[
https://issues.apache.org/jira/browse/HTTPCLIENT-579?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrew Franklin updated HTTPCLIENT-579:
---------------------------------------
Attachment: ntlmv2-session-security.diff
Konstantin,
I've added a patch to the code you provided above to handle the case in Windows
Server 2003 where "Require NTLMv2 session security" is set as an option inside
"Network security: Minimum session security for NTLM SSP based (including
secure RPC) servers".
The changes I made were a result of reading of:
http://davenport.sourceforge.net/ntlm.html + experiments through WireShark so
while I'd happily licence my change under the Apache Licence. Although, I don't
believe it's allowed as the original patch was under the LGPL.
Maybe it is possible as per Oleg's request that we can create an external
project (on sourceforge or wherever) with a LGPL licence?
Andrew
> NTLMv2 support
> --------------
>
> Key: HTTPCLIENT-579
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-579
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpAuth
> Affects Versions: 3.0 Final
> Environment: WIndows 2000 Pro SP4, JDK 1.4.2
> Reporter: Konstantin Kasatkin
> Fix For: 3.1 Alpha 1
>
> Attachments: ntlmv2-session-security.diff, NTLMv2.rar
>
>
> Hello guys,
> recently I've encouner the problem how to interact with HTTP resourses
> protected tough security policy allowed to use only NTLMv2 authorization
> scheme from a java application.
> Earlier I used httpclient to accomplish NTLMv1 authorization, but when I was
> requested to move to NTLMv2 I was surprised, that httpclient does not support
> this.
> I've dug all the Internet and found some articles and examples how to
> implement it, and finally having compiled all this enormous heap of
> information, I have a couple modified classes from httpclient project, that
> I'd like to share with you and other users of httpclient.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
