[jcifs] REPOST: Problem with Ntlm Http Authentication

[Michael B. Allen]

On Tue, 11 Feb 2003 23:16:16 +0530
Rupesh Kumar <rupesh.kumar at blr.techspan.com> wrote:

> Hi,
> Has anyone tried the NtlmHttpAuthExample servlet after setting the Security
> option for MSIE to "prompt for username and password". When the dialog box
> pops up I enter a fake username and password. The NtlmHttpFilter
> authenticates and I can view the generated page with this fake username and
> password!!
> I am starting with a new browser window so any previous sessions are closed.
> 
> I must be missing something crucial but can't figure out what.

I am not aware of such a problem. I explained one possible scenario in
response to you question previously. Again we would still need pcaket
traces to determine what the problem is definitively.

-- 
A  program should be written to model the concepts of the task it
performs rather than the physical world or a process because this
maximizes  the  potential  for it to be applied to tasks that are
conceptually  similar and, more important, to tasks that have not
yet been conceived.