RE: RE: NTLM and Post request

2004-03-08 Thread Piccoli, Lucio
> If i do the above step, client returns NTLM authorization header and > client is authenticated at step 6. No. step 3 the client only send the message contains the host name and the NT domain name of the client. The client is not authenticated at this stage! It requires a further challenge respon

Re: RE: NTLM and Post request

2004-03-08 Thread mganesh
Thanks Piccoli. > > String strAuth = request.getHeader("Authorization"); > > if (strAuth == null) > > { > > response.setStatus(response.SC_UNAUTHORIZED); > > response.setHeader("WWW-Authenticate", "NTLM"); > > return; > > } > > If i return a JSP page with status UNAUTHORIZED, the

RE: RE: NTLM and Post request

2004-03-08 Thread Piccoli, Lucio
> String strAuth = request.getHeader("Authorization"); > if (strAuth == null) > { > response.setStatus(response.SC_UNAUTHORIZED); > response.setHeader("WWW-Authenticate", "NTLM"); > return; > } > If i return a JSP page with status UNAUTHORIZED, then subsequent POST > request will

Re: RE: NTLM and Post request

2004-03-08 Thread mganesh
quest.getParameter("Username"); //It will be (null) %> Usernamme is <%=strUsername%> Regards Ganesh - Original Message - From: "Piccoli, Lucio" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Monday

RE: RE: NTLM and Post request

2004-03-07 Thread Piccoli, Lucio
> Im validating the credentials sent by the IE(Step 3 to Step 6). > Successfully got the username and domain name. OK so if I understand you correctly, you are completing step 6 of the NTLM authentication and have returned a HTTP 200 back to IE? > Then I will display a form to user in which his n

RE: NTLM and Post request

2004-03-05 Thread mganesh
Thanks piccoli. Yes you are right, this is the second step of authentication. After doing this step, IE returns NTLM authentication in its header. Im validating the credentials sent by the IE(Step 3 to Step 6). Successfully got the username and domain name. Then I will display a form to user in w

RE: NTLM and Post request

2004-03-04 Thread Piccoli, Lucio
>String strAuth = request.getHeader("Authorization"); > if (strAuth == null) > { >response.setStatus(response.SC_UNAUTHORIZED); >response.setHeader("WWW-Authenticate", "NTLM"); >return; > } > After executing the above part of the code, Internet Explorer returns the > NTLM credentials o

Re: NTLM and Post request

2004-03-04 Thread mganesh
re working fine.Im not able to understand the behaviour. CONTENT-LENGHT is for all the pages. Any help is appreciated. Thanks and Regards Ganesh - Original Message - From: "Piccoli, Lucio" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Frid

RE: NTLM and Post request

2004-03-04 Thread Piccoli, Lucio
> Im using NTLM authentication to authenticate the user in the intranet. > After authenticating the user the Post request stops working. > The content-length in the request is zero. Not sure what you mean by the 'post request' has stopped working. Do you mean tomcat stops accepting HTTP post