[esb-issues] [JBoss JIRA] Commented: (JBESB-3275) SOAPClient may fail NTLM negotiations

[Magesh Kumar B (JIRA)]

    [ https://jira.jboss.org/browse/JBESB-3275?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12536942#action_12536942 ] 

Magesh Kumar B commented on JBESB-3275:
---------------------------------------

There are three types of negotiations:

1. LM responses alone (Windows Server 2003 = IIS6)
2. LM & NTLMv1 responses
3. LM & NTLMv2 responses

Apache Commons HttpClient support only 1.

http://hc.apache.org/httpclient-3.x/authentication.html#Known_limitations_and_problems

> SOAPClient may fail NTLM negotiations
> -------------------------------------
>
>                 Key: JBESB-3275
>                 URL: https://jira.jboss.org/browse/JBESB-3275
>             Project: JBoss ESB
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Web Services
>    Affects Versions: 4.7
>            Reporter: Kevin Conner
>            Assignee: Magesh Kumar B
>             Fix For: 4.9
>
>
> The soapui client may fail NTLM negotiations if no keep-alive is set on the connection.
> Some servers may respond with a directive to close each connection, which soapui honours.  If this happens then each step of the NTLM negotiation will be handled over a separate connection and will fail.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira