All Downloads are FREE. Search and download functionalities are using the official Maven repository.

jcifs.http.NtlmServlet Maven / Gradle / Ivy

There is a newer version: 2.1.10
Show newest version
/* jcifs smb client library in Java
 * Copyright (C) 2002  "Michael B. Allen" 
 *                   "Eric Glass" 
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */

package jcifs.http;


import java.io.IOException;
import java.util.Enumeration;
import java.util.Properties;

import javax.servlet.ServletConfig;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.bouncycastle.util.encoders.Base64;

import jcifs.Address;
import jcifs.CIFSContext;
import jcifs.CIFSException;
import jcifs.Config;
import jcifs.config.PropertyConfiguration;
import jcifs.context.BaseContext;
import jcifs.netbios.UniAddress;
import jcifs.smb.NtlmPasswordAuthentication;
import jcifs.smb.SmbAuthException;


/**
 * This servlet may be used with pre-2.3 servlet containers
 * to protect content with NTLM HTTP Authentication. Servlets that
 * extend this abstract base class may be authenticated against an SMB
 * server or domain controller depending on how the
 * jcifs.smb.client.domain or jcifs.http.domainController
 * properties are be specified. With later containers the
 * NtlmHttpFilter should be used. For custom NTLM HTTP Authentication schemes the NtlmSsp may be
 * used.
 * 

* Read jCIFS NTLM HTTP Authentication and the Network Explorer Servlet related * information. * * @deprecated NTLMv1 only */ @Deprecated public abstract class NtlmServlet extends HttpServlet { /** * */ private static final long serialVersionUID = -4686770199446333333L; private String defaultDomain; private String domainController; private boolean loadBalance; private boolean enableBasic; private boolean insecureBasic; private String realm; private CIFSContext transportContext; @Override public void init ( ServletConfig config ) throws ServletException { super.init(config); Properties p = new Properties(); p.putAll(System.getProperties()); /* * Set jcifs properties we know we want; soTimeout and cachePolicy to 10min. */ p.setProperty("jcifs.smb.client.soTimeout", "300000"); p.setProperty("jcifs.netbios.cachePolicy", "600"); Enumeration e = config.getInitParameterNames(); String name; while ( e.hasMoreElements() ) { name = e.nextElement(); if ( name.startsWith("jcifs.") ) { p.setProperty(name, config.getInitParameter(name)); } } try { this.defaultDomain = p.getProperty("jcifs.smb.client.domain"); this.domainController = p.getProperty("jcifs.http.domainController"); if ( this.domainController == null ) { this.domainController = this.defaultDomain; this.loadBalance = Config.getBoolean(p, "jcifs.http.loadBalance", true); } this.enableBasic = Boolean.valueOf(p.getProperty("jcifs.http.enableBasic")).booleanValue(); this.insecureBasic = Boolean.valueOf(p.getProperty("jcifs.http.insecureBasic")).booleanValue(); this.realm = p.getProperty("jcifs.http.basicRealm"); if ( this.realm == null ) this.realm = "jCIFS"; this.transportContext = new BaseContext(new PropertyConfiguration(p));; } catch ( CIFSException ex ) { throw new ServletException("Failed to initialize config", ex); } } @Override protected void service ( HttpServletRequest request, HttpServletResponse response ) throws ServletException, IOException { Address dc; boolean offerBasic = this.enableBasic && ( this.insecureBasic || request.isSecure() ); String msg = request.getHeader("Authorization"); if ( msg != null && ( msg.startsWith("NTLM ") || ( offerBasic && msg.startsWith("Basic ") ) ) ) { if ( this.loadBalance ) { dc = new UniAddress(getTransportContext().getNameServiceClient().getNbtByName(this.domainController, 0x1C, null)); } else { dc = getTransportContext().getNameServiceClient().getByName(this.domainController, true); } NtlmPasswordAuthentication ntlm; if ( msg.startsWith("NTLM ") ) { byte[] challenge = getTransportContext().getTransportPool().getChallenge(getTransportContext(), dc); ntlm = NtlmSsp.authenticate(getTransportContext(), request, response, challenge); if ( ntlm == null ) return; } else { String auth = new String(Base64.decode(msg.substring(6)), "US-ASCII"); int index = auth.indexOf(':'); String user = ( index != -1 ) ? auth.substring(0, index) : auth; String password = ( index != -1 ) ? auth.substring(index + 1) : ""; index = user.indexOf('\\'); if ( index == -1 ) index = user.indexOf('/'); String domain = ( index != -1 ) ? user.substring(0, index) : this.defaultDomain; user = ( index != -1 ) ? user.substring(index + 1) : user; ntlm = new NtlmPasswordAuthentication(getTransportContext(), domain, user, password); } try { getTransportContext().getTransportPool().logon(getTransportContext(), dc); } catch ( SmbAuthException sae ) { response.setHeader("WWW-Authenticate", "NTLM"); if ( offerBasic ) { response.addHeader("WWW-Authenticate", "Basic realm=\"" + this.realm + "\""); } response.setHeader("Connection", "close"); response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); response.flushBuffer(); return; } HttpSession ssn = request.getSession(); ssn.setAttribute("NtlmHttpAuth", ntlm); ssn.setAttribute("ntlmdomain", ntlm.getUserDomain()); ssn.setAttribute("ntlmuser", ntlm.getUsername()); } else { HttpSession ssn = request.getSession(false); if ( ssn == null || ssn.getAttribute("NtlmHttpAuth") == null ) { response.setHeader("WWW-Authenticate", "NTLM"); if ( offerBasic ) { response.addHeader("WWW-Authenticate", "Basic realm=\"" + this.realm + "\""); } response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); response.flushBuffer(); return; } } super.service(request, response); } /** * @return */ private CIFSContext getTransportContext () { return this.transportContext; } }





© 2015 - 2024 Weber Informatics LLC | Privacy Policy