tracker issue : CF-4120168

select a category, or use search below
(searches all categories and all time range)
Title:

[ANeff] Doc Bug for: Docs should say NTLM only supported for Axis 2 (wsversion="2").

| View in Tracker

Status/Resolution/Reason: Closed/Withdrawn/NotABug

Reporter/Name(from Bugbase): Aaron Neff / Aaron Neff (Aaron Neff)

Created: 02/21/2016

Components: Documentation

Versions: 2016

Failure Type: Unspecified

Found In Build/Fixed In Build: CF2016_Final /

Priority/Frequency: Trivial / Some users will encounter

Locale/System: English / Platforms All

Vote Count: 0

Per 4076462, Axis 1 silently falls back* to Basic Auth if NTLM is disabled on the remote server.

Suggestion: cfsharepoint/cfinvoke/cfobject/createObject docs should say "NTLM is only supported with Axis 2".

Related tickets:
1) Only support NTLM w/ Axis 2. Thus, authtype="ntlm"+wsversion="1" should throw "NTLM is only supported with Axis 2" exception. (see 4076462)
2) cfsharepoint uses Axis 1 and is missing the wsversion="1|2" attribute required for switching to Axis 2 (see 4120166)

* - If NTLM disabled at remote server, then:
--------------------------------------------
Actual Result:
1) authtype="ntlm"+wsversion="1" initially sends anonymous request, then server responds saying only Basic Auth is allowed, then CF uses Basic Auth (bad - silent fallback)
2) authtype="ntlm"+wsversion="2" initially sends anonymous request, then server responds saying only Basic Auth is allowed, then CF displays "401 UNAUTHORIZED" (good)

Expected Result:
1) authtype="ntlm"+wsversion="1" throws "NTLM is only supported with Axis 2" exception without sending any request (good)
2) authtype="ntlm"+wsversion="2" initially sends anonymous request, then server responds saying only Basic Auth is allowed, then CF displays "401 UNAUTHORIZED" (good)
--------------------------------------------

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	4120168

External Customer Info:
External Company:  
External Customer Name: Aaron Neff
External Customer Email:

Attachments:

Comments:

Repro (using SharePoint as the example): 1) In SharePoint, enable Basic Auth and disable NTLM 2) Run each of the following examples: <cfscript> myDomain = "www.domain.com"; myUsername = "myusername"; myPassword = "mypassword"; //cfsharepoint example cfsharepoint(action="getlistcollection", domain=myDomain, username=myUsername, password=myPassword, authtype="ntlm", ntlmdomain=" ", name="r");//wsversion attribute not currently supported writeDump(r); //cfinvoke example cfinvoke(webservice="http://#myDomain#/_vti_bin/Lists.asmx?wsdl", method="getlistcollection", username=myUsername, password=myPassword, authtype="ntlm", ntlmdomain=" ", refreshwsdl=true, returnvariable="r", wsversion=1); writeDump(r); //cfobject example cfobject(type="webservice", webservice="http://#myDomain#/_vti_bin/Lists.asmx?wsdl", username=myUsername, password=myPassword, authtype="ntlm", ntlmdomain=" ", refreshwsdl=true, name="r", wsversion=1); writeDump(r.getListCollection()); //createObject example r = createObject("webservice", "http://#myDomain#/_vti_bin/Lists.asmx?wsdl", {username=myUsername, password=myPassword, authtype="ntlm", ntlmdomain=" ", refreshwsdl=true, wsversion=1}); writeDump(r.getListCollection()); </cfscript> Actual Result: Uses Basic Auth. Expected Result: "NTLM is only supported with Axis 2" exception. (wsversion attribute needs added to cfsharepoint)
Comment by External U.
4487 | February 21, 2016 06:54:21 PM GMT
In short, this issue affects anyone using NTLM+cfsharepoint or NTLM+Axis1.
Comment by External U.
4488 | February 21, 2016 07:08:54 PM GMT
Hi Aaron, Closing this bug as we are supporting NTLM authentication for both Axis 1 and Axis 2. Thanks, Dattanand Bhat
Comment by Dattanand M.
4489 | April 11, 2016 01:21:38 AM GMT