Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-5599

NTLM authentication for MSOffice WSS protocol

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Resolved
    • Priority: Minor
    • Resolution: Won't Fix
    • Affects Version/s: None
    • Fix Version/s: None

      Description

      Christophe Capon wrote:

      This class prevents the standard NuxeoAuthenticationFilter to cache the user identity
      returned by NTLM authentication. It is necessary for NTLM to work with WSS, since
      MSOffice applications post several NTLMSSP_NEGOTIATE and are waiting for the 401 Unauthorized
      response. When caching is activated, the standard NuxeoAuthenticationFilter recognizes the
      user previously identified with NTLM and forwards the request to the servlet.
      Since the request is a /_vti_bin/.... the servlet fails.

      All /_vti_bin/* requests are forwarded to this filter instead of NuxeoAuthenticationFilter.
      When a negotiation is issued by MSOffice, it removes the cached identity, and therefore forces
      the NTLMAuthenticato to issue the challenge again.

        Attachments

        1. ntlm-auth-config.xml
          1 kB
          Florent Guillaume
        2. nuxeo-platform-login-ntlm.diff
          2 kB
          Florent Guillaume
        3. nuxeo-platform-wss-backend.diff
          5 kB
          Florent Guillaume

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: