8005638: Less secure Authentication schemes should work when more secure schemes are not available
authorchegar
Fri, 04 Jan 2013 11:34:17 +0000
changeset 15000 8a1bb7eb6307
parent 14999 514942397a3f
child 15001 7ff65849323c
8005638: Less secure Authentication schemes should work when more secure schemes are not available Reviewed-by: alanb
jdk/src/share/classes/sun/net/www/protocol/http/AuthenticationHeader.java
--- a/jdk/src/share/classes/sun/net/www/protocol/http/AuthenticationHeader.java	Fri Jan 04 11:18:00 2013 +0000
+++ b/jdk/src/share/classes/sun/net/www/protocol/http/AuthenticationHeader.java	Fri Jan 04 11:34:17 2013 +0000
@@ -206,7 +206,8 @@
 
             if(v == null) {
                 if ((v=schemes.get ("digest")) == null) {
-                    if (((v=schemes.get("ntlm"))==null)) {
+                    if (!NTLMAuthenticationProxy.supported
+                        || ((v=schemes.get("ntlm"))==null)) {
                         v = schemes.get ("basic");
                     }
                 }