1. Home
  2. Development
  3. RE: Liferay Ntlm Chrome/Firefox

RE: Liferay Ntlm Chrome/Firefox

Alexey Ivanov, modified 9 Years ago.
Liferay Ntlm Chrome/Firefox
Junior Member Posts: 41 Join Date: 5/8/12 Recent Posts
Hello,

is it possible to use NTLM with Chrome and Firefox browsers?

I can see the following restriction
com.liferay.portal.security.sso.ntlm.internal.servlet.filter.NtlmFilter.java
method
public boolean isFilterEnabled(
HttpServletRequest request, HttpServletResponse response) {
if (BrowserSnifferUtil.isIe(request) && AuthSettingsUtil.isNtlmEnabled(companyId)) {

How easily to avoid this restriction?
BrowserSnifferUtil.isIe(request) in the method NtlmFilter.isFilterEnabled

Thanks for any help
thumbnail
David H Nebinger, modified 9 Years ago.
RE: Liferay Ntlm Chrome/Firefox
Liferay Legend Posts: 14933 Join Date: 9/2/06 Recent Posts
As I remember this is a feature only available in M$ browsers. It's not a Liferay restriction, it's that non M$ browsers just don't support it.
Alexey Ivanov, modified 9 Years ago.
RE: Liferay Ntlm Chrome/Firefox
Junior Member Posts: 41 Join Date: 5/8/12 Recent Posts
Hello David, thank you for feedback

I have tried to remove this restriction "BrowserSnifferUtil.isIe(request) " and recompile liferay core source code

- NTLM works fine in Chrome w/o any configurations
- NTLM works fine in Firefox by configuration or addon
https://www.liquidstate.net/enabling-ntlm-authentication-single-sign-on-in-firefox/

Is it possible to remove this restriction on liferay 6.2ga6 and liferay7 w/o changing liferay core source code?

Thanks
thumbnail
David H Nebinger, modified 9 Years ago.
RE: Liferay Ntlm Chrome/Firefox
Liferay Legend Posts: 14933 Join Date: 9/2/06 Recent Posts
Likely not, would probably require an EXT plugin to override core.

You might try opening a bug on issues.liferay.com and include all of your findings. I'm guessing this may be an artifact from earlier versions of the browsers because originally NTLM authentication was limited to M$ browsers. If the others have appropriate support for them now, maybe it's time to loosen this restriction.

The question, of course, is how a browser advertises it's support from NTLM when making requests to the portal. For example, I doubt that any mobile browser (even chrome or firefox) would support NTLM authentication. I don't know enough about windows phone to know if it's browser supports NTLM or not.
Alexey Ivanov, modified 9 Years ago.
RE: Liferay Ntlm Chrome/Firefox
Junior Member Posts: 41 Join Date: 5/8/12 Recent Posts
I have created jira issue for it
https://issues.liferay.com/browse/LPS-66897
thumbnail
Karthik Nainupatruni, modified 5 Years ago.
RE: Liferay Ntlm Chrome/Firefox
Junior Member Posts: 28 Join Date: 5/5/15 Recent Posts
Hi Alex,
Have you customize the NTLM filter in liferay7 to make it work for chrome ? If yes , please let me know how i can do it...
thumbnail
Karthik Nainupatruni, modified 5 Years ago.
RE: Liferay Ntlm Chrome/Firefox
Junior Member Posts: 28 Join Date: 5/5/15 Recent Posts
Hi All,
i have commented the Browsersniffer code in NTLFilter.java class , it is working fine in liferay 7.2 .1 ga2 by customizing the core  portal-security-sso-ntlm-impl  module