How to make LIFERAY NTLM work for chrome and firefox

Message Boards

Abdul Ahad Arain, modified 6 Years ago.

How to make LIFERAY NTLM work for chrome and firefox

New Member Posts: 14 Join Date: 5/18/17 Recent Posts

I have configured LIFERAY NTLM for windows based SSO which is working fine in Internet Explorer and i am able to use the application without providing any credentials but this is not working for Chrome and Firefox.

David H Nebinger, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Liferay Legend Posts: 14919 Join Date: 9/2/06 Recent Posts

You can't.

This is not a Liferay thing. This is a browser thing. Chrome and Firefox have no incentive to support windows authentication so they don't.

Come meet me at Devcon 2017 or 2017 LSNA!

Christoph Rabel, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Liferay Legend Posts: 1554 Join Date: 9/24/09 Recent Posts

No, it's a Liferay issue. NTLM is easily doable with Firefox and Chrome.

)
public class NtlmFilter extends BaseFilter {
	@Override
	public boolean isFilterEnabled(
		HttpServletRequest request, HttpServletResponse response) {

[color=#ff0000]		if (!_browserSniffer.isIe(request)) {
			return false;[/color]
}

See also:
https://issues.liferay.com/browse/LPS-56849

David H Nebinger, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Liferay Legend Posts: 14919 Join Date: 9/2/06 Recent Posts

Okay, I may be dating myself, but I know that check was originally added because of issues w/ non-IE browsers. I know that IE has always been able to handle NTLM, but chrome/ff used to prompt for the credentials anyway...

Come meet me at Devcon 2017 or 2017 LSNA!

Christoph Rabel, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Liferay Legend Posts: 1554 Join Date: 9/24/09 Recent Posts

It still is a Liferay issue. NTLM works fine for several years now in other browsers. I remember, I had to remove the restriction for a customer in 2012 and AFAIK it works since then.

Anyway. The discussion here is moot. The issue was demoted to feature request, so nobody at Liferay will ever look at it again till a DXP customer opens a ticket. Not sure if this is an option for the OP. Otherwise, he needs to replace NTLMFilter to get it to work.

Abdul Ahad Arain, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

New Member Posts: 14 Join Date: 5/18/17 Recent Posts

Any guidelines on how I can do that? I am using Liferay 6.2.

Olaf Kock, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Liferay Legend Posts: 6403 Join Date: 9/23/08 Recent Posts

Abdul Ahad Arain:

Any guidelines on how I can do that? I am using Liferay 6.2.

Find the code that Christoph quoted above and write a plugin that removes the condition. You can probably introduce your own filter through a hook (implement it by taking Liferay's NTLM-Filter as a basis) or, worst case, use an ext-plugin if the implementation doesn't work within a hook.

The only thing that you'd have to hope for is that this implementation just works with the other browsers and doesn't need any special handling. But according to Christoph's statement above, it seems that just removing the browserSniffer conditional might be enough.

Abdul Ahad Arain, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

New Member Posts: 14 Join Date: 5/18/17 Recent Posts

I am unable to locate that code, can you help me out doing so I am using Liferay 6.2 CE-GA 6

Abdul Ahad Arain, modified 6 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox (Answer)

New Member Posts: 14 Join Date: 5/18/17 Recent Posts

Found Solution over here - > https://stackoverflow.com/questions/45915136/how-to-override-portal-impl-jar-classes-in-liferay-ext-plugin

Roshan Qureshi, modified 5 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Regular Member Posts: 159 Join Date: 8/24/10 Recent Posts

Hi,

We are using Liferay 7 ga7 but havign the same issue.

Isn't the IE condition removed from here?

Appreciate reply from liferay team.

Thanks

Christoph Rabel, modified 5 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Liferay Legend Posts: 1554 Join Date: 9/24/09 Recent Posts

No, that stupid, obsolete condition is still in there, to this day.

https://github.com/liferay/liferay-portal/blob/7.2.x/modules/apps/portal-security-sso-ntlm/portal-security-sso-ntlm-impl/src/main/java/com/liferay/portal/security/sso/ntlm/internal/servlet/filter/NtlmFilter.java

It even locks out Edge, because Edge is identified as Chrome.

Karthik Nainupatruni, modified 4 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Junior Member Posts: 28 Join Date: 5/5/15 Recent Posts

Hi Christoph,
How to customize NTLMfilter in Liferay 7.2 ,
Can you please share some links

Karthik Nainupatruni, modified 4 Years ago.

RE: How to make LIFERAY NTLM work for chrome and firefox

Junior Member Posts: 28 Join Date: 5/5/15 Recent Posts

Hi All,
I have commented the Browsersniffer code as mentioned above , it is working fine chrome browser .
In liferay 7.2 .1 ga2 by customizing the core portal-security-sso-ntlm-impl module .