Java tutorial
/* jcifs smb client library in Java * Copyright (C) 2002 "Michael B. Allen" <jcifs at samba dot org> * "Eric Glass" <jcifs at samba dot org> * * This library is free software; you can redistribute it and/or * modify it under the terms of the GNU Lesser General Public * License as published by the Free Software Foundation; either * version 2.1 of the License, or (at your option) any later version. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this library; if not, write to the Free Software * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA */ package jcifs.http; import java.io.IOException; import java.util.Enumeration; import java.util.Properties; import javax.servlet.ServletConfig; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import org.bouncycastle.util.encoders.Base64; import jcifs.Address; import jcifs.CIFSContext; import jcifs.CIFSException; import jcifs.Config; import jcifs.config.PropertyConfiguration; import jcifs.context.BaseContext; import jcifs.netbios.UniAddress; import jcifs.smb.NtlmPasswordAuthentication; import jcifs.smb.SmbAuthException; /** * This servlet may be used with pre-2.3 servlet containers * to protect content with NTLM HTTP Authentication. Servlets that * extend this abstract base class may be authenticatied against an SMB * server or domain controller depending on how the * <tt>jcifs.smb.client.domain</tt> or <tt>jcifs.http.domainController</tt> * properties are be specified. <b>With later containers the * <tt>NtlmHttpFilter</tt> should be used</b>. For custom NTLM HTTP Authentication schemes the <tt>NtlmSsp</tt> may be * used. * <p> * Read <a href="../../../ntlmhttpauth.html">jCIFS NTLM HTTP Authentication and the Network Explorer Servlet</a> related * information. * * @deprecated NTLMv1 only */ @Deprecated public abstract class NtlmServlet extends HttpServlet { /** * */ private static final long serialVersionUID = -4686770199446333333L; private String defaultDomain; private String domainController; private boolean loadBalance; private boolean enableBasic; private boolean insecureBasic; private String realm; private CIFSContext transportContext; @Override public void init(ServletConfig config) throws ServletException { super.init(config); Properties p = new Properties(); p.putAll(System.getProperties()); /* * Set jcifs properties we know we want; soTimeout and cachePolicy to 10min. */ p.setProperty("jcifs.smb.client.soTimeout", "300000"); p.setProperty("jcifs.netbios.cachePolicy", "600"); Enumeration<String> e = config.getInitParameterNames(); String name; while (e.hasMoreElements()) { name = e.nextElement(); if (name.startsWith("jcifs.")) { p.setProperty(name, config.getInitParameter(name)); } } try { this.defaultDomain = p.getProperty("jcifs.smb.client.domain"); this.domainController = p.getProperty("jcifs.http.domainController"); if (this.domainController == null) { this.domainController = this.defaultDomain; this.loadBalance = Config.getBoolean(p, "jcifs.http.loadBalance", true); } this.enableBasic = Boolean.valueOf(p.getProperty("jcifs.http.enableBasic")).booleanValue(); this.insecureBasic = Boolean.valueOf(p.getProperty("jcifs.http.insecureBasic")).booleanValue(); this.realm = p.getProperty("jcifs.http.basicRealm"); if (this.realm == null) this.realm = "jCIFS"; this.transportContext = new BaseContext(new PropertyConfiguration(p)); ; } catch (CIFSException ex) { throw new ServletException("Failed to initialize config", ex); } } @Override protected void service(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { Address dc; boolean offerBasic = this.enableBasic && (this.insecureBasic || request.isSecure()); String msg = request.getHeader("Authorization"); if (msg != null && (msg.startsWith("NTLM ") || (offerBasic && msg.startsWith("Basic ")))) { if (this.loadBalance) { dc = new UniAddress(getTransportContext().getNameServiceClient().getNbtByName(this.domainController, 0x1C, null)); } else { dc = getTransportContext().getNameServiceClient().getByName(this.domainController, true); } NtlmPasswordAuthentication ntlm; if (msg.startsWith("NTLM ")) { byte[] challenge = getTransportContext().getTransportPool().getChallenge(getTransportContext(), dc); ntlm = NtlmSsp.authenticate(getTransportContext(), request, response, challenge); if (ntlm == null) return; } else { String auth = new String(Base64.decode(msg.substring(6)), "US-ASCII"); int index = auth.indexOf(':'); String user = (index != -1) ? auth.substring(0, index) : auth; String password = (index != -1) ? auth.substring(index + 1) : ""; index = user.indexOf('\\'); if (index == -1) index = user.indexOf('/'); String domain = (index != -1) ? user.substring(0, index) : this.defaultDomain; user = (index != -1) ? user.substring(index + 1) : user; ntlm = new NtlmPasswordAuthentication(getTransportContext(), domain, user, password); } try { getTransportContext().getTransportPool().logon(getTransportContext(), dc); } catch (SmbAuthException sae) { response.setHeader("WWW-Authenticate", "NTLM"); if (offerBasic) { response.addHeader("WWW-Authenticate", "Basic realm=\"" + this.realm + "\""); } response.setHeader("Connection", "close"); response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); response.flushBuffer(); return; } HttpSession ssn = request.getSession(); ssn.setAttribute("NtlmHttpAuth", ntlm); ssn.setAttribute("ntlmdomain", ntlm.getUserDomain()); ssn.setAttribute("ntlmuser", ntlm.getUsername()); } else { HttpSession ssn = request.getSession(false); if (ssn == null || ssn.getAttribute("NtlmHttpAuth") == null) { response.setHeader("WWW-Authenticate", "NTLM"); if (offerBasic) { response.addHeader("WWW-Authenticate", "Basic realm=\"" + this.realm + "\""); } response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); response.flushBuffer(); return; } } super.service(request, response); } /** * @return */ private CIFSContext getTransportContext() { return this.transportContext; } }