留言板

Session key negotiation failed - Liferay 6.2 EE Jboss - NTLM issue

suresh vadlamudi,修改在9 年前。

Session key negotiation failed - Liferay 6.2 EE Jboss - NTLM issue

Junior Member 帖子: 33 加入日期: 10-9-8 最近的帖子
Hi All,

Could any one help me for making NTLM based windows authentication with Liferay 6.2 EE - Jboss bundle. I am finding the following issue..

I have done with Active Directory Integration .. and was working fine ..
After that i went to NTLM tab and provided the complete information which is required ..
Domain Controller : **********
Domain Controller Name : *******
Domain : *********
Service Account : ******** (Computer Account Name)
Service Password : ******** (Computer Account Password)

I have provided all the details properly. Now when i click on Sign In Button i am getting Windows Security Popup for asking username and password.Even i enter the details properly it is keep on prompting the popup continuously for three times and after that blank page.And here is the exception i am getting .

09:11:01,813 INFO [stdout] (http--0.0.0.0-9090-7) 09:11:01,811 ERROR [http--0.0.0.0-9090-7][NtlmFilter:235] Unable to perform NTLM authentication
09:11:01,814 INFO [stdout] (http--0.0.0.0-9090-7) com.liferay.portal.security.ntlm.NtlmLogonException: Session key negotiation failed
09:11:01,815 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.security.ntlm.NetlogonConnection.connect(NetlogonConnection.java:128)
09:11:01,816 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.security.ntlm.Netlogon.logon(Netlogon.java:49)
09:11:01,817 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.security.ntlm.NtlmManager.authenticate(NtlmManager.java:69)
09:11:01,818 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.servlet.filters.sso.ntlm.NtlmFilter.processFilter(NtlmFilter.java:230)
09:11:01,818 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:59)
09:11:01,819 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:204)
09:11:01,820 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:109)
09:11:01,821 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:169)
09:11:01,821 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.sharepoint.SharepointFilter.processFilter(SharepointFilter.java:88)
09:11:01,822 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:59)
09:11:01,822 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:204)
09:11:01,824 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:109)
09:11:01,825 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:185)
09:11:01,825 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
09:11:01,826 INFO [stdout] (http--0.0.0.0-9090-7) at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewriteFilter.java:738)
09:11:01,826 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:204)
09:11:01,826 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:109)
09:11:01,827 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:165)
09:11:01,827 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
09:11:01,827 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:165)
09:11:01,828 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
09:11:01,828 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:185)
09:11:01,829 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
09:11:01,829 INFO [stdout] (http--0.0.0.0-9090-7) at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilter.doFilter(InvokerFilter.java:96)
09:11:01,829 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
09:11:01,830 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
09:11:01,830 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
09:11:01,831 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
09:11:01,831 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:397)
09:11:01,831 INFO [stdout] (http--0.0.0.0-9090-7) at org.jboss.as.jpa.interceptor.WebNonTxEmCloserValve.invoke(WebNonTxEmCloserValve.java:50)
09:11:01,832 INFO [stdout] (http--0.0.0.0-9090-7) at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153)
09:11:01,832 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155)
09:11:01,833 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
09:11:01,833 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
09:11:01,833 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368)
09:11:01,834 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877)
09:11:01,834 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671)
09:11:01,834 INFO [stdout] (http--0.0.0.0-9090-7) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930)
09:11:01,835 INFO [stdout] (http--0.0.0.0-9090-7) at java.lang.Thread.run(Thread.java:745)

Please help me in resolving this issue.

Thanks & Regards
Suresh.Vadlamudi
suresh vadlamudi,修改在9 年前。

RE: Session key negotiation failed - Liferay 6.2 EE Jboss - NTLM issue

Junior Member 帖子: 33 加入日期: 10-9-8 最近的帖子
Any suggestions please.
Naoufel EH,修改在9 年前。

RE: Session key negotiation failed - Liferay 6.2 EE Jboss - NTLM issue

New Member 帖子: 4 加入日期: 13-1-29 最近的帖子
Hi,
I have the same problem,
Did you found a solution ?
Here is a similar issue : https://issues.liferay.com/browse/LPS-15380
Someone proposed to change the com.liferay.portal.security.ntlm.NetlogonConnection class.
I have not tested it and I do not want to create an ext plugin.
thumbnail
Alfonso Crisci,修改在8 年前。

RE: Session key negotiation failed - Liferay 6.2 EE Jboss - NTLM issue

Regular Member 帖子: 136 加入日期: 14-4-2 最近的帖子
Hi Suresh,

I reproduced the same stacktrace but finally managed to have it working. The root cause was:

ntlm.auth.domain.controller.name= set to an IP address instead of a fully qualified DNS hostname.

My environment:
Liferay 6.2 SP6
Windows Server 2008 r2
Internet Explorer 11
Tomcat 7
JDK 7
MySql 5.5