Você está na página 1de 3

https://en.wikipedia.

org/wiki/Integrated_Windows_Authentication
http://stackoverflow.com/questions/15020734/using-ntlm-authentication-in-java-ap
plications
http://stackoverflow.com/questions/7800938/how-to-enable-auto-logon-user-authent
ication-for-google-chrome
http://serverfault.com/questions/51747/windows-7-single-sign-on
http://superuser.com/questions/664656/how-to-configure-firefox-for-ntlm-sso-sing
le-sign-on

http://superuser.com/questions/148063/why-does-internet-explorer-keep-asking-mefor-ntlm-credentials-in-an-intranet-zo?rq=1
---------------------------------------------------------------------------------------------------------http://learntolead-liferay.blogspot.com/2012/07/liferay-hook-4-custom-action-pre
login.html
https://www.liferay.com/downloads/liferay-portal/available-releases/-/wiki/Main/
NTLM+SSO/maximized
http://liferayiseasy.blogspot.in/2015/04/portal-properties-hook-in-liferay.html
http://www.chromium.org/developers/design-documents/http-authentication
------------------------------------------------------------------------------------------We had the opportunity to use a workaround by updating the local security policy
.
1. Click Start, in the Start Search box enter gpedit.msc
2. Navigate to Computer Configuration->Windows Settings->Security Settings->Loca
l Policies->Security Options.
3. In the right pane, find "Network Security: LAN Manager Authentication Level"
and double-click it.
4. Change the setting from "Send NTMLv2 response only" to "Send LM & NTLM - use
NTLMv2 session if negotiated"------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------NTLM authentication is only supported in IE due to security reasons.
In com.liferay.portal.servlet.filters.sso.ntlm.NtlmFilter, the isFilterEnabled()
method Liferay will check whether the browser is IE - thus if you'd like to ena
ble NTLM for other browsers anyway you would have to override this method with a
custom development.
----------------------------------------------------------------------------------------------------------------http://www.programcreek.com/java-api-examples/index.php?api=com.liferay.portal.k
ernel.servlet.BrowserSnifferUtil
http://phonemusic.tk/ntlm/ntlm-sso-wiki-liferay.html
http://oscat.rete.toscana.it/scm/viewvc.php/*checkout*/tag/03_08_2010_LSO_V_1.5.
1/portal/portal-impl/src/portal.properties?root=lso

---------------------------------------------------------------------------------------------------@Override public boolean isFilterEnabled(HttpServletRequest request,HttpServletR


esponse response){
try {
long companyId=PortalInstances.getCompanyId(request);
if (BrowserSnifferUtil.isIe(request) && AuthSettingsUtil.isNtlmEnabled(compa
nyId)) {
return true;
}
}
catch ( Exception e) {
_log.error(e,e);
}
return false;
}
----------------------------------------------------------------------------------boolean isFilterEnabled(javax.servlet.http.HttpServletRequest request, javax.ser
vlet.http.HttpServletResponse response)
isFilterEnabled
public boolean isFilterEnabled(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response)
Specified by:
isFilterEnabled in interface com.liferay.portal.kernel.servlet.LiferayFilter
Overrides:
isFilterEnabled in class com.liferay.portal.kernel.servlet.BaseFilter
----------------------------------------------------------------------------------Enabling NTLM Authentication Single Sign-On (SSO) in Internet Explorer
Internet Explorer supports NTLM authentication out of the box. It should just wo
rk for intranet hosts, but you can add other hosts to the security settings:
Internet Explorer: Tools ? Internet Options ? Security ? Local Intranet ? Sites
Adding trusted hosts can also be done through group policy.
You must also make sure either your Local security policy or Domain Group policy
reflects the following:
Go to Local Security policy > Security settings > local policies > security opti
ons
Select Network security > Lan manager Authentication level and change it to "Sen
d LM & NTLM responses".
--------------------------------------------------------------------------------------NTLM
NTLM is a property in the portal.properties file, which is the default configura
tion file for Sun GlassFish Web Space Server. You can override this property usi

ng portal-ext.properties file.
Set this to true to enable NTLM single sign on. NTLM will work only if LDAP auth
entication is also enabled and the authentication is made by screen name. If set
to true, then the property "auto.login.hooks" must contain a reference to the
class com.liferay.portal.security.auth.NtlmAutoLogin and the filter com.liferay.
portal.servlet.filters.sso.ntlm.NtlmFilter must be referenced in web.xml.
ntlm.auth.enabled=false
ntlm.auth.domain.controller=127.0.0.1
ntlm.auth.domain=EXAMPLE
-----------------------------------------------------------------------------------------------------https://github.com/cvut/gentoo-overlay/blob/master/www-apps/liferay-portal/files
/portal-ext.properties

Você também pode gostar