Rejected when authenticating to Sharepoint, but IWA works

[Thomas Kennedy]

I have a Sharepoint site that I can open just fine through IE, via integrated Windows authentication, but which I cannot open through Java.

import java.net.Authenticator;
import java.net.PasswordAuthentication;
import java.net.URL;
import java.util.Properties;

public class pass1 {

	static class MyAuthenticator extends Authenticator {

		MyAuthenticator(){
			Properties p = new Properties();
			p.setProperty("http.auth.ntlm.domain","XYZ.COM");
		}

		public PasswordAuthentication getPasswordAuthentication() {
			System.out.println("Feeding username and password for " + getRequestingScheme());
           		return (new PasswordAuthentication( etc etc ));
		}
	}
	
	public static void main(String[] args) {

		Authenticator.setDefault(new MyAuthenticator());

		new pass1reader().go();
	}
}

public class pass1reader { 
      
     public void go() { 

	System.setProperty("http.maxRedirects", "10");

	try { 
	URL url = new URL("http://sharepoint.xyz.com/sites/blah/blah/_layouts/listfeed.aspx?List=89ef9159%2Dcb69%2D4992%2D87e3%2D4055164ac741&View=af80baf5%2D3e13%2D4308%2D9033%2D2eab7197bab2");
		
             SAXParserFactory spf = SAXParserFactory.newInstance(); 
               SAXParser sp = spf.newSAXParser(); 

               XMLReader xr = sp.getXMLReader();

               pass1handler handler = new pass1handler(); 
               xr.setContentHandler(handler); 
      
               xr.parse(new InputSource(url.openStream())); 

This just prints "Feeding username and password for ntlm" 10 times and then quits.

If I use a browser that isn't configured for IWA, such as Opera, I get prompted for my credentials and I get right in, using the credentials just as they appear in the code.

So why do my credentials get rejected when I supply them programmatically?

[Pat Gonzalez]

I'm sure you've read these already but it might be worth looking at it again:

http://java.sun.com/javase/6/docs/technotes/guides/net/http-auth.html

and

http://spnego.sourceforge.net/pre_flight.html

[Thomas Kennedy]

Oh I read them all right. Understanding all of what I read is another matter.

As it happens, if I use the IP address it works fine. So my guess is that something between me and the dns is screwing it up. Like the load balancer doesn't like my using the application port, assuming everyone uses port 80, something like that. It would not surprise me overmuch: I'm more or less sure I'm the first person ever to try to read the Sharepoint data programmatically, as it's a pretty new environment.