[
https://issues.apache.org/jira/browse/HTTPCLIENT-579?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12800879#action_12800879
]
Igor Sereda commented on HTTPCLIENT-579:
----------------------------------------
Guys,
It's a pity NTLMv2 won't be supported -- this seriously limits the use of the
library in corporate environment, where Windows AD is used very often.
We have used Commons HttpClient 3.0 in our application (JIRA Desktop Client),
but because of the lack of NTLMv2 we now dynamically switch to Java
SDK-provided classes (java.net). They are inferior in some ways, but not only
do they support NTLMv2, they are also integrated with Windows (through some
native code, I guess) -- so if the user is logged in into a Windows domain, he
is authenticated automatically, without asking for username and password! This
is a killer reason to stay with java.net for a corporate app.
I understand there are issues with proprietary protocol and licensing, so I
have no solution to offer. Just my two cents for those desperate to get NTLMv2
working.
Cheers,
Igor
> NTLMv2 support
> --------------
>
> Key: HTTPCLIENT-579
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-579
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpAuth
> Affects Versions: 3.0 Final
> Environment: WIndows 2000 Pro SP4, JDK 1.4.2
> Reporter: Konstantin Kasatkin
> Fix For: 3.1 Alpha 1
>
> Attachments: ntlmv2-session-security.diff, NTLMv2.rar, NTLMV21.RAR
>
>
> Hello guys,
> recently I've encouner the problem how to interact with HTTP resourses
> protected tough security policy allowed to use only NTLMv2 authorization
> scheme from a java application.
> Earlier I used httpclient to accomplish NTLMv1 authorization, but when I was
> requested to move to NTLMv2 I was surprised, that httpclient does not support
> this.
> I've dug all the Internet and found some articles and examples how to
> implement it, and finally having compiled all this enormous heap of
> information, I have a couple modified classes from httpclient project, that
> I'd like to share with you and other users of httpclient.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
