> If i do the above step, client returns NTLM authorization header and
> client is authenticated at step 6.
No. step 3 the client only send the message contains the host name and
the NT domain name of the client. The client is not authenticated at
this stage! It requires a further challenge respon
Thanks Piccoli.
> > String strAuth = request.getHeader("Authorization");
> > if (strAuth == null)
> > {
> > response.setStatus(response.SC_UNAUTHORIZED);
> > response.setHeader("WWW-Authenticate", "NTLM");
> > return;
> > }
> > If i return a JSP page with status UNAUTHORIZED, the
> String strAuth = request.getHeader("Authorization");
> if (strAuth == null)
> {
> response.setStatus(response.SC_UNAUTHORIZED);
> response.setHeader("WWW-Authenticate", "NTLM");
> return;
> }
> If i return a JSP page with status UNAUTHORIZED, then subsequent POST
> request will
quest.getParameter("Username"); //It will be
(null)
%>
Usernamme is
<%=strUsername%>
Regards
Ganesh
- Original Message -
From: "Piccoli, Lucio" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday
> Im validating the credentials sent by the IE(Step 3 to Step 6).
> Successfully got the username and domain name.
OK so if I understand you correctly, you are completing step 6 of the
NTLM authentication and have returned a HTTP 200 back to IE?
> Then I will display a form to user in which his n
Thanks piccoli.
Yes you are right, this is the second step of authentication.
After doing this step, IE returns NTLM authentication in its header.
Im validating the credentials sent by the IE(Step 3 to Step 6).
Successfully got the username and domain name.
Then I will display a form to user in w
>String strAuth = request.getHeader("Authorization");
> if (strAuth == null)
> {
>response.setStatus(response.SC_UNAUTHORIZED);
>response.setHeader("WWW-Authenticate", "NTLM");
>return;
> }
> After executing the above part of the code, Internet Explorer returns
the
> NTLM credentials o
re working fine.Im not able to understand the
behaviour.
CONTENT-LENGHT is for all the pages.
Any help is appreciated.
Thanks and Regards
Ganesh
- Original Message -
From: "Piccoli, Lucio" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Frid
> Im using NTLM authentication to authenticate the user in the
intranet.
> After authenticating the user the Post request stops working.
> The content-length in the request is zero.
Not sure what you mean by the 'post request' has stopped working. Do you
mean tomcat stops accepting HTTP post