[jira] [Commented] (CAMEL-22073) camel-http - NTLM authentication doesn't work over http

[Claus Ibsen (Jira)]

    [ 
https://issues.apache.org/jira/browse/CAMEL-22073?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17953694#comment-17953694
 ] 

Claus Ibsen commented on CAMEL-22073:
-------------------------------------

Okay so it looks like http-client 5.4 does not come with NTLM auth as default 
and I have some new code in camel-http that adds this.

Also authenticationPreemptive=true should not be needed but it was a hope that 
you could see something in the wireshark or something that indicates camel-http 
would include NTLM auth in the initial requests.

Anyway try with rebuiding 4.10.x from code or the new attached JAR when I 
rebuild it later

> camel-http - NTLM authentication doesn't work over http
> -------------------------------------------------------
>
>                 Key: CAMEL-22073
>                 URL: https://issues.apache.org/jira/browse/CAMEL-22073
>             Project: Camel
>          Issue Type: Bug
>          Components: camel-http
>    Affects Versions: 4.10.4
>            Reporter: Bruno Gonçalves
>            Assignee: Claus Ibsen
>            Priority: Minor
>             Fix For: 4.10.5, 4.12.0
>
>         Attachments: camel-http-4.10.5-SNAPSHOT.jar, 
> http-ntlm-reproducer.tar, wireshark_http_ntlm_camel4.png, 
> wireshark_http_ntlm_curl.png
>
>
> It appears that NTLM authentication is not functioning correctly in Apache 
> Camel 4 (version 4.10.4) when using the {{http}} component.
> Using the exact same credentials and request details, the call succeeds when 
> made via the {{curl}} command with the {{--ntlm}} flag, but fails when 
> executed through Camel.
> As shown in the attached Wireshark capture, the {{curl}} request correctly 
> initiates the NTLM handshake, including the {{Authorization: NTLM ...}} 
> header, whereas the Apache Camel request does not send the Authorization 
> header and fails to trigger a challenge-response flow.
> *Apache Camel 4 (4.10.4) (x)*
> {code:java}
> <to 
> uri="http://exacttest.myserver.local:8020/Services/Exact.Entity.REST.EG/?authMethod=NTLM&amp;authUsername=RAW(usr_exact1)&amp;authPassword=RAW(blabla)&amp;authDomain=RAW(myserver.local)&amp;maxTotalConnections=20&amp;connectionsPerRoute=2&amp;connectTimeout=180000&amp;soTimeout=180000"/>{code}
> *Curl (8.7.1) (/)*
> {code:java}
> curl --ntlm --user myserver.local\\usr_exact1:blabla 
> "http://exacttest.myserver.local:8020/services/Exact.Entity.REST.EG/"{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)