(Type1Message.java:232) at jcifs.ntlmssp.Type1Message.<init>(Type1Message.java:88) at jespa.ntlm.NtlmSecurityProvider.acceptSecContext(NtlmSecurityProvider.java:944) at jespa.http.HttpSecurityService.doAuthenticate(HttpSecurityService.java:680) at jespa.http.HttpSecurityService.doFilter(HttpSecurityService.java:772) It looks to me like the updated version of "neon" may be attempting NTLMv2, but not implementing it correctly. (If you google for this error, one possible fix involves apache forwarding REMOTE_PORT -- this happens with and without this option, and with and without apache in front of tomcat. Doesn't seem to be the same situation.) I can't tell from neon's mailing lists if they intended to have NTLMv2 or not -- there are some subversion commits related to it, at least. Also, in the 3.0 source, neon appears as a simple library and the version number was easy to determine and cross-reference; in the 3.1 source, it looks like the neon code is directly copied into OOo? Is it being maintained separately? I was trying to figure out what version 3.1 included, so I could match it against the neon changelog. --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@ucb.openoffice.org For additional commands, e-mail: issues-h...@ucb.openoffice.org --------------------------------------------------------------------- To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
