Using Active Directory services as i2b2 authentication method

[emails inform]

Hi,

I'm reaching out to seek help with using Active Directory services as i2b2 authentication method I have installed i2b2 webclient 1.8.1. and defined authentication_method as NTLM2, with appropriate domain/domain_controller using Navigation panel in i2b2 Administration Module.

I am getting following error
2025-04-25 08:52:01,078 ERROR [edu.harvard.i2b2.pm.delegate.ServicesHandler] (Thread-130) com.hierynomus.security.SecurityException: java.security.NoSuchAlgorithmException: MD4 MessageDigest not available
2025-04-25 08:52:01,078 ERROR [stderr] (Thread-130) java.lang.Exception: com.hierynomus.security.SecurityException: java.security.NoSuchAlgorithmException: MD4 MessageDigest not available

I have tried using JCE (Java Cryptography Extension) provider that supports MD4, such as Bouncy Castle. I downloaded Bouncy Castle JARs(bcpkix-jdk18on-1.80.jar,bcprov-jdk18on-1.80.jar,bcutil-jdk18on-1.80.jar) and stored them in /opt/wildfly/modules/system/layers/base/org/bouncycastle/main and updated module.xml in the same directory.

Added following to standalone.conf in $WILDFLY_HOME/bin/standalone.conf
JAVA_OPTS="$JAVA_OPTS -Djava.security.properties=$JBOSS_HOME/custom-security.properties"
Then created a file: $WILDFLY_HOME/custom-security.properties with the following
security.provider.1=org.bouncycastle.jce.provider.BouncyCastleProvider

The connection-url is
<connection-url>jdbc:sqlserver://myserver:1433;database=i2b2hive;encrypt=false;trustServerCertificate=true;authenticationScheme=NTLM;domain=mydomain</connection-url>

However, i2b2 is not able to use the Module and the error 'MD4 MessageDigest not available' persists. I have attached the server.log. If someone could point me in the right direction. 

Thanks

Sue

[Mendis, Michael E.]

What version of Java are you using?

On Apr 26, 2025, at 1:33 AM, emails inform <emails...@gmail.com> wrote:



        External Email - Use Caution        

--
You received this message because you are subscribed to the Google Groups "i2b2 Install Help" group.
To unsubscribe from this group and stop receiving emails from it, send an email to i2b2-install-h...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/i2b2-install-help/84c902fe-f5f2-4f5b-a085-6a8baea13f2bn%40googlegroups.com.

The information in this e-mail is intended only for the person to whom it is addressed.  If you believe this e-mail was sent to you in error and the e-mail contains patient information, please contact the Mass General Brigham Compliance HelpLine at https://www.massgeneralbrigham.org/complianceline .

Please note that this e-mail is not secure (encrypted).  If you do not wish to continue communication over unencrypted e-mail, please notify the sender of this message immediately.  Continuing to send or respond to e-mail after receiving this message means you understand and accept this risk and wish to continue to communicate over unencrypted e-mail. 

[emails inform]

We are using 

openjdk 17.0.15 2025-04-15 LTS
OpenJDK Runtime Environment (Red_Hat-17.0.15.0.6-1) (build 17.0.15+6-LTS)
OpenJDK 64-Bit Server VM (Red_Hat-17.0.15.0.6-1) (build 17.0.15+6-LTS, mixed mode, sharing)

[Mendis, Michael E.]

The current version of i2b2 1.8.1a does not support jdk 17, I would use openjdk  8.

 

The coming version 1.8.2 will support jdk 17

 

-mike

 

To view this discussion visit https://groups.google.com/d/msgid/i2b2-install-help/2422ca73-4040-454f-b961-fd6b4311b60en%40googlegroups.com.

[emails inform]

Thank you!