NT Authentication

yeewaitu · June 11th, 2003, 02:26 AM

Hi.

I am trying to get the NT username of the client accessing my Websphere server. I have tried using request.getRemoteUser(), but it returns me "null".

Anyone of you knows how to do this???

Please help!

:D

:)

YWT

yeewaitu · June 11th, 2003, 04:28 AM

I have found the solution...

But now .. I have another problem ... how do I grab the groups that this particular user is in

YWT

hermlo · July 28th, 2003, 12:26 PM

Can you tell me how youo solved your first problem? I am having the same issue. Thanks.

yeewaitu · July 28th, 2003, 07:38 PM

Quote:

quote:Originally posted by hermlo
Can you tell me how youo solved your first problem? I am having the same issue. Thanks.

Not sure if this would work for you. =)

Code:

<%@ page import="sun.misc.BASE64Encoder,java.util.*,java.lang.*,java.io.*,java.text.*,javax.naming.*,javax.naming.directory.*" %>
<%@ page language="java" contentType="text/html" %>

<%  
   String auth = request.getHeader("Authorization");
      if (auth == null) 
         {
            response.setStatus(response.SC_UNAUTHORIZED);
            response.setHeader("WWW-Authenticate", "NTLM");
            return;
         }
      if (auth.startsWith("NTLM ")) { byte[] msg = new sun.misc.BASE64Decoder().decodeBuffer(auth.substring(5).trim());
         int off = 0, length, offset;
         String s;

            if (msg[8] == 1) { // first step of authentication
            off = 18;

         // this part is for full hand-shaking, just tested, didn't care about result passwords
         byte z = 0;
         byte[] msg1 = {(byte)'N', (byte)'T', (byte)'L', (byte)'M', (byte)'S', (byte)'S', (byte)'P', z,
         (byte)2, z, z, z, z, z, z, z,
         (byte)40, z, z, z, (byte)1, (byte)130, z, z,
         z, (byte)2, (byte)2, (byte)2, z, z, z, z, // this line is 'nonce'
         z, z, z, z, z, z, z, z};

         // remove next lines if you want see the result of first step
         response.setStatus(response.SC_UNAUTHORIZED);
         response.setHeader("WWW-Authenticate", "NTLM " + new sun.misc.BASE64Encoder().encodeBuffer(msg1).trim());
         return;

         } 

      else if (msg[8] == 3) { // third step of authentization - takes long time, nod needed if zou care only for loginname
      off = 30;
      length = msg[off+17]*256 + msg[off+16];
      offset = msg[off+19]*256 + msg[off+18];
      s = new String(msg, offset, length);      
      } else
      return;

      length = msg[off+1]*256 + msg[off];
      offset = msg[off+3]*256 + msg[off+2];
      s = new String(msg, offset, length);

      length = msg[off+9]*256 + msg[off+8];
      offset = msg[off+11]*256 + msg[off+10];
      s = new String(msg, offset, length);
      out.println(s);
      }

%>

Good luck! :D

YWT

svgkraju · November 18th, 2004, 02:14 AM

Using Servlets and oc4j 9.0.2 in my web application.
I am trying to get user name and domain using the given sample code. I created a method called onAutoLogin and placed the given sample code in that.

To avoid giving user name, domain and password, I calling the method "onAutoLogin" directly. But this is not working.

I am always getting auth variable null. Even I did try to call the same method more than once. Still auth variable is null.

What exactly I am missing here?