[WAGON-309] NTLM for webdav behind IIS

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Won't Fix
• Affects Version/s: 1.0-beta-2
• Component/s: wagon-webdav
• Environment: client: jdk1.5; server: iis 6, tomcat 5.5 and ssl
• Flags: Patch
• Assignee: Unassigned
• Reporter: Alessandro Gerlinger Romero
• Created: 16/Jun/10 13:01
• Updated: 18/Aug/18 19:24
• Resolved: 18/Aug/18 19:24

Description

To use webdav over https with IIS 6, I changed two files to use NTCredentials. It is compatible with basic authentication.

-------
WebDavWagon.java
-------

try
{
httpURL = urlToHttpURL( url );
/* - begin - before
if ( hasAuthentication )
{
String userName = authenticationInfo.getUserName();
String password = authenticationInfo.getPassword();

if ( userName != null && password != null )

{ //httpURL.setUserinfo( userName, password ); webdavResource.setCredentials( new NTCredentials(userName, password, "host.com", "host") ); }

}

• end - before
  */
  CorrectedWebdavResource.setDefaultAction( CorrectedWebdavResource.NOACTION );
  webdavResource = new CorrectedWebdavResource( httpURL );

// begin - after
if ( hasAuthentication )
{
String userName = authenticationInfo.getUserName();
String password = authenticationInfo.getPassword();

if ( userName != null && password != null )

{ //httpURL.setUserinfo( userName, password ); webdavResource.setCredentials( new NTCredentials(userName, password, repository.getHost(), repository.getHost()) ); }

}
// end - after

-----------
CorrectedWebdavResource.java
-----------
/**

• FOWARD NTCREDENTIALS FOR EACH TRANSACTION
• It is compatible with basic authentication.
  *
• @see org.apache.webdav.lib.WebdavResource#generateTransactionHeader(org.apache.commons.httpclient.HttpMethod)
  */
  protected void generateTransactionHeader(HttpMethod method) {
  WebdavState state = (WebdavState) client.getState();

String host = null;
String realm = null;
if ( hostCredentials instanceof NTCredentials)

{ host = ((NTCredentials)hostCredentials).getHost(); realm = ((NTCredentials)hostCredentials).getDomain(); }

state.setCredentials(realm, host, hostCredentials);
super.generateTransactionHeader(method);
}

*******
LIMITATIONS
*******
Uses host as realm.