SSO(Single Sign On)

Active Directory install & config

1.Win2012-AD-Install.xlsx

2.C# AD(Active Directory)域信息同步，组织单位、用户等信息查询

3.加入域的时候，虚拟机不能用NAT，需要用桥接方式

Apache Directory Studio

1.eclipse-indigo install ok,after indigo not worked

2.Troubleshooting LDAP Connections to Active Directory Using Apache Directory Studio

3.Using Shiro with an LDAP Server

NTLM

https://code.google.com/p/ntlm-java/ last Update 2011
Microsoft NT LAN Manager (NTLM) Authentication Protocol implementation in java.

http://waffle.codeplex.com/ jna
WAFFLE: Windows Authentication Framework (now only windows OS is supported)

http://jcifs.samba.org/ not support NTLMv2
JCIFS is an Open Source client library that implements the CIFS/SMB networking protocol in 100% Java

http://www.ioplex.com/jespa.html not free
Jespa - Java Active Directory Integration

http://davenport.sourceforge.net/ntlm.html Last Update 2013
The NTLM Authentication Protocol and Security Support Provider

NTLM1

test JCIFS，only support NTLMv1

    REGEDIT4
    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa]
    "LMCompatibilityLevel"=dword:00000001

NTLM2

test Jespa，support NTLMv2

    first run SetupWizard.vbs(use domain administrator account) to create WEB-INF/jespa.properties

adshiro

1.test pure java ldap login

2.test shiro ldap login

Todo

• xxxxx
  • aaa
  • bbb
  • ccc
• xxxxx
  • dddd
  • eeee