Our system is working with 2 gateways :
- 1 in DMZ as external gateway that have access on internet
- 1 in LAN as internal gateway with access to external gateway
Our service call an Exchange Server which use NTLM for authentication (https://msdn.microsoft.com/fr-fr/library/windows/desktop/aa378749(v=vs.85).aspx) Challenge/Response protocol.
NTLM Authentication requires multiple exchange between the client and the server.
When we call the service on the internal gateway the service works with NTML authentication (3 call between my internal gateway and exchange server).
But on the external gateway, on the second call from the external gateway we got this error :
<faultstring>Error in assertion processing</faultstring>
<l7:policyResult status="javax.security.auth.x500.X500Principal cannot be cast to com.l7tech.server.transport.http.ConnectionId" xmlns:l7="http://www.layer7tech.com/ws/policy/fault"/>
If you have previous experience with NTLM and CA gateway?