[jcifs] Problem with NtlmHttpFilter and Apache2

[Wouter van Reeven]

Hi, it's me again :-( So, I decided to download the mod_jk sources (version 1.2.15), compile and install it. Again, on my Debian test machine in VMWare everything works perfectly ok. However, doing the same install on RedHat (apart from paths since RedHat uses /etc/httpd and Debian /etc/apache2) and again the authentication fails. I see that the first and second step have the same HttpSession ID but it never makes it to the third step. I'll add some more debugging statements and come back here again.


Thanks, Wouter

-- 
AMIS Services BV
Edisonbaan 15
Postbus 24
3430 AA  NIEUWEGEIN

T +31 (30)6016000
F +31 (30)6016001



-----Original Message-----
From: Michael B Allen [mailto:mba2000 at ioplex.com]
Sent: Wed 14-Jun-06 19:13
To: Wouter van Reeven
Cc: yannick at smellyfrog.com; jcifs at lists.samba.org
Subject: Re: [jcifs] Problem with NtlmHttpFilter and Apache2
 
On Wed, 14 Jun 2006 18:15:23 +0200
"Wouter van Reeven" <Wouter.van.Reeven at AMIS.nl> wrote:

> Hi Yannick,
> 
> 
> Thanks for your reply. Actually, I don't use mod_jk. But I'll check to see if mod_jk is loaded and if so, I will unload it. To connect Apache2 to Tomcat I use mod_rewrite and mod_proxy. Perhaps there's a problem there too? Did you install mod_jk by hand compiled from sources from the Tomcat website?

Maybe. The NTLM HTTP Authentication protocol is a stateful 3 message
handshake. Look at the bottom of the NTLM HTTP Filter docs for details. In
particular the 2nd and 3rd messages need to share the same HTTP session
to store the transaction state. It's a delicate thing that is the source
of 90% of problems reported on this list.

Mike

-- 
Michael B Allen
PHP Extension for SSO w/ Windows Group Authorization
http://www.ioplex.com/



-------------- next part --------------
HTML attachment scrubbed and removed