[HTTPCLIENT-1662] NTLM auth failed because NTLMEngineImpl strip domain to base domain name

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.5
• Fix Version/s: 5.0 Alpha1
• Component/s: HttpClient (classic)
• Environment: HttpClient 4.3, 4.5; A http site with NTLM auth; A domain which Netbios name is not match domain name(e.g. domain=mydomain.com; netbios name= testdomain)
• Assignee: Karl Wright
• Reporter: Colin
• Created: 24/Jun/15 02:06
• Updated: 04/May/17 09:49
• Resolved: 24/Jun/15 16:06

Description

When generate type 3 message, we change the domain name to base domain name:

            // Use only the base domain name!
            final String unqualifiedDomain = convertDomain(domain);

    /** Strip dot suffix from a name */
    private static String stripDotSuffix(final String value) {
        if (value == null) {
            return null;
        }
        final int index = value.indexOf(".");
        if (index != -1) {
            return value.substring(0, index);
        }
        return value;
    }

    /** Convert domain to standard form */
    private static String convertDomain(final String domain) {
        return stripDotSuffix(domain);
    }

I got http 401 in my environment with correct credential and found the root cause is those code got wrong domain name so the domain controller return a NTLM sub status code 0xC0000064, which means " The username you typed does not exist!"
The Netbios name of a domain is the "Pre Windows 2000 name" of the domain.

Is there any issue to use full domain name?