import org.apache.commons.httpclient.Header;
import org.apache.commons.httpclient.HeaderElement;
import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.UsernamePasswordCredentials;
import org.apache.commons.httpclient.auth.AuthScope;
import org.apache.commons.httpclient.methods.GetMethod;

public class BrowserAuth {

	public static void main(String[] args) {
		try {

			// 
			String urlStr = “http://example.com:8080/abc/”;
			String host = “example.com”;
			String realm = “ExampleRealm”;
			String userName = “user”;
			String password = “password”;
			// 

			HttpClient client = new HttpClient();

			GetMethod getMethod = new GetMethod(urlStr);

			int status = client.executeMethod(getMethod);
			System.out.println(”status: ” + status);
			String responseBody = getMethod.getResponseBodyAsString();
			System.out.println(”responseBody: ” + responseBody);

			Header wwAuthHeader = getMethod.getResponseHeader(”WWW-Authenticate”);
			for (HeaderElement element : wwAuthHeader.getElements()) {
				System.out.println(element.getName() + “: ” + element.getValue());
			}

			UsernamePasswordCredentials upc = new UsernamePasswordCredentials(userName, password);
			AuthScope as = new AuthScope(host, 8080, realm);
			client.getState().setCredentials(as, upc);
			status = client.executeMethod(getMethod);
			System.out.println(”status: ” + status);
			responseBody = getMethod.getResponseBodyAsString();
			System.out.println(”responseBody: ” + responseBody);

			getMethod.releaseConnection();

		} catch (Exception e) {
			e.printStackTrace();
		}

	}

}

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.net.Authenticator;
import java.net.HttpURLConnection;
import java.net.PasswordAuthentication;
import java.net.URL;

public class NtlmTest01 {

	public static void main(String[] args) throws Exception {

		String urlStr = “http://example.com/root/action.dll?p1=value1″;
		String domain = “”; // May also be referred as realm
		String userName = “CHANGE_ME”;
		String password = “CHANGE_ME”;		

		String responseText = getAuthenticatedResponse(urlStr, domain, userName, password);

	    System.out.println(”response: ” + responseText);
	}

	private static String getAuthenticatedResponse(final String urlStr, final String domain, final String userName, final String password) throws IOException {

	    StringBuilder response = new StringBuilder();

		Authenticator.setDefault(new Authenticator() {
	        @Override
	        public PasswordAuthentication getPasswordAuthentication() {
	            return new PasswordAuthentication(domain + “\\” + userName, password.toCharArray());
	        }
	    });

	    URL urlRequest = new URL(urlStr);
	    HttpURLConnection conn = (HttpURLConnection) urlRequest.openConnection();
	    conn.setDoOutput(true);
	    conn.setDoInput(true);
	    conn.setRequestMethod(”GET”);

	    InputStream stream = conn.getInputStream();
	    BufferedReader in = new BufferedReader(new InputStreamReader(stream));
	    String str = “”;
	    while ((str = in.readLine()) != null) {
	        response.append(str);
	    }
	    in.close();		

	    return response.toString();
	}

}

GET …

401 Unauthorized
WWW-Authenticate: NTLM
————————————————-
GET …
Authorization: NTLM TlRMTVNTUAABAAAAA7IAAAoACgApAAAACQAJACAAAABMSUdIVENJVFlVUlNBLU1JTk9S

401 Unauthorized
WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAACgAAAABggAAU3J2Tm9uY2UAAAAAAAAAAA==
————————————————-
GET …
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAHIAAAAYABgAigAAABQAFABAAAAADAAMAFQAAAASABIAYAAAAAAAAACiAAAAAYIAAFUAUgBTAEEALQBNAEkATgBPAFIAWgBhAHAAaABvAGQATABJAEcASABUAEMASQBUAFkArYfKbe/jRoW5xDxHeoxC1gBmfWiS5+iX4OAN4xBKG/IFPwfH3agtPEia6YnhsADT

200 Ok
————————————————-

Ref: http://www.innovation.ch/personal/ronald/ntlm.html

http://sourceforge.net/project/showfiles.php?group_id=61713

2. Install

Just run the downloaded JAR file using java (JRE). Read below for more details:

http://www.hermesjms.com/confluence/display/HJMS/Installing

3. Screen-Play Tutorial

http://www.hermesjms.com/confluence/display/HJMS/JBoss+Tutorial

4. Sample Settings (you will know what these are once you watch the above tutorial)

Provider

JBoss 4.2.0 (7 jars added)

Context

loader <<whatever_provider_you_defined>>

initialContextFactory: org.jnp.interfaces.NamingContextFactory

providerUrl: jnp://<<host>>:1099

urlPackagePrefixes org.jnp.interfaces:org.jboss.naming

Projects by Logical Grouping
============================
common
——-
com.company.product.commons
com.company.product.domain
com.company.product.3rdparty
com.company.product.3rdpartytools
com.company.product.tools
com.company.product.ui

service
———-
com.company.product.service.domain01.api
com.company.product.service.domain01.impl
com.company.product.service.domain02.api
com.company.product.service.domain02.impl

runtime
———
com.company.product.runtime.database
com.company.product.runtime.jboss
com.company.product.runtime.tomcat

server
——
com.company.product.config
com.company.product.install
com.company.product.schema
com.company.product.server
com.company.product.testdata
com.company.product.workmanager
com.company.product.workflow
com.company.product.esb

build
——
com.company.product
com.company.product.builder

integration
———–
com.company.product.integration.component1
com.company.product.integration.component2

webclient
———
com.company.product.web.subproduct.ui
com.company.product.web.subproduct.model
com.company.product.web.subproduct.controller
com.company.product.web.subproduct.dataaccess

richclient
———-
com.company.product.client.subproduct.ui
com.company.product.client.subproduct.model
com.company.product.client.subproduct.controller
com.company.product.client.subproduct.dataaccess

public static String getStackTraceString(Exception e) {
	StringWriter writer = new StringWriter();
	PrintWriter pw = new PrintWriter(writer);
	e.printStackTrace(pw);
	StringBuffer sb = writer.getBuffer();
	return sb.toString();
}

I like money to buy things at the store.
Money, money, money,
I always want more!

Lincoln’s on one cent.
Jefferson’s on five.
Roosevelt’s on ten cents.
Washington’s on twenty-five.

I like money to buy things at the store.
Money, money, money,
I always want more!

A building’s on one cent.
A building’s on five.
A torch is on ten cents.
An eagle’s on twenty-five.
I like money to buy things at the store.
Money, money, money,
I always want more!

(2) Make sure the the keystore is generated successfully by using the following command.
keytool -list -v -keystore C:\dev\keystore\myserver.keystore

(3) Copy the myserver.keystore file to <<JBOSS_PATH>>\server\default\conf folder.

(4) Add/Uncomment the below Connector tag to <<JBOSS_PATH>>\server\default\deploy\jboss-web.deployer\server.xml file. The keystorePass in this tag reflects the same password used in step (1).

<Connector port=”443″ address=”${jboss.bind.address}” protocol=”HTTP/1.1″ SSLEnabled=”true”
maxThreads=”150″ scheme=”https” secure=”true” clientAuth=”false” sslProtocol=”TLS”
keystoreFile=”${jboss.server.home.dir}/conf/myserver.keystore” keystorePass=”mypassword” />

(5) Start/Restart JBOSS and try the below URL. You should be able to see the usual JBOSS Admin console page.
https://localhost

SSL for Rich Client Applications connecting to SSL-enabled JBOSS

(a) Geneate the jssecacerts file by running the below two (2) commands.
keytool -export -alias myserver -keystore C:\dev\keystore\myserver.keystore -file C:\dev\keystore\myserver.cer
keytool -import -alias myserver -file C:\dev\keystore\myserver.cer -keystore C:\dev\keystore\jssecacerts

(b) Copy the jssecacerts to client JRE’s lib\security folder.

(c) Make sure the client application executes the below code before it makes a remote call to JBOSS.

/*
* Handler to verify host names during the negotiation phase of SSL connections.
*/
private void verifyHostNameDuringSslNegotiation() {
  try {
    HttpsURLConnection.setDefaultHostnameVerifier(
      new HostnameVerifier() {
        public boolean verify(String hostbname, SSLSession sess)
        {
		       return true;
	      }
	    }
	  );
  } catch (Exception e) {
	   // IGNORE
  }
}

REPEAT

We stop and eat our food when we’re in the mood.
Stop and eat our food on the ground.
We stop and eat our food when we’re in the mood.
Stop and eat our food and then we march around And then we ROAR!!!
Because we are the dinosaurs.

Musical Composition
  voice, instrumentation (or both)
  vocal composition (with or without lyrics)

Photography
  color or BW
  group of images
  Montage, mulitle exposure, negative sandwitches, photograms
  conventional or digital

Visual Arts
  print, drawing, painting, collage,
  photographic collage, metal etching, punch work,
  fiber work, computer generated.

Film Prtoduction
  animation, narrative, documentary, experimental, media presentation