-
Type: New Feature
-
Status: Resolved
-
Priority: Minor
-
Resolution: Won't Fix
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: Live Edit (deprecated), WebDAV
Christophe Capon wrote:
This class prevents the standard NuxeoAuthenticationFilter to cache the user identity
returned by NTLM authentication. It is necessary for NTLM to work with WSS, since
MSOffice applications post several NTLMSSP_NEGOTIATE and are waiting for the 401 Unauthorized
response. When caching is activated, the standard NuxeoAuthenticationFilter recognizes the
user previously identified with NTLM and forwards the request to the servlet.
Since the request is a /_vti_bin/.... the servlet fails.
All /_vti_bin/* requests are forwarded to this filter instead of NuxeoAuthenticationFilter.
When a negotiation is issued by MSOffice, it removes the cached identity, and therefore forces
the NTLMAuthenticato to issue the challenge again.