Details
-
Type:
Bug
-
Status:
Closed
-
Priority:
Critical
-
Resolution: Won't Fix
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: Authentication
-
Labels:None
-
Environment:Linux and Window
-
Similar Issues:
Description
We are facing an Issue related to NTLM Authentication of liferay
We are using NTLM System in our code in the process we are taking out user id and password from NTLM in our code but we are failing to get the password in it .Following is the description regarding it .
In web.xml we have made these entries
<filter>
<filter-name>TDNtlm Filter</filter-name>
<filter-class>com.td.portal.authentication.TDNTLMFilter</filter-class>
<init-param>
<param-name>jcifs.http.domainController</param-name>
<param-value>153.65.230.12</param-value>
</init-param>
<init-param>
<param-name>jcifs.smb.client.domain</param-name>
<param-value>TD.teradata.com</param-value>
</init-param>
</filter>
And this is the doFilter code which is being called and where we need to take out the password but we area failing
It is inside TDNTLMFilter in the function doFilter its failing while taking out the password from the ntlm.
i.e.
String password = ntlm.getPassword();//Here we are not getting the password
How can i get password of current login user using NTLM
Liferay 5.1.2 is using jcifs.jar version 1.2.13.
Having read the latest news of http://jcifs.samba.org,
It has a note that "The NTLM HTTP Filter does not and can never support NTLMv2 as it uses a main-in-the-middle technique that is broken by NTLMSSP's target information used in computing password hashes. However, the existing Filter should continue to work. "
I replace $LIFERAY_SOURCE/lib/portal/jcifs.jar with the latest jcifs-1.3.0.jar, and there is no error of compiliation.
I hope that the latest jcifs-1.3.0.jar solves your issue.