NTLM Authentication with WebServices

Philip Forshaw

Hi, we use NTLM Authentication for our CS10 system and would like to continue using this for WebServices. Is there documentation on this somewhere?

 

We have just started investigating webservices as our integration method and would like to get this part resolved first.

 

Thanks,

 

Philip Forshaw

 

CONFIDENTIALITY NOTICE: This e-mail, including any attachments, contains information that may be confidential, and is protected by copyright. It is directed to the intended recipient(s) only. If you have received this e-mail in error please e-mail the sender by replying to this message, and then delete the e-mail. Unauthorised disclosure, publication, copying or use of this e-mail is prohibited. Any communication of a personal nature in this e-mail is not made by or on behalf of any RES group company. E-mails sent or received may be monitored to ensure compliance with the law, regulation and/or our policies.

Appu_Nair1

Hi Philip,

It is not part of OT documentation the free kind many people have asked before you however it is not rocket science either.

I asked this when I had to do IWA/NTLM LAPI  programming and I was told it was not part of OT setup hence I found that by using

My own research and knowledge of oScript

The IWA method is completely documented by MS at their websites and Webservices are purely easier because they behave exactly like websites

However variations exist. We know that with CSDS this is very easily possible.

 

IWA(using livelink core settings)	CSDS(oScript module)	OTDS(Java module in TC)
Web Login SSO -Yes	Web Login SSO -Yes	Web Login SSO -Yes
Web Svcs Login SSO –NO(perhaps)	Web Svcs Login SSO –YES	Web Svcs Login SSO –Do not know(perhaps)
Tweaks to Web.Config(Perhaps)	Tweaks to Web.Config(Yes)	Tweaks to Web.Config(Perhaps)

 

Checklists for a Livelink Admin performing the task of making anonymous Webservices NTLM.

<![if !supportLists]>1.      <![endif]>Install livelink and configure for “anonymous” scheme on IIS 6/7/8/

<![if !supportLists]>2.      <![endif]>Make sure to create your “user” as a SA in this livelink.

<![if !supportLists]>3.      <![endif]>Grab thru google search a page to printout request variables

<![if !supportLists]>4.      <![endif]>Put that in the website and make sure to verify ?func=admin.testargs with what the aspx page tells you we are interested to see if REMOTE_USER is filled or not with DOMAIN\USERID form

<![if !supportLists]>5.      <![endif]>Change livelink a.k.a CS application or website to IWA I am sure almost everybody know this  livelink part and the IIS partbut if you don’t my video for that

<![if !supportLists]>6.      <![endif]>Check again with ?func=admin.testargs  and make sure you can login to livelink and the personal workspace says it is yours.

<![if !supportLists]>7.      <![endif]>If the above step is successful create application(a VD will not do) and copy the <OTHOME>\webservices\dotnet\cws or <OTHOME>\webservices\dotnet\les-services to a flat folder like e:\webservices

and make sure it is set to “anonymous” or how OT asks you to set it up.

<![if !supportLists]>8.      <![endif]>I do not know how to do this if WS was deployed in TC

<![if !supportLists]>9.      <![endif]>Write somesimple code that you know which works perhaps show you an EWS

<![if !supportLists]>10.  <![endif]>If code shows you success switch that application to IWA.

<![if !supportLists]>11.  <![endif]>Tweak the Web.Config according to info in web orin my document

<![if !supportLists]>12.  <![endif]>Remove the userid and password lines in code and re-attempt after re-procuring the wsdl it will change your App.Config

<![if !supportLists]>13.  <![endif]>Put WantLapiLogs=true in opentext.ini and troubleshoot further .In your logs you should see REMOTE_USER coming thru

<![if !supportLists]>14.  <![endif]>Fiddler is very helpful in your ventures

<![if !supportLists]>15.  <![endif]>Moral if you know how to do IWA in a webserver your job becomes much more easier.

<![if !supportLists]>16.  <![endif]>Many OT apps use “impersonation” and call that SSO for me SSO is different.

 

In a  lot of postings Guy Pomerleaux has been helping people ,me too….From OT side Mark Simm, Chris Wagg those are the best resources

 

Cheers

Appu

 

From: eLink Entry: Content Server Development Forum [mailto:development@elinkkc.opentext.com]
Sent: Monday, November 03, 2014 5:26 AM
To: eLink Recipient
Subject: [EXTERNAL]NTLM Authentication with WebServices

 

NTLM Authentication with WebServices

Posted byphilip.forshaw@res-ltd.com (Forshaw, Philip) On 11/03/2014 06:25 AM

 

Hi, we use NTLM Authentication for our CS10 system and would like to continue using this for WebServices. Is there documentation on this somewhere?   We have just started investigating webservices as our integration method and would like to get this part resolved first.   Thanks,   Philip Forshaw   CONFIDENTIALITY NOTICE: This e-mail, including any attachments, contains information that may be confidential, and is protected by copyright. It is directed to the intended recipient(s) only. If you have received this e-mail in error please e-mail the sender by replying to this message, and then delete the e-mail. Unauthorised disclosure, publication, copying or use of this e-mail is prohibited. Any communication of a personal nature in this e-mail is not made by or on behalf of any RES group company. E-mails sent or received may be monitored to ensure compliance with the law, regulation and/or our policies.

---

[To post a comment, use the normal reply function]
Forum:	Content Server Development Forum
Content Server:	Knowledge Center