How to configure Axis stubs for Integrated Windows Authentication ?

Question

Hi All,
I am trying to consume a web service on https and it uses .NET with Integrated Windows Authentication Security Mechanism. When I type the web service endpoint address in browser I am prompted for a login dialog and I login using username (in the format <domain name>\\<username>) and password given by the web service provider.
Now I have generated stubs using AXIS 1.2 Final but I dont know how to pass or set the credentials (domain, username, password) in my client program. I tried <stub object>.setUsername and <stub object>.setPassword methods but I am not able to connect to the service and I always get HTTP Error Code 401.2 from the service. I am not sure this is right way to set credentials in my code. I tried searching this mailing list but no avail. Can anyone please help me.
Thanks & Regards,
Kr.

Answer 1

Hello all - I ran into this and spent way too much time looking for the answer, however this is how I got it to work. My code was specific to getting SSRS authenication working so it should work with any NTLM authenciation via HTTP. setAuthenticateProperty() actually does the enabling of NTLM.
* Sets up the needed information to enable NTLM authentication for SOAP/HTTP calls..
* @author Brian Hayes
public class NTLMAuthenticator {
    private Authenticator authenticator;
    private String username;
    private String password;
    private String domain;
    private String host;
    private URL wsdlurl;
     * Uses the endpoint.getHost() as the host name to use for authentication.
     * <li> Generally the endpoint host is the target for actual authenciation.
     * <br>
     * @param endpoint -
     *            The URL location of SSRS ReportExecution2005 wsdl.
     * @param username -
     *            User name needed for NTLM authentication.
     * @param password -
     *            Password needed for NTLM authentication.
     * @param domain -
     *            Domain for the user needed for NTLM authentication.
    public NTLMAuthenticator( URL wsdlurl, String username, String password, String domain ) {
        this.wsdlurl = wsdlurl;
        this.host = wsdlurl.getHost();
        this.username = username;
        this.password = password;
        this.domain = domain;
        this.authenticator = null;     
     * Instruct our NTLM authenticator to use setPreemptiveAuthentication or not. Default is true;
     * @return - true or false
    protected boolean usePreemptiveAuthentication(){
        return true;
     * The {@link Authenticator} is used to setup NTLM authentication to a webservice stub/client. <br>
     * Example:<br>
     * If you extended a Stub object, you would call getClient() or your Stub object.<br>
     * Then super._getServiceClient().getOptions().setProperty(HTTPConstants.AUTHENTICATE, getAuthenticator());<br>
     * <li>This should work with any URL/Soap call but it has only been tested with axis2 stubs.
     * <li> This also used PreemptiveAuthentication.
     * @return - {@link Authenticator} object populated.
    public Authenticator getAuthenticator() {
        if (this.authenticator == null) {
            this.authenticator = new Authenticator();
        List<String> auth = new ArrayList<String>();
        auth.add(Authenticator.NTLM);
        authenticator.setAuthSchemes(auth);
        authenticator.setUsername(this.getUsername());
        authenticator.setPassword(this.getPassword());
        authenticator.setDomain(this.getDomain());
        authenticator.setHost(this.getHost());
        authenticator.setPreemptiveAuthentication(this.usePreemptiveAuthentication());
        return authenticator;
    public void setAuthenticator( Authenticator authenticator ) {
        this.authenticator = authenticator;
    public String getUsername() {
        return username;
    public void setUsername( String username ) {
        this.username = username;
    public String getPassword() {
        return password;
    public void setPassword( String password ) {
        this.password = password;
    public String getDomain() {
        return domain;
    public void setDomain( String domain ) {
        this.domain = domain;
    public String getHost() {
        return host;
    public void setHost( String host ) {
        this.host = host;
    public URL getWsdlurl() {
        return wsdlurl;
    public void setWsdlurl( URL wsdlurl ) {
        this.wsdlurl = wsdlurl;
* NTML Support for webservices where our webservice is protected via NTLM.
* @author Brian Hayes
public class NTLMReportExecutionServiceStub extends ReportExecutionServiceStub {
    private NTLMAuthenticator endpointAuthenticator;
     * Enables NTML authentication to our SSRS reports by setting the property via setAuthenticeProperty();
     * @param authenticator
     * @throws AxisFault
    public NTLMReportExecutionServiceStub( NTLMAuthenticator endpointauthenticator ) throws AxisFault {
        this(endpointauthenticator.getWsdlurl().toString());
        this.endpointAuthenticator = endpointauthenticator;
        this.setAuthenticeProperty();
    private void setAuthenticeProperty(){
        super._getServiceClient().getOptions().setProperty(HTTPConstants.AUTHENTICATE, this.getEndpointAuthenticator().getAuthenticator());
    public NTLMAuthenticator getEndpointAuthenticator() {
        return endpointAuthenticator;
    public void setEndpointAuthenticator( NTLMAuthenticator endpointAuthenticator ) {
        this.endpointAuthenticator = endpointAuthenticator;
     * Overrides the default URL location.
     * @param wsdlurl
     * @throws AxisFault
    private NTLMReportExecutionServiceStub( String wsdlurl ) throws AxisFault {
        super(wsdlurl);
}