|
1
16
17
22
23 package net.matuschek.http;
24
25 import java.io.*;
26 import java.security.Provider  ;
27 import java.security.Security ;
28
29 import com.luigidragone.net.ntlm.NTLM;
30 import net.matuschek.util.Base64;
31
32
72
73 public class NTLMAuthorization implements Serializable, Cloneable {
74
75 static final long serialVersionUID = -1347968095010834437L;
78
79 public class MissingJceException extends Exception {
80 private static final long serialVersionUID = -6580761514651447918L;
81 MissingJceException(String msg) { super(msg); }
82 };
83
84 public static final String NTLM_TAG = "NTLM";
85 public static final String PROXY_AUTHENTICATE_HEADER = "Proxy-Authenticate";
86 public static final String WWW_AUTHENTICATE_HEADER = "WWW-Authenticate";
87
88 transient byte[] nonce = null;
89 private String host = null;
90 private String user = null;
91 private String hostDomain = null;
92 private String userDomain = null;
93 private String securityProvider = null;
94 private byte[] lmPassword = null;
95 private byte[] ntPassword = null;
96
97 private static boolean securityProviderAdded = false;
98
99
102 public NTLMAuthorization() {
103 }
104
105
122 public NTLMAuthorization(String host, String hostDomain, String user, String userDomain, byte[] lmPassword, byte[] ntPassword) {
123 setHost(host);
124 setHostDomain(hostDomain);
125 setUser(user);
126 setUserDomain(userDomain);
127 setLmPasswordHash(lmPassword);
128 setNtPasswordHash(ntPassword);
129 }
130
131
149 public NTLMAuthorization(String host, String hostDomain, String user, String userDomain, String password) throws MissingJceException {
150 setHost(host);
151 setHostDomain(hostDomain);
152 setUser(user);
153 setUserDomain(userDomain);
154 setPassword(password);
155 }
156
157 public String getResponse() throws MissingJceException {
158 try {
159 return new String (Base64.encode(NTLM.formatResponse(host, user, userDomain, lmPassword, ntPassword, nonce)));
160 } catch (Exception e) {
161 throw new MissingJceException(e.getMessage());
162 }
163 }
164
165 public String getRequest() throws IOException {
166 return new String (Base64.encode(NTLM.formatRequest(host, hostDomain)));
167 }
168
169 public void extractNonce(String challenge) throws java.io.IOException {
170 nonce = null;
171 try {
172 if((challenge != null) && challenge.startsWith(NTLM_TAG) && challenge.length() > 4)
174 nonce = NTLM.getNonce(Base64.decode(challenge.substring(challenge.indexOf(' ') + 1).trim()));
175
180 } catch(Exception ex) {
181 ex.printStackTrace();
182 }
183 }
184
185 public void setHost(String host) {
186 if(host == null)
187 throw new IllegalArgumentException ("host : null value not allowed");
188 this.host = host;
189 }
190
191 public String getHost() {
192 return host;
193 }
194
195 public void setHostDomain(String hostDomain) {
196 if(hostDomain == null)
197 throw new IllegalArgumentException ("hostDomain : null value not allowed");
198 this.hostDomain = hostDomain;
199 }
200
201 public String getHostDomain() {
202 return hostDomain;
203 }
204
205 public void setUser(String user) {
206 if(user == null)
207 throw new IllegalArgumentException ("user : null value not allowed");
208 this.user = user;
209 }
210
211 public String getUser() {
212 return user;
213 }
214
215 public void setUserDomain(String userDomain) {
216 if(userDomain == null)
217 throw new IllegalArgumentException ("userDomain : null value not allowed");
218 this.userDomain = userDomain;
219 }
220
221 public void setPassword(String password) throws MissingJceException {
222 setLmPassword(password);
223 setNtPassword(password);
224 }
225
226 public String getUserDomain() {
227 return userDomain;
228 }
229
230 public String getDomain() {
231 return userDomain;
232 }
233 public void setDomain(String domain) {
234 setUserDomain(domain);
235 setHostDomain(domain);
236 }
237
238 public void setLmPassword(String password) throws MissingJceException {
239 addStandardSecurityProvider();
240 if(password == null)
241 throw new IllegalArgumentException ("lmPassword : null value not allowed");
242 try {
243 this.lmPassword = NTLM.computeLMPassword(password);
244 } catch (Exception e) {
245 throw new MissingJceException(e.getMessage());
246 }
247 }
248
249 public String getLmPassword() { return lmPassword.toString(); };
250 public String getNtPassword() { return ntPassword.toString(); };
251 public String getPassword() { return ntPassword.toString(); };
252 public byte[] getLmPasswordHash() { return lmPassword; };
253 public byte[] getNtPasswordHash() { return ntPassword; };
254
255 public void setLmPasswordHash(byte[] password) {
256 if(password == null)
257 throw new IllegalArgumentException ("lmPassword : null value not allowed");
258 if(password.length != 16)
259 throw new IllegalArgumentException ("lmPassword : illegal size");
260 this.lmPassword = password;
261 }
262
263 public void setNtPassword(String password) throws MissingJceException {
264 addStandardSecurityProvider();
265 if(password == null)
266 throw new IllegalArgumentException ("ntPassword : null value not allowed");
267 try {
268 this.ntPassword = NTLM.computeNTPassword(password);
269 } catch (Exception e) {
270 throw new MissingJceException(e.getMessage());
271 }
272 }
273
274 public void setNtPasswordHash(byte[] password) {
275 if(password == null)
276 throw new IllegalArgumentException ("ntPassword : null value not allowed");
277 if(password.length != 16)
278 throw new IllegalArgumentException ("ntPassword : illegal size");
279 this.ntPassword = password;
280 }
281
282
283 public String toString() {
284 return "Host=" + host
285 + ", HostDomain=" + hostDomain
286 + ", User=" + user
287 + ", UserDomain=" + userDomain
288 + ", lmPwd=" + lmPassword
289 + ", ntPwd=" + ntPassword
290 + ", Nonce=" + nonce;
291 }
292
293
294
297 public final void addStandardSecurityProvider() {
298 if (!securityProviderAdded) {
299 try {
300 setSecurityProvider("cryptix.jce.provider.CryptixCrypto");
301 } catch (Exception ex) {
302 }
304 securityProviderAdded = true;
305 }
306 }
307
308
309 public void setSecurityProvider(String securityProviderClassName) throws ClassNotFoundException , InstantiationException , IllegalAccessException {
310 this.securityProvider = securityProviderClassName;
311 if(securityProviderClassName != null) {
312 Class securityProvider = Class.forName(securityProviderClassName);
313 Security.addProvider((Provider )securityProvider.newInstance());
314 securityProviderAdded = true;
315 }
316 }
317
318 public String getSecurityProvider() {
319 return securityProvider;
320 }
321
322 public boolean isComplete() {
323 return lmPassword != null && ntPassword != null && hostDomain!= null && userDomain != null && user != null;
324 }
325
326 public void writeToFile(String filename) throws FileNotFoundException, IOException {
327 ObjectOutputStream os = new ObjectOutputStream(
328 new FileOutputStream(filename));
329 os.writeObject(this);
330 os.close();
331 }
332
333 public static NTLMAuthorization readFromFile(String filename) throws OptionalDataException, ClassNotFoundException , IOException {
334 ObjectInputStream is = new ObjectInputStream(new FileInputStream(filename));
335 NTLMAuthorization auth = (NTLMAuthorization)is.readObject();
336 return auth;
337 }
338
339 public void setFilename(String filename) throws OptionalDataException, IOException, ClassNotFoundException , InstantiationException , IllegalAccessException {
340 NTLMAuthorization auth = readFromFile(filename);
341 host = auth.host;
342 hostDomain = auth.hostDomain;
343 lmPassword = auth.lmPassword;
344 ntPassword = auth.ntPassword;
345 setSecurityProvider(auth.securityProvider);
346 user = auth.user;
347 userDomain = auth.userDomain;
348 }
349 public String getFilename() { return null; }
350
351 public static void main(String [] args) {
352 NTLMAuthorization auth = new NTLMAuthorization();
353 try {
354 String filename = "";
355 for (int i = 0; i < args.length; i++) {
356 String s = args[i];
357 int sep = s.indexOf("=");
358 String left = sep >= 0 ? s.substring(0, sep).toLowerCase() : null;
359 String right = sep >= 0 ? s.substring(sep + 1) : s;
360
361 if (left == null) { filename = s;}
362 else if (left.equals("-domain")) { auth.setDomain(right); }
363 else if (left.equals("-host")) { auth.setHost(right); }
364 else if (left.equals("-hostdomain")) { auth.setHostDomain(right); }
365 else if (left.equals("-lmpassword")) { auth.setLmPassword(right); }
366 else if (left.equals("-ntpassword")) { auth.setNtPassword(right); }
367 else if (left.equals("-password")) { auth.setPassword(right); }
368 else if (left.equals("-securityprovider")) { auth.setSecurityProvider(right); }
369 else if (left.equals("-user")) { auth.setUser(right); }
370 else if (left.equals("-userDomain")) { auth.setUserDomain(right); }
371 else {
372 System.err.println("Unrecognized parameter: " + left);
373 }
374 }
375 if (!auth.isComplete() || filename == null) {
376 System.err.println("Syntax: <filename> <-parameter=value>*");
377 System.err.println("Required parameters: domain | (hostDomain, userDomain),");
378 System.err.println(" user,");
379 System.err.println(" password | (lmPassword, ntPassword)");
380 System.err.println("Optional parameters: securityprovider\n");
381 System.err.println("Example : ntAuth.dat -user=NTLM -domain=TEAMSPORT -password=NTLMNTLM");
382 System.exit(0);
383 }
384
385 auth.writeToFile(filename);
386 System.out.println(filename + " successfully written.");
387
388 auth = readFromFile(filename);
389 System.out.println(filename + " successfully read:");
390 System.out.println(auth);
391
392 } catch (Exception e) {
393 e.printStackTrace();
394 }
395 }
396
397 public Object clone() {
398 try {
399 return super.clone();
400 } catch (CloneNotSupportedException e) {
401 return null; }
403 }
404
405 }
406 |
Popular Tags |
Java API By Example, From Geeks To Geeks.