[jcifs] NTLM + TOMCAT 4.1.18 + IE 6.0 (WINDOWS (98)

[Allen, Michael B (RSCH)]

Both etheral_dump.pcap and file_capture.pcap appear to show the same behavior which is:

C: GET foo
S: 401 w/ WWW-Authenticate: NTLM
C: GET foo w/ Authorization: NTLM type-1-message
S: 401 w/ WWW-Authenticate: NTLM type-2-message

and that's it. This is normal negotiation up to this point but the client should then issue a third
get with the type-3-message. But it just doesn't. It's possible that it did not like the format of the
type-2-message or header arrangements.

The definitive way to resolve the issue is to get a packet capture of a Win98/IE6 client
communicating successfully with an NTLM HTTP authentication server preferrably IIS. Do
you (or anyone else) have access to such a server? Special setup will be required to get the
capture. Either netmon must be installed on the client or server or a linux machine with ethereal
needs to be on a hub (not a switch) with the client or server. Also there might be additional
setup for Win98 to emulate how NT "joins" a domain but I'm not famililar with that at all.

Mike

> -----Original Message-----
> From:	Vijayanarayanaswamy Karthikeyan
> Sent:	Monday, March 24, 2003 1:13 AM
> To:	Allen, Michael B (RSCH)
> Subject:	RE: [jcifs] NTLM + TOMCAT 4.1.18 + IE 6.0 (WINDOWS (98)
> 
> Attached is the ethereal dump created. Please look for the entries
> related to NTLM. Hope this would help you to solve the problem with windows 98.
> 
> Karthik
> 
> 
> 
> -----Original Message-----
> Subject: RE: [jcifs] NTLM + TOMCAT 4.1.18 + IE 6.0 (WINDOWS (98)
> 
> 
> There was a similar report some time ago. I see one message from Jan 17 for example.
> Unfortunately I do not have a very good setup to test this. My Win98 machine is currently
> out of the loop and it certainly doesn't have IE6. So I really have no idea how Win98 will
> work with the NtlmHttpFilter. I didn't really consider it early on because it was not clear to
> me how Win98 clients can 'join' a domain like NT, W2K, and XP. Apparently you can
> simulate that behavior enough to satisfy the Filter but I'm not knowlegable in the topic.
> The only recourse here is to get packet traces and examine them closely. I currently have
> no plans to investigate this futher but if you can supply a packet trace I will at least look
> at it. It might be something trivial.
> 
> Mike
> 
> > -----Original Message-----
> > From: Vijayanarayanaswamy Karthikeyan
> > Sent: Monday, March 10, 2003 11:45 PM
> > To:   jcifs at lists.samba.org
> > Subject:      [jcifs] NTLM + TOMCAT 4.1.18 + IE 6.0 (WINDOWS (98)
> >
> > Hi All,
> >
> > I'm trying to setup  NTLM Authentication based on the above combination.  It seems that
> NtlmHttpFilter does not work with IE 6.0 on Windows 98. I get a DNS Error page.  Whereas the same thing works
> > with Windows 2000 Professional Edition and Windows NT (IE 5.5).  Is it something  wrong with IE 6.0 or NtlmHttpFilter?
> >
> > << File: etheral_dump.txt >>  << File: file_capture.txt >>