ntlm problem works in chrome and mozilla but not in IE

[Shivam Sharma, geändert vor 13 Jahren.]

Hi,
I am using liferay 6.0.5 bundled alongwith tomcat . I enabled ntlm it works fine in mozilla and chrome but doesnt works in Internet Explorer 7
I get the following error when I try to login using Internet Explorer

10:28:18,643 ERROR [NtlmFilter:214] Unable to perform NTLM authentication
com.liferay.portal.security.ntlm.NtlmLogonException: Unable to authenticate due to status -1073741724
at com.liferay.portal.security.ntlm.Netlogon.logon(Netlogon.java:87)
at com.liferay.portal.security.ntlm.NtlmManager.authenticate(NtlmManager.java:70)
at com.liferay.portal.servlet.filters.sso.ntlm.NtlmFilter.processFilter(NtlmFilter.java:209)
at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:123)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:196)
at com.liferay.portal.servlet.filters.sso.cas.CASFilter.processFilter(CASFilter.java:176)
at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:123)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:196)
at com.liferay.portal.sharepoint.SharepointFilter.processFilter(SharepointFilter.java:179)
at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:123)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:196)
at com.liferay.portal.servlet.filters.virtualhost.VirtualHostFilter.processFilter(VirtualHostFilter.java:184)
at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:123)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:196)
at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:126)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:196)
at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:126)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewriteFilter.java:738)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:196)
at com.liferay.portal.servlet.filters.threadlocal.ThreadLocalFilter.processFilter(ThreadLocalFilter.java:35)
at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:123)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:465)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:852)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
at java.lang.Thread.run(Thread.java:619)



Thanks and regards,
shivam sharma

[Ricardo Seabra, geändert vor 13 Jahren.]

Hi Shivam,

Where you able to solve your problem? i'm using liferay 6.0.5 and can't connect thru NTLM. According to this wiki http://www.liferay.com/community/wiki/-/wiki/Main/NTLMv2+SSO+Configuration I need to specify a computer account to connect... could you do it without the computer account?

thanks in advance,
Ricardo Seabra

[Shivam Sharma, geändert vor 13 Jahren.]

hi actually the problem i reported was very silly.... IE requires the user name to be prefixed by the domain name whereas chrome nd mozilla dont .... thats y it wasnt working in IE(basically i was entering user name shivam in IE whereas i ws supposed to enter technologic\shivam, where technologic was my domain name)...


In LR 6.0.5 there is support for NTLM2 ... U need the computer account only for NTLM2 authentication .... Even I dont know how to setup the computer account I just asked my domain admins and showed dem d wiki page nd dey created 1 for me...

basically in a nutshell if u r implementing only NTLM1 dont worry about the computer account nd d dese two attributes on the NTLM settings page i.e Service Account, Service Password.....


Thanks and regards,
Shivam Sharma

[Pooja P Joshi, geändert vor 13 Jahren.]

Hi Shivam,

I am also facing same problem and it is throwing same error while any user tries to login to the portal. The error is :

ERROR [NtlmFilter:240] Unable to perform NTLM authentication
com.liferay.portal.security.ntlm.NtlmLogonException: Unable to authenticate due to status -1073741724

What is the meaning of status code "1073741724"? Any idea?? is this error is resolved in your case?

Thanks,
-Pooja

[Shivam Sharma, geändert vor 13 Jahren.]

hi,

Sorry i dont know d meaning of d error code as such.... if u r using IE did u try prefixing domain name before your user name as mentioned above..... Also if u r using windows 7 or vista then u shld kno that they send ntlmv2 responses by default so if u havent set up a computer account ntlm wont work, but for that there's a work around as mentioned in the wiki