jcifs包实现域认证的单点登录带来了个奇怪的问题

廖世勇

浏览: 100909 次
性别:
来自: 湖南郴州

最近访客更多访客>>

kopekp

stingice

sinohxm

fctxhuihui

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

先简述一下系统使用的技术，框架是struts1.2,action继承LookupDispatchAction，页面的验证使用validation，应用服务器为jboss4.2
问题描述:
在web.xml配置文件中配置了实现域登录的Servlet后出现如下问题:
点击系统的“增加”按钮弹出的页面中的“保存”按钮无法调用action中对应的方法；
“修改”按钮弹出页面的“保存”则出现如下错误
WARN [RequestProcessor] Unhandled Exception thrown: classjavax.servlet.ServletException
INFO [[/]] Request[/doc/docmanagedetailaction] does not contain handlerparameter named 'act'. This may be caused by whitespace in the label text.

jsp页面中的“保存”按钮代码
<html:submit styleClass="button" property="act"onclick="return chkpagecount();">
<bean:message key="button.save" />
</html:submit>

实现域登录的Java文件(http://www.jcifs.com/可以下载相应的jar包)
/**
* 本java文件来自于jcifs.http.NtlmHttpFilter.java
*/

@SuppressWarnings({"serial","unused"})
public class ADServlet extends HttpServlet {

private static LogStream log = LogStream.getInstance();

private String defaultDomain;

private String domainController;

private boolean loadBalance;

private boolean enableBasic;

private boolean insecureBasic;

private String realm;

private Map map;

/**

* Initialize this servlet.

*

* @exception ServletException

* if we cannot configure ourselves correctly

*/

public void init(ServletConfig config) throws ServletException {

map=new HashMap();

Config.setProperty("jcifs.smb.client.soTimeout","1800000");

Config.setProperty("jcifs.netbios.cachePolicy","1200");

Config.setProperty("jcifs.smb.lmCompatibility","0");

Config.setProperty("jcifs.smb.client.useExtendedSecurity","false");

Enumeration e = config.getInitParameterNames();

do {

if (!e.hasMoreElements()) {

break;

}

String name = (String) e.nextElement();

if (name.startsWith("jcifs.")) {

Config.setProperty(name, config.getInitParameter(name));

}

} while (true);

defaultDomain = Config.getProperty("jcifs.smb.client.domain");

domainController =Config.getProperty("jcifs.http.domainController");

if (domainController == null) {

domainController = defaultDomain;

loadBalance = Config.getBoolean("jcifs.http.loadBalance",true);

}

enableBasic =Boolean.valueOf(Config.getProperty("jcifs.http.enableBasic")).booleanValue();

insecureBasic =Boolean.valueOf(Config.getProperty("jcifs.http.insecureBasic")).booleanValue();

realm = Config.getProperty("jcifs.http.basicRealm");

if (realm == null) {

realm = "jCIFS";

}

int level;

if ((level = Config.getInt("jcifs.util.loglevel", -1)) != -1){

LogStream.setLevel(level);

}

LogStream _tmp = log;

if (LogStream.level > 2) {

try {

Config.store(log, "JCIFS PROPERTIES");

} catch (IOException ioe) {

}

}

}

public void doGet(HttpServletRequest request, HttpServletResponseresponse)

throws IOException, ServletException {

NtlmPasswordAuthentication ntlm;

try{

if ((ntlm = negotiate(request, response, false)) == null) {

return;

} else {

String uuname=(String)map.get("adremoteuser");

System.out.println("\t\t域登陆用户名："+uuname);

uuname=uuname.substring(uuname.indexOf("\\")+1,uuname.length());response.sendRedirect(request.getContextPath()+"/loginaction.do?act=login&companycode=test&username="+uuname+"&password=***");

return;

}

}catch (Exception e) {

e.printStackTrace();

}

}

public void doPost(HttpServletRequest request, HttpServletResponseresponse)

throws IOException, ServletException {

doGet(request, response);

}

public void destroy() {

map=null;

}

protected NtlmPasswordAuthentication negotiate(HttpServletRequest req,HttpServletResponse resp,

boolean skipAuthentication) throws IOException, ServletException {

NtlmPasswordAuthentication ntlm = null;

String msg = req.getHeader("Authorization");

boolean offerBasic = enableBasic && (insecureBasic ||req.isSecure());

if (msg != null && (msg.startsWith("NTLM ") ||offerBasic && msg.startsWith("Basic "))) {

UniAddress dc;

if (msg.startsWith("NTLM ")) {

HttpSession ssn = req.getSession();

byte challenge[];

if (loadBalance) {

NtlmChallenge chal = (NtlmChallenge) ssn.getAttribute("NtlmHttpChal");

if (chal == null) {

chal = SmbSession.getChallengeForDomain();

ssn.setAttribute("NtlmHttpChal", chal);

}

dc = chal.dc;

challenge = chal.challenge;

} else {

dc = UniAddress.getByName(domainController, true);

challenge = SmbSession.getChallenge(dc);

}

if ((ntlm = NtlmSsp.authenticate(req, resp, challenge)) == null) {

return null;

}

ssn.removeAttribute("NtlmHttpChal");

} else {

String auth = new String(Base64.decode(msg.substring(6)),"US-ASCII");

int index = auth.indexOf(':');

String user = index == -1 ? auth : auth.substring(0, index);

String password = index == -1 ? "" : auth.substring(index +1);

index = user.indexOf('\\');

if (index == -1) {

index = user.indexOf('/');

}

String domain = index == -1 ? defaultDomain : user.substring(0,index);

user = index == -1 ? user : user.substring(index + 1);

ntlm = new NtlmPasswordAuthentication(domain, user, password);

dc = UniAddress.getByName(domainController, true);

}

map.put("adremoteuser", ntlm.getName());

try {

SmbSession.logon(dc, ntlm);

LogStream _tmp = log;

if (LogStream.level > 2) {

log.println("NtlmHttpFilter: " + ntlm + " successfullyauthenticated against " + dc);

}

} catch (SmbAuthException sae) {

LogStream _tmp1 = log;

if (LogStream.level > 1) {

log.println("NtlmHttpFilter: " + ntlm.getName() + ":0x" + Hexdump.toHexString(sae.getNtStatus(), 8) + ": " + sae);

}

SmbAuthException _tmp2 = sae;

if (sae.getNtStatus() == 0xc0000005) {

HttpSession ssn = req.getSession(false);

if (ssn != null) {

ssn.removeAttribute("NtlmHttpAuth");

}

}

resp.setHeader("WWW-Authenticate", "NTLM");

if (offerBasic) {

resp.addHeader("WWW-Authenticate", "Basicrealm=\"" + realm + "\"");

}

resp.setStatus(401);

resp.setContentLength(0);

resp.flushBuffer();

return null;

}

req.getSession().setAttribute("NtlmHttpAuth", ntlm);

} else if (!skipAuthentication) {

HttpSession ssn = req.getSession(false);

if (ssn == null || (ntlm = (NtlmPasswordAuthentication)ssn.getAttribute("NtlmHttpAuth")) == null) {

resp.setHeader("WWW-Authenticate", "NTLM");

if (offerBasic) {

resp.addHeader("WWW-Authenticate", "Basicrealm=\"" + realm + "\"");

}

resp.setStatus(401);

resp.setContentLength(0);

resp.flushBuffer();

return null;

}

}

return ntlm;

}

}

Web.Xml中配置
<servlet>
<servlet-name>myadservlet</servlet-name>
<servlet-class>com. company.test.ADServlet</servlet-class>
<init-param>
<param-name>jcifs.http.domainController</param-name>
<param-value>172.16.2.101</param-value>
</init-param>
<init-param>
<param-name>jcifs.netbios.wins</param-name>
<param-value>172.16.2.101,172.16.2.105</param-value>
</init-param>
<init-param>
<param-name>jcifs.smb.client.domain</param-name>
<param-value>dns. company.net.cn</param-value>
</init-param>
<init-param>
<param-name>jcifs.smb.client.soTimeout</param-name>
<param-value>18000</param-value>
</init-param>
<init-param>
<param-name>jcifs.netbios.cachePolicy</param-name>
<param-value>1200</param-value>
</init-param>
<init-param>
<param-name>jcifs.util.loglevel</param-name>
<param-value>0</param-value>
</init-param>
<load-on-startup>3</load-on-startup>
</servlet>
<servlet-mapping>

若要解决此问题，从客户端，使用注册表编辑器 (Regedt32.exe) 将值添加到以下注册表项：
HKEY_CURRENT_USER/软件/microsoft/windows/CurrentVersion/internet设置 /
注意上面的注册表项是一个路径，它经过了折行以提高可读性。

添加以下注册表值：
值名称： DisableNTLMPreAuth
数据类型： REG_DWORD
值： 1
除了注册表项还需要关闭 Internet Explorer 中启用集成 Windows 身份验证。若要这样做，请按照下列步骤操作：
启动 Internet Explorer。
单击工具，请单击 Internet 选项，然后单击高级选项卡。
在安全，下单击以取消选择启用集成 Windows 身份验证 (需要重启动)，然后单击应用。
关闭 Internet Explorer。
若要解决此问题，从服务器端，配置网站以使用下列身份验证方法之一：
若要允许匿名访问仅网站进行配置。
配置为允许匿名访问和 NLTM 身份验证（集成 Windows 身份验证）的网站