| <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> |
| <html lang="en"> |
| <head> |
| <title>Source code</title> |
| <link rel="stylesheet" type="text/css" href="../../../../../../../../stylesheet.css" title="Style"> |
| </head> |
| <body> |
| <div class="sourceContainer"> |
| <pre><span class="sourceLineNo">001</span>/*<a name="line.1"></a> |
| <span class="sourceLineNo">002</span> * Licensed to the Apache Software Foundation (ASF) under one<a name="line.2"></a> |
| <span class="sourceLineNo">003</span> * or more contributor license agreements. See the NOTICE file<a name="line.3"></a> |
| <span class="sourceLineNo">004</span> * distributed with this work for additional information<a name="line.4"></a> |
| <span class="sourceLineNo">005</span> * regarding copyright ownership. The ASF licenses this file<a name="line.5"></a> |
| <span class="sourceLineNo">006</span> * to you under the Apache License, Version 2.0 (the<a name="line.6"></a> |
| <span class="sourceLineNo">007</span> * "License"); you may not use this file except in compliance<a name="line.7"></a> |
| <span class="sourceLineNo">008</span> * with the License. You may obtain a copy of the License at<a name="line.8"></a> |
| <span class="sourceLineNo">009</span> *<a name="line.9"></a> |
| <span class="sourceLineNo">010</span> * http://www.apache.org/licenses/LICENSE-2.0<a name="line.10"></a> |
| <span class="sourceLineNo">011</span> *<a name="line.11"></a> |
| <span class="sourceLineNo">012</span> * Unless required by applicable law or agreed to in writing,<a name="line.12"></a> |
| <span class="sourceLineNo">013</span> * software distributed under the License is distributed on an<a name="line.13"></a> |
| <span class="sourceLineNo">014</span> * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY<a name="line.14"></a> |
| <span class="sourceLineNo">015</span> * KIND, either express or implied. See the License for the<a name="line.15"></a> |
| <span class="sourceLineNo">016</span> * specific language governing permissions and limitations<a name="line.16"></a> |
| <span class="sourceLineNo">017</span> * under the License.<a name="line.17"></a> |
| <span class="sourceLineNo">018</span> *<a name="line.18"></a> |
| <span class="sourceLineNo">019</span> */<a name="line.19"></a> |
| <span class="sourceLineNo">020</span>package org.apache.mina.proxy.handlers.http.ntlm;<a name="line.20"></a> |
| <span class="sourceLineNo">021</span><a name="line.21"></a> |
| <span class="sourceLineNo">022</span>/**<a name="line.22"></a> |
| <span class="sourceLineNo">023</span> * NTLMConstants.java - All NTLM constants.<a name="line.23"></a> |
| <span class="sourceLineNo">024</span> * <a name="line.24"></a> |
| <span class="sourceLineNo">025</span> * @author <a href="http://mina.apache.org">Apache MINA Project</a><a name="line.25"></a> |
| <span class="sourceLineNo">026</span> * @since MINA 2.0.0-M3<a name="line.26"></a> |
| <span class="sourceLineNo">027</span> */<a name="line.27"></a> |
| <span class="sourceLineNo">028</span>public interface NTLMConstants {<a name="line.28"></a> |
| <span class="sourceLineNo">029</span> // Signature "NTLMSSP"+{0}<a name="line.29"></a> |
| <span class="sourceLineNo">030</span> byte[] NTLM_SIGNATURE = new byte[] { 0x4E, 0x54, 0x4C, 0x4D, 0x53, 0x53, 0x50, 0 };<a name="line.30"></a> |
| <span class="sourceLineNo">031</span><a name="line.31"></a> |
| <span class="sourceLineNo">032</span> // Version 5.1.2600 a Windows XP version (ex: Build 2600.xpsp_sp2_gdr.050301-1519 : Service Pack 2)<a name="line.32"></a> |
| <span class="sourceLineNo">033</span> byte[] DEFAULT_OS_VERSION = new byte[] { 0x05, 0x01, 0x28, 0x0A, 0, 0, 0, 0x0F };<a name="line.33"></a> |
| <span class="sourceLineNo">034</span><a name="line.34"></a> |
| <span class="sourceLineNo">035</span> /**<a name="line.35"></a> |
| <span class="sourceLineNo">036</span> * Message types<a name="line.36"></a> |
| <span class="sourceLineNo">037</span> */<a name="line.37"></a> |
| <span class="sourceLineNo">038</span> int MESSAGE_TYPE_1 = 1;<a name="line.38"></a> |
| <span class="sourceLineNo">039</span><a name="line.39"></a> |
| <span class="sourceLineNo">040</span> int MESSAGE_TYPE_2 = 2;<a name="line.40"></a> |
| <span class="sourceLineNo">041</span><a name="line.41"></a> |
| <span class="sourceLineNo">042</span> int MESSAGE_TYPE_3 = 3;<a name="line.42"></a> |
| <span class="sourceLineNo">043</span><a name="line.43"></a> |
| <span class="sourceLineNo">044</span> /**<a name="line.44"></a> |
| <span class="sourceLineNo">045</span> * Message flags<a name="line.45"></a> |
| <span class="sourceLineNo">046</span> */<a name="line.46"></a> |
| <span class="sourceLineNo">047</span><a name="line.47"></a> |
| <span class="sourceLineNo">048</span> // Indicates that Unicode strings are supported for use in security buffer data<a name="line.48"></a> |
| <span class="sourceLineNo">049</span> int FLAG_NEGOTIATE_UNICODE = 0x00000001;<a name="line.49"></a> |
| <span class="sourceLineNo">050</span><a name="line.50"></a> |
| <span class="sourceLineNo">051</span> // Indicates that OEM strings are supported for use in security buffer data<a name="line.51"></a> |
| <span class="sourceLineNo">052</span> int FLAG_NEGOTIATE_OEM = 0x00000002;<a name="line.52"></a> |
| <span class="sourceLineNo">053</span><a name="line.53"></a> |
| <span class="sourceLineNo">054</span> // Requests that the server's authentication realm be included in the Type 2 message<a name="line.54"></a> |
| <span class="sourceLineNo">055</span> int FLAG_REQUEST_SERVER_AUTH_REALM = 0x00000004;<a name="line.55"></a> |
| <span class="sourceLineNo">056</span><a name="line.56"></a> |
| <span class="sourceLineNo">057</span> // Specifies that authenticated communication between the client <a name="line.57"></a> |
| <span class="sourceLineNo">058</span> // and server should carry a digital signature (message integrity)<a name="line.58"></a> |
| <span class="sourceLineNo">059</span> int FLAG_NEGOTIATE_SIGN = 0x00000010;<a name="line.59"></a> |
| <span class="sourceLineNo">060</span><a name="line.60"></a> |
| <span class="sourceLineNo">061</span> // Specifies that authenticated communication between the client <a name="line.61"></a> |
| <span class="sourceLineNo">062</span> // and server should be encrypted (message confidentiality)<a name="line.62"></a> |
| <span class="sourceLineNo">063</span> int FLAG_NEGOTIATE_SEAL = 0x00000020;<a name="line.63"></a> |
| <span class="sourceLineNo">064</span><a name="line.64"></a> |
| <span class="sourceLineNo">065</span> // Indicates that datagram authentication is being used<a name="line.65"></a> |
| <span class="sourceLineNo">066</span> int FLAG_NEGOTIATE_DATAGRAM_STYLE = 0x00000040;<a name="line.66"></a> |
| <span class="sourceLineNo">067</span><a name="line.67"></a> |
| <span class="sourceLineNo">068</span> // Indicates that the Lan Manager Session Key should be used for signing and <a name="line.68"></a> |
| <span class="sourceLineNo">069</span> // sealing authenticated communications<a name="line.69"></a> |
| <span class="sourceLineNo">070</span> int FLAG_NEGOTIATE_LAN_MANAGER_KEY = 0x00000080;<a name="line.70"></a> |
| <span class="sourceLineNo">071</span><a name="line.71"></a> |
| <span class="sourceLineNo">072</span> // Indicates that NTLM authentication is being used<a name="line.72"></a> |
| <span class="sourceLineNo">073</span> int FLAG_NEGOTIATE_NTLM = 0x00000200;<a name="line.73"></a> |
| <span class="sourceLineNo">074</span><a name="line.74"></a> |
| <span class="sourceLineNo">075</span> // Sent by the client in the Type 3 message to indicate that an anonymous context <a name="line.75"></a> |
| <span class="sourceLineNo">076</span> // has been established. This also affects the response fields<a name="line.76"></a> |
| <span class="sourceLineNo">077</span> int FLAG_NEGOTIATE_ANONYMOUS = 0x00000800;<a name="line.77"></a> |
| <span class="sourceLineNo">078</span><a name="line.78"></a> |
| <span class="sourceLineNo">079</span> // Sent by the client in the Type 1 message to indicate that the name of the domain in which <a name="line.79"></a> |
| <span class="sourceLineNo">080</span> // the client workstation has membership is included in the message. This is used by the <a name="line.80"></a> |
| <span class="sourceLineNo">081</span> // server to determine whether the client is eligible for local authentication<a name="line.81"></a> |
| <span class="sourceLineNo">082</span> int FLAG_NEGOTIATE_DOMAIN_SUPPLIED = 0x00001000;<a name="line.82"></a> |
| <span class="sourceLineNo">083</span><a name="line.83"></a> |
| <span class="sourceLineNo">084</span> // Sent by the client in the Type 1 message to indicate that the client workstation's name <a name="line.84"></a> |
| <span class="sourceLineNo">085</span> // is included in the message. This is used by the server to determine whether the client <a name="line.85"></a> |
| <span class="sourceLineNo">086</span> // is eligible for local authentication<a name="line.86"></a> |
| <span class="sourceLineNo">087</span> int FLAG_NEGOTIATE_WORKSTATION_SUPPLIED = 0x00002000;<a name="line.87"></a> |
| <span class="sourceLineNo">088</span><a name="line.88"></a> |
| <span class="sourceLineNo">089</span> // Sent by the server to indicate that the server and client are on the same machine.<a name="line.89"></a> |
| <span class="sourceLineNo">090</span> // Implies that the client may use the established local credentials for authentication <a name="line.90"></a> |
| <span class="sourceLineNo">091</span> // instead of calculating a response to the challenge<a name="line.91"></a> |
| <span class="sourceLineNo">092</span> int FLAG_NEGOTIATE_LOCAL_CALL = 0x00004000;<a name="line.92"></a> |
| <span class="sourceLineNo">093</span><a name="line.93"></a> |
| <span class="sourceLineNo">094</span> // Indicates that authenticated communication between the client and server should <a name="line.94"></a> |
| <span class="sourceLineNo">095</span> // be signed with a "dummy" signature<a name="line.95"></a> |
| <span class="sourceLineNo">096</span> int FLAG_NEGOTIATE_ALWAYS_SIGN = 0x00008000;<a name="line.96"></a> |
| <span class="sourceLineNo">097</span><a name="line.97"></a> |
| <span class="sourceLineNo">098</span> // Sent by the server in the Type 2 message to indicate that the target authentication <a name="line.98"></a> |
| <span class="sourceLineNo">099</span> // realm is a domain<a name="line.99"></a> |
| <span class="sourceLineNo">100</span> int FLAG_TARGET_TYPE_DOMAIN = 0x00010000;<a name="line.100"></a> |
| <span class="sourceLineNo">101</span><a name="line.101"></a> |
| <span class="sourceLineNo">102</span> // Sent by the server in the Type 2 message to indicate that the target authentication <a name="line.102"></a> |
| <span class="sourceLineNo">103</span> // realm is a server<a name="line.103"></a> |
| <span class="sourceLineNo">104</span> int FLAG_TARGET_TYPE_SERVER = 0x00020000;<a name="line.104"></a> |
| <span class="sourceLineNo">105</span><a name="line.105"></a> |
| <span class="sourceLineNo">106</span> // Sent by the server in the Type 2 message to indicate that the target authentication <a name="line.106"></a> |
| <span class="sourceLineNo">107</span> // realm is a share. Presumably, this is for share-level authentication. Usage is unclear<a name="line.107"></a> |
| <span class="sourceLineNo">108</span> int FLAG_TARGET_TYPE_SHARE = 0x00040000;<a name="line.108"></a> |
| <span class="sourceLineNo">109</span><a name="line.109"></a> |
| <span class="sourceLineNo">110</span> // Indicates that the NTLM2 signing and sealing scheme should be used for protecting <a name="line.110"></a> |
| <span class="sourceLineNo">111</span> // authenticated communications. Note that this refers to a particular session security <a name="line.111"></a> |
| <span class="sourceLineNo">112</span> // scheme, and is not related to the use of NTLMv2 authentication. This flag can, however, <a name="line.112"></a> |
| <span class="sourceLineNo">113</span> // have an effect on the response calculations<a name="line.113"></a> |
| <span class="sourceLineNo">114</span> int FLAG_NEGOTIATE_NTLM2 = 0x00080000;<a name="line.114"></a> |
| <span class="sourceLineNo">115</span><a name="line.115"></a> |
| <span class="sourceLineNo">116</span> // Sent by the server in the Type 2 message to indicate that it is including a Target <a name="line.116"></a> |
| <span class="sourceLineNo">117</span> // Information block in the message. The Target Information block is used in the <a name="line.117"></a> |
| <span class="sourceLineNo">118</span> // calculation of the NTLMv2 response<a name="line.118"></a> |
| <span class="sourceLineNo">119</span> int FLAG_NEGOTIATE_TARGET_INFO = 0x00800000;<a name="line.119"></a> |
| <span class="sourceLineNo">120</span><a name="line.120"></a> |
| <span class="sourceLineNo">121</span> // Indicates that 128-bit encryption is supported<a name="line.121"></a> |
| <span class="sourceLineNo">122</span> int FLAG_NEGOTIATE_128_BIT_ENCRYPTION = 0x20000000;<a name="line.122"></a> |
| <span class="sourceLineNo">123</span><a name="line.123"></a> |
| <span class="sourceLineNo">124</span> // Indicates that the client will provide an encrypted master key in the "Session Key" <a name="line.124"></a> |
| <span class="sourceLineNo">125</span> // field of the Type 3 message<a name="line.125"></a> |
| <span class="sourceLineNo">126</span> int FLAG_NEGOTIATE_KEY_EXCHANGE = 0x40000000;<a name="line.126"></a> |
| <span class="sourceLineNo">127</span><a name="line.127"></a> |
| <span class="sourceLineNo">128</span> // Indicates that 56-bit encryption is supported<a name="line.128"></a> |
| <span class="sourceLineNo">129</span> int FLAG_NEGOTIATE_56_BIT_ENCRYPTION = 0x80000000;<a name="line.129"></a> |
| <span class="sourceLineNo">130</span><a name="line.130"></a> |
| <span class="sourceLineNo">131</span> // WARN : These flags usage has not been identified<a name="line.131"></a> |
| <span class="sourceLineNo">132</span> int FLAG_UNIDENTIFIED_1 = 0x00000008;<a name="line.132"></a> |
| <span class="sourceLineNo">133</span><a name="line.133"></a> |
| <span class="sourceLineNo">134</span> int FLAG_UNIDENTIFIED_2 = 0x00000100; // Negotiate Netware ??!<a name="line.134"></a> |
| <span class="sourceLineNo">135</span><a name="line.135"></a> |
| <span class="sourceLineNo">136</span> int FLAG_UNIDENTIFIED_3 = 0x00000400;<a name="line.136"></a> |
| <span class="sourceLineNo">137</span><a name="line.137"></a> |
| <span class="sourceLineNo">138</span> int FLAG_UNIDENTIFIED_4 = 0x00100000; // Request Init Response ??!<a name="line.138"></a> |
| <span class="sourceLineNo">139</span><a name="line.139"></a> |
| <span class="sourceLineNo">140</span> int FLAG_UNIDENTIFIED_5 = 0x00200000; // Request Accept Response ??!<a name="line.140"></a> |
| <span class="sourceLineNo">141</span><a name="line.141"></a> |
| <span class="sourceLineNo">142</span> int FLAG_UNIDENTIFIED_6 = 0x00400000; // Request Non-NT Session Key ??!<a name="line.142"></a> |
| <span class="sourceLineNo">143</span><a name="line.143"></a> |
| <span class="sourceLineNo">144</span> int FLAG_UNIDENTIFIED_7 = 0x01000000;<a name="line.144"></a> |
| <span class="sourceLineNo">145</span><a name="line.145"></a> |
| <span class="sourceLineNo">146</span> int FLAG_UNIDENTIFIED_8 = 0x02000000;<a name="line.146"></a> |
| <span class="sourceLineNo">147</span><a name="line.147"></a> |
| <span class="sourceLineNo">148</span> int FLAG_UNIDENTIFIED_9 = 0x04000000;<a name="line.148"></a> |
| <span class="sourceLineNo">149</span><a name="line.149"></a> |
| <span class="sourceLineNo">150</span> int FLAG_UNIDENTIFIED_10 = 0x08000000;<a name="line.150"></a> |
| <span class="sourceLineNo">151</span><a name="line.151"></a> |
| <span class="sourceLineNo">152</span> int FLAG_UNIDENTIFIED_11 = 0x10000000;<a name="line.152"></a> |
| <span class="sourceLineNo">153</span><a name="line.153"></a> |
| <span class="sourceLineNo">154</span> // Default minimal flag set<a name="line.154"></a> |
| <span class="sourceLineNo">155</span> int DEFAULT_FLAGS = FLAG_NEGOTIATE_OEM | FLAG_NEGOTIATE_UNICODE<a name="line.155"></a> |
| <span class="sourceLineNo">156</span> | FLAG_NEGOTIATE_WORKSTATION_SUPPLIED | FLAG_NEGOTIATE_DOMAIN_SUPPLIED;<a name="line.156"></a> |
| <span class="sourceLineNo">157</span><a name="line.157"></a> |
| <span class="sourceLineNo">158</span> /** <a name="line.158"></a> |
| <span class="sourceLineNo">159</span> * Target Information sub blocks types. It may be that there are other <a name="line.159"></a> |
| <span class="sourceLineNo">160</span> * as-yet-unidentified sub block types as well.<a name="line.160"></a> |
| <span class="sourceLineNo">161</span> */<a name="line.161"></a> |
| <span class="sourceLineNo">162</span><a name="line.162"></a> |
| <span class="sourceLineNo">163</span> // Sub block terminator<a name="line.163"></a> |
| <span class="sourceLineNo">164</span> short TARGET_INFORMATION_SUBBLOCK_TERMINATOR_TYPE = 0x0000;<a name="line.164"></a> |
| <span class="sourceLineNo">165</span><a name="line.165"></a> |
| <span class="sourceLineNo">166</span> // Server name<a name="line.166"></a> |
| <span class="sourceLineNo">167</span> short TARGET_INFORMATION_SUBBLOCK_SERVER_TYPE = 0x0100;<a name="line.167"></a> |
| <span class="sourceLineNo">168</span><a name="line.168"></a> |
| <span class="sourceLineNo">169</span> // Domain name<a name="line.169"></a> |
| <span class="sourceLineNo">170</span> short TARGET_INFORMATION_SUBBLOCK_DOMAIN_TYPE = 0x0200;<a name="line.170"></a> |
| <span class="sourceLineNo">171</span><a name="line.171"></a> |
| <span class="sourceLineNo">172</span> // Fully-qualified DNS host name (i.e., server.domain.com)<a name="line.172"></a> |
| <span class="sourceLineNo">173</span> short TARGET_INFORMATION_SUBBLOCK_FQDNS_HOSTNAME_TYPE = 0x0300;<a name="line.173"></a> |
| <span class="sourceLineNo">174</span><a name="line.174"></a> |
| <span class="sourceLineNo">175</span> // DNS domain name (i.e., domain.com)<a name="line.175"></a> |
| <span class="sourceLineNo">176</span> short TARGET_INFORMATION_SUBBLOCK_DNS_DOMAIN_NAME_TYPE = 0x0400;<a name="line.176"></a> |
| <span class="sourceLineNo">177</span><a name="line.177"></a> |
| <span class="sourceLineNo">178</span> // Apparently the "parent" DNS domain for servers in sub domains<a name="line.178"></a> |
| <span class="sourceLineNo">179</span> short TARGET_INFORMATION_SUBBLOCK_PARENT_DNS_DOMAIN_NAME_TYPE = 0x0500;<a name="line.179"></a> |
| <span class="sourceLineNo">180</span>}<a name="line.180"></a> |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| </pre> |
| </div> |
| </body> |
| </html> |
