NTLM

O Lumis Portal inclui uma implementação de autenticação integrada utilizando NTLM, que é um protocolo de autenticação e negociação de segurança utilizado em diversos sistemas da Microsoft® para prover autenticação integrada.

Para utilizar o NTLM é necessário configurar a classe lumis.portal.authentication.http.NtlmAuthenticator no elemento <httpAuthenticator> do lumisportalconfig.xml:

<security> <httpAuthenticator className="lumis.portal.authentication.http.NtlmAuthenticator" ></httpAuthenticator> <!-- Uncomment to configure Kerberos Authentication Protocol. See Lumis Portal documentation for details. <kerberos> <configurationFile>security/krb5.conf</configurationFile> </kerberos> --> </security>

Além disto, deve-se descomentar e configurar o filtro NtlmFilter no arquivo web.xml:

<!-- The below example is the NTLM filter required to use the NtlmAuthenticator. To enable the NTLM filter uncomment it and set the jcifs properties as this filter's parameters. See http://jcifs.samba.org/src/docs/ntlmhttpauth.html#props for detailed documentation for jcifs properties (basic authentication is not supported). <filter> <filter-name>NtlmFilter</filter-name> <filter-class>lumis.portal.authentication.http.NtlmFilter</filter-class> <init-param> <param-name>jcifs.http.domainController</param-name> <param-value>10.200.10.2</param-value> </init-param> <init-param> <param-name>jcifs.smb.client.domain</param-name> <param-value>DOMAIN_NAME</param-value> </init-param> <init-param> <param-name>jcifs.smb.client.username</param-name> <param-value>A_LOGIN_FOR_THE_SPECIFIED_DOMAIN</param-value> </init-param> <init-param> <param-name>jcifs.smb.client.password</param-name> <param-value>THE_PASSWORD_FOR_THE_LOGIN</param-value> </init-param> <init-param> <param-name>jcifs.util.loglevel</param-name> <param-value>1</param-value> </init-param> </filter> <filter-mapping> <filter-name>NtlmFilter</filter-name> <url-pattern>/*</url-pattern> <dispatcher>REQUEST</dispatcher> </filter-mapping> -->