XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 5.0
    • 5.0.2
    • None
    • None

    Description

      My Authentication endpoint returns an NTLM Message header like this:

      "WWW-Authenticate: NTLM TlRMTVNTUAACAAAABgAGADgAAAAF.....QByAGcALgBkAGUABwAIAMG9LHviQtYBAAAAAA=="
      

      Upon reading this header with AuthChallengeParser hc parses this field using the code in line 70:

      if (!cursor.atEnd() && buffer.charAt(cursor.getPos()) == EQUAL_CHAR) {
                      cursor.updatePos(cursor.getPos() + 1);
                      final String value = tokenParser.parseValue(buffer, cursor, DELIMITER);
                      return new BasicNameValuePair(token, value);
      }
      

      When reading the first "=" char of the message, it interprets the value as a key-value pair. The first part of the NTLM message being the key and the second "=" the value. Later an AuthChallenge is later created with

      new AuthChallenge(challengeType, schemeName, null, params.size() > 0 ? params : null);
      

      where value is null and params a list containing the NTLM message without the equals signs.

      Without the "==" the next auth step fails.

      Attachments

        1. screenshot-1.png
          409 kB
          Michael Wagner
        2. ntlm working.txt
          203 kB
          Eric Kerwin
        3. ntlm 407 log and stacktrace.txt
          29 kB
          Eric Kerwin

        Issue Links

          Activity

            People

              Unassigned Unassigned
              maffelbaffel Michael Wagner
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h 40m
                  1h 40m