jcifs包实现域认证的单点登录带来了个奇怪的问题

于 2013-06-14 22:00:00 发布
阅读量341 收藏
点赞数
文章标签： 操作系统 web.xml java



先简述一下系统使用的技术，框架是struts1.2,action继承LookupDispatchAction，页面的验证使用validation，应用服务器为jboss4.2
问题描述:
在web.xml配置文件中配置了实现域登录的Servlet后出现如下问题:
点击系统的“增加”按钮弹出的页面中的“保存”按钮无法调用action中对应的方法；
“修改”按钮弹出页面的“保存”则出现如下错误
WARN [RequestProcessor] Unhandled Exception thrown: classjavax.servlet.ServletException
INFO [[/]] Request[/doc/docmanagedetailaction] does not contain handlerparameter named 'act'. This may be caused by whitespace in the label text.

jsp页面中的“保存”按钮代码
<html:submit styleClass="button" property="act"οnclick="return chkpagecount();">
<bean:message key="button.save" />
</html:submit>


实现域登录的Java文件(http://www.jcifs.com/可以下载相应的jar包)
/**
* 本java文件来自于jcifs.http.NtlmHttpFilter.java
*/

@SuppressWarnings({"serial","unused"})
public class ADServlet extends HttpServlet {

private static LogStream log = LogStream.getInstance();

private String defaultDomain;

private String domainController;

private boolean loadBalance;

private boolean enableBasic;

private boolean insecureBasic;

private String realm;

private Map map;

/**

* Initialize this servlet.

*

* @exception ServletException

* if we cannot configure ourselves correctly

*/

public void init(ServletConfig config) throws ServletException {

map=new HashMap();

Config.setProperty("jcifs.smb.client.soTimeout","1800000");

Config.setProperty("jcifs.netbios.cachePolicy","1200");

Config.setProperty("jcifs.smb.lmCompatibility","0");

Config.setProperty("jcifs.smb.client.useExtendedSecurity","false");

Enumeration e = config.getInitParameterNames();

do {

if (!e.hasMoreElements()) {

break;

}

String name = (String) e.nextElement();

if (name.startsWith("jcifs.")) {

Config.setProperty(name, config.getInitParameter(name));

}

} while (true);

defaultDomain = Config.getProperty("jcifs.smb.client.domain");

domainController =Config.getProperty("jcifs.http.domainController");

if (domainController == null) {

domainController = defaultDomain;

loadBalance = Config.getBoolean("jcifs.http.loadBalance",true);

}

enableBasic =Boolean.valueOf(Config.getProperty("jcifs.http.enableBasic")).booleanValue();

insecureBasic =Boolean.valueOf(Config.getProperty("jcifs.http.insecureBasic")).booleanValue();

realm = Config.getProperty("jcifs.http.basicRealm");

if (realm == null) {

realm = "jCIFS";

}

int level;

if ((level = Config.getInt("jcifs.util.loglevel", -1)) != -1){

LogStream.setLevel(level);

}

LogStream _tmp = log;

if (LogStream.level > 2) {

try {

Config.store(log, "JCIFS PROPERTIES");

} catch (IOException ioe) {



}

}

}



public void doGet(HttpServletRequest request, HttpServletResponseresponse)

throws IOException, ServletException {

NtlmPasswordAuthentication ntlm;

try{

if ((ntlm = negotiate(request, response, false)) == null) {



return;

} else {

String uuname=(String)map.get("adremoteuser");

System.out.println("\t\t域登陆用户名："+uuname);

uuname=uuname.substring(uuname.indexOf("\\")+1,uuname.length());response.sendRedirect(request.getContextPath()+"/loginaction.do?act=login&companycode=test&username="+uuname+"&password=***");

return;

}

}catch (Exception e) {

e.printStackTrace();

}

}



public void doPost(HttpServletRequest request, HttpServletResponseresponse)

throws IOException, ServletException {

doGet(request, response);

}

public void destroy() {

map=null;

}



protected NtlmPasswordAuthentication negotiate(HttpServletRequest req,HttpServletResponse resp,

boolean skipAuthentication) throws IOException, ServletException {

NtlmPasswordAuthentication ntlm = null;

String msg = req.getHeader("Authorization");

boolean offerBasic = enableBasic && (insecureBasic ||req.isSecure());

if (msg != null && (msg.startsWith("NTLM ") ||offerBasic && msg.startsWith("Basic "))) {

UniAddress dc;

if (msg.startsWith("NTLM ")) {

HttpSession ssn = req.getSession();

byte challenge[];

if (loadBalance) {

NtlmChallenge chal = (NtlmChallenge) ssn.getAttribute("NtlmHttpChal");

if (chal == null) {

chal = SmbSession.getChallengeForDomain();

ssn.setAttribute("NtlmHttpChal", chal);

}

dc = chal.dc;

challenge = chal.challenge;

} else {

dc = UniAddress.getByName(domainController, true);

challenge = SmbSession.getChallenge(dc);

}

if ((ntlm = NtlmSsp.authenticate(req, resp, challenge)) == null) {

return null;

}

ssn.removeAttribute("NtlmHttpChal");

} else {

String auth = new String(Base64.decode(msg.substring(6)),"US-ASCII");

int index = auth.indexOf(':');

String user = index == -1 ? auth : auth.substring(0, index);

String password = index == -1 ? "" : auth.substring(index +1);

index = user.indexOf('\\');

if (index == -1) {

index = user.indexOf('/');

}

String domain = index == -1 ? defaultDomain : user.substring(0,index);

user = index == -1 ? user : user.substring(index + 1);

ntlm = new NtlmPasswordAuthentication(domain, user, password);

dc = UniAddress.getByName(domainController, true);

}

map.put("adremoteuser", ntlm.getName());

try {

SmbSession.logon(dc, ntlm);

LogStream _tmp = log;

if (LogStream.level > 2) {

log.println("NtlmHttpFilter: " + ntlm + " successfullyauthenticated against " + dc);

}

} catch (SmbAuthException sae) {

LogStream _tmp1 = log;

if (LogStream.level > 1) {

log.println("NtlmHttpFilter: " + ntlm.getName() + ":0x" + Hexdump.toHexString(sae.getNtStatus(), 8) + ": " + sae);

}

SmbAuthException _tmp2 = sae;

if (sae.getNtStatus() == 0xc0000005) {

HttpSession ssn = req.getSession(false);

if (ssn != null) {

ssn.removeAttribute("NtlmHttpAuth");

}

}

resp.setHeader("WWW-Authenticate", "NTLM");

if (offerBasic) {

resp.addHeader("WWW-Authenticate", "Basicrealm=\"" + realm + "\"");

}

resp.setStatus(401);

resp.setContentLength(0);

resp.flushBuffer();

return null;

}

req.getSession().setAttribute("NtlmHttpAuth", ntlm);

} else if (!skipAuthentication) {

HttpSession ssn = req.getSession(false);

if (ssn == null || (ntlm = (NtlmPasswordAuthentication)ssn.getAttribute("NtlmHttpAuth")) == null) {

resp.setHeader("WWW-Authenticate", "NTLM");

if (offerBasic) {

resp.addHeader("WWW-Authenticate", "Basicrealm=\"" + realm + "\"");

}

resp.setStatus(401);

resp.setContentLength(0);

resp.flushBuffer();

return null;

}

}

return ntlm;

}

}

Web.Xml中配置
<servlet>
<servlet-name>myadservlet</servlet-name>
<servlet-class>com. company.test.ADServlet</servlet-class>
<init-param>
<param-name>jcifs.http.domainController</param-name>
<param-value>172.16.2.101</param-value>
</init-param>
<init-param>
<param-name>jcifs.netbios.wins</param-name>
<param-value>172.16.2.101,172.16.2.105</param-value>
</init-param>
<init-param>
<param-name>jcifs.smb.client.domain</param-name>
<param-value>dns. company.net.cn</param-value>
</init-param>
<init-param>
<param-name>jcifs.smb.client.soTimeout</param-name>
<param-value>18000</param-value>
</init-param>
<init-param>
<param-name>jcifs.netbios.cachePolicy</param-name>
<param-value>1200</param-value>
</init-param>
<init-param>
<param-name>jcifs.util.loglevel</param-name>
<param-value>0</param-value>
</init-param>
<load-on-startup>3</load-on-startup>
</servlet>
<servlet-mapping>

若要解决此问题，从客户端，使用注册表编辑器 (Regedt32.exe) 将值添加到以下注册表项：
HKEY_CURRENT_USER/软件/microsoft/windows/CurrentVersion/internet设置 /
注意上面的注册表项是一个路径，它经过了折行以提高可读性。

添加以下注册表值：
值名称： DisableNTLMPreAuth
数据类型： REG_DWORD
值： 1
除了注册表项还需要关闭 Internet Explorer 中 启用集成 Windows 身份验证。 若要这样做，请按照下列步骤操作：
启动 Internet Explorer。
单击 工具，请单击 Internet 选项，然后单击 高级 选项卡。
在 安全，下单击以取消选择 启用集成 Windows 身份验证 (需要重启动)，然后单击 应用。
关闭 Internet Explorer。
若要解决此问题，从服务器端，配置网站以使用下列身份验证方法之一：
若要允许匿名访问仅网站进行配置。
配置为允许匿名访问和 NLTM 身份验证 （集成 Windows 身份验证） 的网站

yongyonglsy
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值