PI24704: HTTP AUTHENTICATION TO NTLM2 SERVERS FAILS WITH CRRIT1706E ERROR

Rational Integration Tester 8.7
Rational Test Virtualization Server 8.7
Rational Performance Test Server 8.7
Rational Test Virtualization Server Fix Pack 1 (8.7.0.1) for 8.7
Rational Integration Tester Fix Pack 1 (8.7.0.1) for 8.7
Rational Performance Test Server Fix Pack 2 (8.7.0.2) for 8.7
Rational Integration Tester Fix Pack 2 (8.7.0.2) for 8.7
Rational Test Virtualization Server Fix Pack 2 (8.7.0.2) for 8.7
Rational Test Virtualization Server Fix Pack 3 (8.7.0.3) for 8.7
Rational Integration Tester Fix Pack 3 (8.7.0.3) for 8.7
Rational Performance Test Server Fix Pack 1 (8.7.0.1) for 8.7
Rational Integration Tester Fix Pack 4 (8.7.0.4) for 8.7
Rational Test Virtualization Server Fix Pack 4 (8.7.0.4) for 8.7
Rational Performance Test Server Fix Pack 4 (8.7.0.4) for 8.7
Rational Performance Test Server Fix Pack 3 (8.7.0.3) for 8.7

APAR status

• Closed as program error.

Error description

• It is not possible to connect to an HTTP server that is using
  Windows NTLM2 authentication.
  
  SYMPTOMS:
  
  If you click NTLM on the Client tab of your HTTP transport and
  enter the login credentials, when you click on the Test
  Transport button you get the following error:
  
  "CRRIT1706E
  The HTTP server did not authorize this transport. The Transport
  does not have the correct credentials or may not be using the
  correct credentials. Supported credentials: NTLM"
  
  Attempts to access a page using this transport return a 401
  error.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of Rational Integration Tester with NTLM v2        *
  * authenticated services                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Rational Integration Tester could not connect to an HTTP     *
  * server that used Windows NT LAN Manager version 2            *
  * authentication (NTLMv2). Attempts to connect received a 401  *
  * error.                                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• In Rational Integration Tester 8.7, version 4 of the Apache HTTP
  client is enabled automatically, meaning that NTLMv2
  authentication is supported correctly.  Note that this
  functionality is available in version 8.6.0.2 but must be
  enabled with a -D flag on start-up.  In version 8.7.0 it is
  enabled by default.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL INTEGRA TE

• Fixed component ID

  5725G79IT

Applicable component levels

• R850 PSN

     UP

• R851 PSN

     UP

• R860 PSY

     UP

• R870 PSY

     UP