NTLM authentication support

[svennela]

Hi,

Having issues with config server accessing git repo. customer is using Microsoft Team Foundation Server for their git repo. When config server trying connect and attempt to authenticate it requires NTLM authentication. Do we support .e. ntlm authentication ??

[spencergibb]

We support whatever authentication schemes jgit supports. I simple search reveals this, so there may be hope.

[spencergibb]

We don't have any explicit support yet.

[lonnix]

@spencergibb, does your previous comment mean you're not allowing use of ntml authentication even if jgit has it? The link you provided is from 2013 and I believe ntlm is supported now according to that same link.

If ntlm is indeed supported, what spring Config value would need to be set to use ntlm authentication? Something like spring.cloud.config.server.git.auth=ntlm perhaps?

[spencergibb]

I'm saying if it is supported by jgit we could support it.

[dasavik]

Hello, I see this post is very old. We are in the same situation, client is using TFS 2015 for their git repo. Does jgit support NTLM authentication now?

[ryanjbaxter]

Since this issue is still open, I don't believe so.

[dasavik]

thanks @ryanjbaxter. Can you please provide some alternate references. SSH or any other kind of implementation for that supports NTLM authentication?

[ryanjbaxter]

I cant because I am not familiar with it, sorry

[gs-offcl]

i'm also having similar need. I need to configure git repo with TFS server. Pls confirm if any efforts. Thanks.

[gmcouto]

Yeah, I'm trying to have a config server to clone from TFS also. But to no avail.

[gs-offcl]

I have tried even with file system back-end (for testing) but the none of the properties are getting loaded. I can't use git or svn as back-end as my VCS is TFS..

[gmcouto]

Is there a reason for HttpClientConfigurableHttpConnectionFactory to useHttpClientConnection as default connection instead of JDKHttpConnection?

JDKHttpConnection supports NTLM if you are on windows(as it uses native jdk connection), using current user credentials.
Also, HttpClientConnection has an issue with multiple header values, like WWW-Authenticate... which is the root cause of issues of anyone trying to connect to a TFS server(pay attention now, @sgangapa )

I defined an empty public class SpringJDKConnectionFactory extends JDKHttpConnectionFactory implements ConfigurableHttpConnectionFactory and added as a bean. Circumventing all issues caused by HttpClientConnection.
That also enabled the config server to be able to recognize the other kind of authentications allowed by TFS (like basic authentication using personal access token).

Anyway, I proposed a fix to JGit with these header issues on HttpClientConnection, but that still does not support NTLM:
https://git.eclipse.org/r/#/c/126297/