topic Re: Alfresco JLan SMB/CIFS Custom Authenticator error in Alfresco Archive

Alfresco JLan SMB/CIFS Custom Authenticator error

sfigueras — Tue, 04 Jun 2013 01:22:49 GMT

Hi everyone,I'm creating an custom authenticator to my Alfresco JLan authenticate into one specific Database.Here's my jlanConfig.xml:<?xml version="1.0" standalone="no"?><!– <!DOCTYPE jlanserver SYSTEM "jlanserver.dtd"> –><jlanserver> <servers> <SMB/> <

Re: Alfresco JLan SMB/CIFS Custom Authenticator error

mrogers — Tue, 04 Jun 2013 12:20:04 GMT

it would appear from the error message that the destination array is too small. Why are you hard coding a length of 21? Rather than using the correct length?

Re: Alfresco JLan SMB/CIFS Custom Authenticator error

sfigueras — Tue, 04 Jun 2013 12:51:28 GMT

Hi mrogers,

That code is from CifsAuthenticator, from Alfresco. That's the same code.It's not my modification. Here's the original from Alfresco: http://fossies.org/linux/misc/dsnet-src-1.1.0.zip:t/dsnet-src-1.1.0/filedevice-org/source/java/org/alfresco/jlan/server/auth/CifsAuthenticator.java

Re: Alfresco JLan SMB/CIFS Custom Authenticator error

mrogers — Tue, 04 Jun 2013 13:28:00 GMT

The 21 comes from the specs for NTLMV1. So although I don't like that code and clearly there is a need for more javadoc it may not be a serious bug.

Nevertheless it looks like there is something different going on with your getMD4Password() method that is returning too many bytes. Perhaps its a padding issue? The MD4 hash should probably be 16 bytes. Which then gets padded out to 21.

Re: Alfresco JLan SMB/CIFS Custom Authenticator error

sfigueras — Tue, 04 Jun 2013 14:02:00 GMT

Hi mrogers,

Thanks for the reply. That's my "admin" string md4 hash, generated by my Spring md4 encryptor:


String md4Password = md4PasswordEncoder.encodePassword("admin", null);
‍‍‍

It results in


f9d4049dd6a4dc35d40e5265954b2a46
‍‍‍

Is that the correct way to generate my MD4 hash to use with NTLM?

If you want, here you can see the md4PasswordEncoder source: http://www.jarvana.com/jarvana/view/org/springframework/security/spring-security-core/3.0.3.RELEASE/spring-security-core-3.0.3.RELEASE-sources.jar!/org/springframework/security/authentication/encoding/Md4PasswordEncoder.java?format=ok

Thanks!

Re: Alfresco JLan SMB/CIFS Custom Authenticator error

mrogers — Tue, 04 Jun 2013 16:23:28 GMT

That is a 32 byte hash. Its too big for NTLMV1

http://en.wikipedia.org/wiki/NTLM

Re: Alfresco JLan SMB/CIFS Custom Authenticator error

sfigueras — Tue, 04 Jun 2013 16:45:25 GMT

Hi mrogers,

Again, thanks for your reply. But I think that I've discovered a bug into Alfresco JLan 5.0.

To test that problem, I've implemented an UserInterface class as you can see below:


public UserAccount getUserAccount(String userName) {
      if (userName.equals("admin")) {
         cryptoutils cu = new cryptoutils();
         byte[] md4 = null;
         try {
            md4 = cu.generateEncryptedPassword("admin", null, PasswordEncryptor.MD4, null, null);
         } catch (Exception e) {
            e.printStackTrace();
         }
         UserAccount ua = new UserAccount();
         ua.setUserName("admin");
         ua.setMD4Password(md4);
         ua.setPassword("admin");
         return ua;
      }
      return null;
   }‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Ok, that was ok, now that error was resolved, but, other problem is occurring.

If i try to login with my Linux workstation, with this shell code:

smbclient -L localhost -U admin -W NUAGE‍

The authentication stops on CifsAuthenticator.validateNuagePassword, on that line:

if (encPwd != null && encryptedPwd != null && encPwd.length == STANDARD_PASSWORD_LEN && encryptedPwd.length == STANDARD_PASSWORD_LEN) {‍

Because the encryptedPwd variable length is bigger than STANDARD_PASSWORD_LEN (24).

But, if I try to login with one Windows Desktop, everything goes ok, and encryptedPwd stay with 24 positions.