RE: How to make LIFERAY NTLM work for chrome and firefox

thumbnail
Abdul Ahad Arain, modificado hace 8 años. New Member Mensajes: 14 Fecha de incorporación: 18/05/17 Mensajes recientes
I have configured LIFERAY NTLM for windows based SSO which is working fine in Internet Explorer and i am able to use the application without providing any credentials but this is not working for Chrome and Firefox.
thumbnail
David H Nebinger, modificado hace 8 años. Liferay Legend Mensajes: 14933 Fecha de incorporación: 2/09/06 Mensajes recientes
You can't.

This is not a Liferay thing. This is a browser thing. Chrome and Firefox have no incentive to support windows authentication so they don't.









Come meet me at Devcon 2017 or 2017 LSNA!
thumbnail
Christoph Rabel, modificado hace 8 años. Liferay Legend Mensajes: 1555 Fecha de incorporación: 24/09/09 Mensajes recientes
No, it's a Liferay issue. NTLM is easily doable with Firefox and Chrome.

)
public class NtlmFilter extends BaseFilter {
	@Override
	public boolean isFilterEnabled(
		HttpServletRequest request, HttpServletResponse response) {

[color=#ff0000]		if (!_browserSniffer.isIe(request)) {
			return false;[/color]
}


See also:
https://issues.liferay.com/browse/LPS-56849
thumbnail
David H Nebinger, modificado hace 8 años. Liferay Legend Mensajes: 14933 Fecha de incorporación: 2/09/06 Mensajes recientes
Okay, I may be dating myself, but I know that check was originally added because of issues w/ non-IE browsers. I know that IE has always been able to handle NTLM, but chrome/ff used to prompt for the credentials anyway...








Come meet me at Devcon 2017 or 2017 LSNA!
thumbnail
Christoph Rabel, modificado hace 8 años. Liferay Legend Mensajes: 1555 Fecha de incorporación: 24/09/09 Mensajes recientes
It still is a Liferay issue. NTLM works fine for several years now in other browsers. I remember, I had to remove the restriction for a customer in 2012 and AFAIK it works since then.

Anyway. The discussion here is moot. The issue was demoted to feature request, so nobody at Liferay will ever look at it again till a DXP customer opens a ticket. Not sure if this is an option for the OP. Otherwise, he needs to replace NTLMFilter to get it to work.
thumbnail
Abdul Ahad Arain, modificado hace 8 años. New Member Mensajes: 14 Fecha de incorporación: 18/05/17 Mensajes recientes
Any guidelines on how I can do that? I am using Liferay 6.2.
thumbnail
Olaf Kock, modificado hace 8 años. Liferay Legend Mensajes: 6441 Fecha de incorporación: 23/09/08 Mensajes recientes
Abdul Ahad Arain:
Any guidelines on how I can do that? I am using Liferay 6.2.


Find the code that Christoph quoted above and write a plugin that removes the condition. You can probably introduce your own filter through a hook (implement it by taking Liferay's NTLM-Filter as a basis) or, worst case, use an ext-plugin if the implementation doesn't work within a hook.

The only thing that you'd have to hope for is that this implementation just works with the other browsers and doesn't need any special handling. But according to Christoph's statement above, it seems that just removing the browserSniffer conditional might be enough.
thumbnail
Abdul Ahad Arain, modificado hace 8 años. New Member Mensajes: 14 Fecha de incorporación: 18/05/17 Mensajes recientes
I am unable to locate that code, can you help me out doing so I am using Liferay 6.2 CE-GA 6
thumbnail
Abdul Ahad Arain, modificado hace 8 años. New Member Mensajes: 14 Fecha de incorporación: 18/05/17 Mensajes recientes
Found Solution over here - > https://stackoverflow.com/questions/45915136/how-to-override-portal-impl-jar-classes-in-liferay-ext-plugin
Roshan Qureshi, modificado hace 7 años. Regular Member Mensajes: 159 Fecha de incorporación: 24/08/10 Mensajes recientes
Hi,

We are using Liferay 7 ga7 but havign the same issue.

Isn't the IE condition removed from here?

Appreciate reply from liferay team.

Thanks
thumbnail
Christoph Rabel, modificado hace 7 años. Liferay Legend Mensajes: 1555 Fecha de incorporación: 24/09/09 Mensajes recientes
No, that stupid, obsolete condition is still in there, to this day.

https://github.com/liferay/liferay-portal/blob/7.2.x/modules/apps/portal-security-sso-ntlm/portal-security-sso-ntlm-impl/src/main/java/com/liferay/portal/security/sso/ntlm/internal/servlet/filter/NtlmFilter.java

It even locks out Edge, because Edge is identified as Chrome.
thumbnail
Karthik Nainupatruni, modificado hace 6 años. Junior Member Mensajes: 28 Fecha de incorporación: 5/05/15 Mensajes recientes
Hi Christoph,
How to customize NTLMfilter  in Liferay 7.2 , 
Can you please share some links
thumbnail
Karthik Nainupatruni, modificado hace 6 años. Junior Member Mensajes: 28 Fecha de incorporación: 5/05/15 Mensajes recientes
Hi All,
I have commented the Browsersniffer code as mentioned above , it is working fine  chrome browser .
In liferay 7.2 .1 ga2 by customizing the core  portal-security-sso-ntlm-impl  module .