Question

我正在使用NTLMv1并且它正常工作。如果我登录然后点击LDAP服务器3至4次，那么唯一的缺点是。

所以我不希望如此。任何人都可以解释一下这个过程在NTLMv2中的作用吗？

下面是NTLMv2的代码

          <filter>
            <filter-name>ntlmv2-auth</filter-name>
            <filter-class>org.ntlmv2.filter.NtlmFilter</filter-class>
            <init-param>
                    <!-- Windows domain name -->
                    <param-name>ntlm-domain</param-name>
                    <param-value>ACME.CORP</param-value>
            </init-param>
            <init-param>
                    <!-- IP-address of domain controller -->
                    <param-name>ntlm-dc</param-name>
                    <param-value>dcone.acme.com</param-value>
            </init-param>
            <init-param>
                    <!-- Simple (non-FQDN) hostname of DC host -->
                    <param-name>ntlm-dc-name</param-name>
                    <param-value>dcone</param-value>
            </init-param>
            <init-param>
                    <!-- Computer account for connection to DC -->
                    <param-name>ntlm-account</param-name>
                    <param-value>TECHUSER$@ACME.CORP</param-value>
            </init-param>
            <init-param>
                    <!-- Password of computer account -->
                    <param-name>ntlm-password</param-name>
                    <param-value>test1234</param-value>
            </init-param>
    </filter>

    <filter-mapping>
            <filter-name>NTLMv2</filter-name>
            <url-pattern>/*</url-pattern>
    </filter-mapping>

Answer 1

答案是您无法避免重复的LDAP连接，因为NTLM协议旨在完全执行此操作。您可以在Microsoft Page defining the NTLM Protocol

上找到更多信息

使用LDAP工作NTLMv2

1 个答案: