Ntlm authentication

[Migrated From Jforum.net]

Hi,
I have been using this good software from 1 month. I am trying to integrate this with some other web apps done in j2ee. In our, intranet we are using ntlm authentication for all web apps. Problem is I have to authenticate 2 times, one for my application and one for jforum. I want to have only 1 ntlm authentication. How can I use NTLM in jforum?.

Thank you
durga prasad
[originally posted on jforum.net by Anonymous]

[Migrated From Jforum.net]

Take a look here:

http://www.jforum.net/confluence/display/sso/Home

I don't have any experiencie with NTLM, though. However, you are very welcome to share with us your process, and maybe even document it in the Wiki, to have it registered for future users

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

Hi Rafael,
Actually I dont need NTLM authentication [My Boss told me later]. What I have to do is authenticate it with our corporate accounts.

I have done it myself. I have used jcifs and could do the authentication, if that user is not there in our JForum, I am creating a user on the fly and letting him proceed further.

I am willing to share that part of code [maybe others will be benifited].

I am attaching those files.

1) I have added NTLMLoginAuthenticator.java in src\net\jforum\drivers\external
2) I have modified configuration to use this authenticator
3) I used jcifs.jar
[originally posted on jforum.net by Anonymous]

[Migrated From Jforum.net]

Hey,

I have tried to click attach files button.. but I am not getting upload dialog.

So, I will paste the code of NTLMLoginAuthenticator.java here..

package net.jforum.drivers.external;

import java.sql.PreparedStatement;
import java.sql.ResultSet;

import net.jforum.JForum;
import net.jforum.entities.User;
import net.jforum.model.UserModel;
import net.jforum.util.MD5;
import net.jforum.util.preferences.SystemGlobals;
import jcifs.UniAddress;
import jcifs.smb.NtlmPasswordAuthentication;
import jcifs.smb.SmbSession;
import jcifs.smb.SmbException;
import java.net.InetAddress;
import java.util.List;
import net.jforum.entities.UserSession;
import java.util.Date;
import net.jforum.SessionFacade;
import net.jforum.model.DataAccessDriver;

/**
 * NTLM login authenticator for JForum.
 * This authenticator will validate the input against
 * <i>jforum_users</i>. 
 * 
 * @author Rafael Steil
 * @version $Id: NTLMLoginAuthenticator.java,v 1.1 2005/01/03 16:13:23 rafaelsteil Exp $
 */
public class NTLMLoginAuthenticator implements LoginAuthenticator
{
	private UserModel userModel;

	/**
	 * @see net.jforum.drivers.external.LoginAuthenticator#setUserModel(net.jforum.model.UserModel)
	 */
	public void setUserModel(UserModel userModel)
	{
		this.userModel = userModel;
	}

	/**
	 * @see net.jforum.drivers.external.LoginAuthenticator#validateLogin(java.lang.String, java.lang.String)
	 */
	public User validateLogin(String username, String password) throws Exception
	{      
                if(username.equals("admin"))
                {
                    		PreparedStatement p = JForum.getConnection().prepareStatement(SystemGlobals.getSql("UserModel.login"));
                		p.setString(1, username);
                		p.setString(2, MD5.crypt(password));
		
                		User user = null;
		
                		ResultSet rs = p.executeQuery();
                		if (rs.next() && rs.getInt("user_id") > 0) {
                			user = this.userModel.selectById(rs.getInt("user_id"));
                		}

                		rs.close();
                		p.close();
                
        		if (user != null && !user.isDeleted() && (user.getActivationKey() == null || user.isActive())) {
                		return user;
                        }
                }
                
                try
                {
                    InetAddress ip = InetAddress.getByName("<your.wins.server>"); // ip address of your windows controller [you can get that info by ipconfig /all
                    UniAddress myDomain = new UniAddress(ip);
                    NtlmPasswordAuthentication auth = new NtlmPasswordAuthentication("<your.domain.name>", username,password);
                    SmbSession.logon(myDomain, auth);
                    
                    User user1=this.userModel.selectByName(username);
                    if(user1==null)
                    {
                        System.out.println("This user does not exist, So I am creating one..");
               		User u = new User();
                        String error_message=null;
        		UserModel um = DataAccessDriver.getInstance().newUserModel();

        		boolean error = false;

        		if (!error && um.isUsernameRegistered(username)) 
                        {
        			error_message="This user name already exists!";
        			error = true;
        		}

                        if (error) {
                            return null;
                        }

                        u.setUsername(username);
                        u.setPassword(MD5.crypt(password));
        		u.setEmail(username+"@yourcomp.com");

        		int userId = um.addNew(u);
                        
                        SessionFacade.setAttribute("logged", "1");

        		UserSession userSession = new UserSession();
        		userSession.setAutoLogin(true);
        		userSession.setUserId(userId);
        		userSession.setUsername(u.getUsername());
        		userSession.setLastVisit(new Date(System.currentTimeMillis()));
        		userSession.setStartTime(new Date(System.currentTimeMillis()));
                            
                        SessionFacade.add(userSession);

                        // Finalizing.. show to user the congrats page
//                        JForum.setRedirect("/user/registrationComplete"+SystemGlobals.getValue(ConfigKeys.SERVLET_EXTENSION));
                
//        		this.logNewRegisteredUserIn(userId, u);
                          user1=u;
                    }
                    return user1;
                }
                catch(SmbException smbe)
                {
                    System.out.println("Wrong authentication has been entered.. returning null");
                    smbe.printStackTrace();
                    return null;
                }
                /*
                javax.servlet.ServletContext ctx= JForum.getRequest().getSession().getServletContext();
                ctx.setAttribute("jforum_session_id", JForum.getRequest().getSession().getId());
                System.out.println("#### set jforum_session_id is "+JForum.getRequest().getSession().getId());
                 */
/*		javax.servlet.http.HttpServletResponse hsr=JForum.getResponse();
                javax.servlet.http.Cookie c1 = new javax.servlet.http.Cookie("JSESSIONID",JForum.getRequest().getSession().getId());
                c1.setPath ("/JForum");
//                c.setMaxAge (logoncookies[i].getExpiryDate());
                hsr.addCookie(c1);*/
                
/*		if (user != null && !user.isDeleted() && (user.getActivationKey() == null || user.isActive())) {
			return user;
		}
*/		
//		return null;
	}
}

once after you have put above code in src\net\jforum\drivers\external
replace
"login.authenticator = net.jforum.drivers.external.DefaultLoginAuthenticator" with
"login.authenticator = net.jforum.drivers.external.NTLMLoginAuthenticator"
in SystemGlobals.properties

you can download jcifs.jar from net.

Thank you
Durga Prasad
[originally posted on jforum.net by durgaprasad_j]

[Migrated From Jforum.net]

Has anyone updated this code for the latest version?

Has anyone implemented NTLM authentication into the most recent stuff? Are there any guidelines I can read on it? I would greatly appreciate it..


My scenario is that I need to provide internal users with a forum for the application I develop for my employer.

The key is, I need to get the users from the Windows domain...
Ideally--anyone w/ a valid NT credentials would be allowed in as a general user ... but if there has to be an intermediate step for user creation, I can work with that as well.

Dave

[originally posted on jforum.net by xiarcel]

[Migrated From Jforum.net]

Using SSO and NTLM:

After a long time of trying, i got it. It's pretty easy and i want to show it to you, so everyone, who wants to implement NTLM and SSO in JForum, does not have to spend so much time like i did...

At first you have to install your JForum. Then you only have to change two things:

1. in the SystemGlobals.properties (../webapps/YOUR_FORUM_NAME/WEB-INF/config/ ):

in line 329 activate Single Sign-On:
authentication.type = sso

2. in the web.xml (../webapps/YOUR_FORUM_NAME/WEB-INF/ ):

put the NTLM-Filter before the first <servlet> - tag. The NTLM-filter looks like this:

<filter>
    <filter-name>NtlmHttpFilter</filter-name>
    <filter-class>jcifs.http.NtlmHttpFilter</filter-class>

    <init-param>
        <param-name>jcifs.smb.client.domain</param-name>
        <param-value>YOURDOMAINNAME</param-value>
    </init-param> 

    <init-param>
        <param-name>jcifs.netbios.wins</param-name>
        <param-value>1.2.3.4</param-value>
    </init-param>
</filter>

<filter-mapping>
    <filter-name>NtlmHttpFilter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

� YOURDOMAINNAME = NTLM domain name (for example the name of your company)
� 1.2.3.4 = IP-Adresse des WINS Servers
(ipconfig/all -> findet alle IP-Adressen des WINS Servers)


At last, DO NOT FORGET to put the JCIFS.jar into the library (../webapps/YOUR_FORUM_NAME/WEB-INF/lib/ ).
The JCIFS is necessary for the NTLM Authentication. Please note: you have to use this Version: jcifs-1.2.25.jar
The newer versions throw exceptions in jforum, because they try to use NTLMv2, but in jforum runs only NTLMv1.

Here you get JCIFS: http://jcifs.samba.org/src/


That's it. Please note: you don't need the NTLMLoginAuthenticator if you use the sso.

Enjoy it..

David
[originally posted on jforum.net by david]