rack-ntlm 0.0.1

data/.gitignore

@@ -0,0 +1,19 @@
+## MAC OS
+.DS_Store
+
+## TEXTMATE
+*.tmproj
+tmtags
+
+## EMACS
+*~
+\#*
+.\#*
+
+## VIM
+*.swp
+
+## PROJECT::GENERAL
+coverage
+rdoc
+pkg

data/README.rdoc

@@ -0,0 +1,67 @@
+= Rack-ntlm
+
+== Description
+
+Rack middleware for transparent authentication with NTLM.
+
+This is a fork from lukefx/rack-ntlm on Github. This makes the Rack middleware a gem and uses net/ldap to search the user against an ActiveDirectory server.
+
+This is work in progress, so contributions are welcome.
+
+== Known Limitations (TO-DOs):
+
+* Due to the user-provided password not being available on the NTLM Type3 message, this middleware is only verifying the existence of the user on AD, and not binding as that user (which would require password)
+* Failure on the NTLM authentication or LDAP search will simply return 401 with a response body saying "You are not authorized to see this page"
+
+== Dependencies
+
+* rubyntlm (gem install rubyntlm)
+* net/ldap (gem install net-ldap)
+== Usage (with Rails):
+ 
+On your config/environment.rb:
+ 
+  config.gem 'rubyntlm', :lib => 'net/ntlm'
+  config.gem 'net-ldap', :lib => 'net/ldap'
+  config.gem 'rack-ntlm'
+
+  config.middleware.use "Rack::Ntlm", {
+    :uri_pattern => /\/login/                       # (default = /\//) (any URL)
+    :host => '<Active Directory hostname>',
+    :port => 389,                                   # default = 389
+    :base => 'Base namespace for LDAP search',
+    :search_filter => '(dn=%1)'                     # default = (sAMAccountName=%1)
+    :auth => {
+      :username => '<username to bind to LDAP>',
+      :password => '<password to bind to LDAP>'
+    }
+  }
+
+Then run:
+
+  rake gems:install
+  rake gems:unpack (optional, if you want to vendor the gem)
+
+== Example
+
+When a client needs to authenticate itself to a proxy or server using the NTLM scheme then the following 4-way handshake takes place (only parts of the request and status line and the relevant headers are shown here; "C" is the client, "S" the server): 
+
+1: C  --> S   GET ...
+
+2: C <--  S   401 Unauthorized
+              WWW-Authenticate: NTLM
+
+3: C  --> S   GET ...
+              Authorization: NTLM <base64-encoded type-1-message>
+
+4: C <--  S   401 Unauthorized
+              WWW-Authenticate: NTLM <base64-encoded type-2-message>
+
+5: C  --> S   GET ...
+              Authorization: NTLM <base64-encoded type-3-message>
+
+6: C <--  S   200 Ok
+
+== Copyright
+
+Copyright (c) 2009-2010 [Rack-Ntlm], released under the MIT license

data/Rakefile

@@ -0,0 +1,49 @@
+require 'rake'
+require 'rake/testtask'
+require 'rake/rdoctask'
+
+begin
+  require 'jeweler'
+  Jeweler::Tasks.new do |gem|
+    gem.name = "rack-ntlm"
+    gem.summary = %Q{Rack middleware for transparent authentication with NTLM}
+    gem.description = %Q{Rack middleware for transparent authentication with NTLM. This is a fork from lukefx/rack-ntlm on Github. This makes the Rack middleware a gem and uses net/ldap to search the user against an ActiveDirectory server. This is work in progress, so contributions are welcome.}
+    gem.email = "dtsato@gmail.com"
+    gem.homepage = "http://github.com/dtsato/rack-ntlm"
+    gem.authors = ["Danilo Sato"]
+    
+    gem.has_rdoc = true
+    gem.rdoc_options = ["--main", "README.rdoc", "--inline-source", "--line-numbers"]
+    gem.extra_rdoc_files = ["README.rdoc"]
+
+    gem.test_files = Dir['test/**/*'] + Dir['test/*']
+    
+    gem.add_dependency('rubyntlm', '>= 0.1.1')
+    gem.add_dependency('net-ldap', '>= 0.0.5')    
+  end
+  
+  Jeweler::GemcutterTasks.new
+  
+rescue LoadError
+  puts "Jeweler (or a dependency) not available. Install it with: sudo gem install jeweler"
+end
+
+desc 'Default: run unit tests.'
+task :default => :test
+
+desc 'Test the rack_ntlm plugin.'
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'lib'
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = true
+end
+
+desc 'Generate documentation for the rack_ntlm plugin.'
+Rake::RDocTask.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'Rack-ntlm'
+  rdoc.options << '--line-numbers' << '--inline-source'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end

data/VERSION

@@ -0,0 +1 @@
+0.0.1

data/lib/rack-ntlm.rb

@@ -0,0 +1 @@
+require 'rack/ntlm'

data/lib/rack/ntlm.rb

@@ -0,0 +1,57 @@
+require 'net/ntlm'
+require 'net/ldap'
+
+module Rack
+
+  class Ntlm
+    
+    def initialize(app, config = {})
+      @app = app
+      @config = {
+        :uri_pattern => /\//,
+        :port => 389,
+        :search_filter => "(sAMAccountName=%1)"
+      }.merge(config)
+    end
+
+    def auth(user)
+      ldap = Net::LDAP.new
+      ldap.host = @config[:host]
+      ldap.port = @config[:port]
+      ldap.base = @config[:base]
+      ldap.auth @config[:auth][:username], @config[:auth][:password] if @config[:auth]
+      !ldap.search(:filter => @config[:search_filter].gsub("%1", user)).empty?
+    rescue => e
+      false
+    end
+
+    def call(env)
+      if env['PATH_INFO'] =~ @config[:uri_pattern] && env['HTTP_AUTHORIZATION'].blank?
+        return [401, {'WWW-Authenticate' => "NTLM"}, []]
+      end
+
+      if /^(NTLM|Negotiate) (.+)/ =~ env["HTTP_AUTHORIZATION"]
+
+        message = Net::NTLM::Message.decode64($2)
+
+        if message.type == 1 
+          type2 = Net::NTLM::Message::Type2.new
+          return [401, {"WWW-Authenticate" => "NTLM " + type2.encode64}, []]
+        end
+
+        if message.type == 3 && env['PATH_INFO'] =~ @config[:uri_pattern]
+          user = Net::NTLM::decode_utf16le(message.user)
+          if auth(user)
+            env['REMOTE_USER'] = user 
+          else
+            return [401, {}, ["You are not authorized to see this page"]]
+          end
+        end
+    	end
+
+      @app.call(env)
+    end
+
+  end
+
+end

data/rack-ntlm.gemspec

@@ -0,0 +1,57 @@
+# Generated by jeweler
+# DO NOT EDIT THIS FILE DIRECTLY
+# Instead, edit Jeweler::Tasks in Rakefile, and run the gemspec command
+# -*- encoding: utf-8 -*-
+
+Gem::Specification.new do |s|
+  s.name = %q{rack-ntlm}
+  s.version = "0.0.1"
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
+  s.authors = ["Danilo Sato"]
+  s.date = %q{2010-03-02}
+  s.description = %q{Rack middleware for transparent authentication with NTLM. This is a fork from lukefx/rack-ntlm on Github. This makes the Rack middleware a gem and uses net/ldap to search the user against an ActiveDirectory server. This is work in progress, so contributions are welcome.}
+  s.email = %q{dtsato@gmail.com}
+  s.extra_rdoc_files = [
+    "README.rdoc"
+  ]
+  s.files = [
+    ".gitignore",
+     "README.rdoc",
+     "Rakefile",
+     "VERSION",
+     "lib/rack-ntlm.rb",
+     "lib/rack/ntlm.rb",
+     "rack-ntlm.gemspec",
+     "test/rack_ntlm_test.rb",
+     "test/test_helper.rb"
+  ]
+  s.homepage = %q{http://github.com/dtsato/rack-ntlm}
+  s.rdoc_options = ["--main", "README.rdoc", "--inline-source", "--line-numbers"]
+  s.require_paths = ["lib"]
+  s.rubygems_version = %q{1.3.5}
+  s.summary = %q{Rack middleware for transparent authentication with NTLM}
+  s.test_files = [
+    "test/rack_ntlm_test.rb",
+     "test/test_helper.rb",
+     "test/rack_ntlm_test.rb",
+     "test/test_helper.rb"
+  ]
+
+  if s.respond_to? :specification_version then
+    current_version = Gem::Specification::CURRENT_SPECIFICATION_VERSION
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::RubyGemsVersion) >= Gem::Version.new('1.2.0') then
+      s.add_runtime_dependency(%q<rubyntlm>, [">= 0.1.1"])
+      s.add_runtime_dependency(%q<net-ldap>, [">= 0.0.5"])
+    else
+      s.add_dependency(%q<rubyntlm>, [">= 0.1.1"])
+      s.add_dependency(%q<net-ldap>, [">= 0.0.5"])
+    end
+  else
+    s.add_dependency(%q<rubyntlm>, [">= 0.1.1"])
+    s.add_dependency(%q<net-ldap>, [">= 0.0.5"])
+  end
+end
+

data/test/rack_ntlm_test.rb

@@ -0,0 +1,8 @@
+require 'test_helper'
+
+class RackNtlmTest < ActiveSupport::TestCase
+  # Replace this with your real tests.
+  test "the truth" do
+    assert true
+  end
+end

data/test/test_helper.rb

@@ -0,0 +1,3 @@
+require 'rubygems'
+require 'active_support'
+require 'active_support/test_case'

metadata

@@ -0,0 +1,88 @@
+--- !ruby/object:Gem::Specification 
+name: rack-ntlm
+version: !ruby/object:Gem::Version 
+  version: 0.0.1
+platform: ruby
+authors: 
+- Danilo Sato
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2010-03-02 00:00:00 +00:00
+default_executable: 
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: rubyntlm
+  type: :runtime
+  version_requirement: 
+  version_requirements: !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: 0.1.1
+    version: 
+- !ruby/object:Gem::Dependency 
+  name: net-ldap
+  type: :runtime
+  version_requirement: 
+  version_requirements: !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: 0.0.5
+    version: 
+description: Rack middleware for transparent authentication with NTLM. This is a fork from lukefx/rack-ntlm on Github. This makes the Rack middleware a gem and uses net/ldap to search the user against an ActiveDirectory server. This is work in progress, so contributions are welcome.
+email: dtsato@gmail.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- README.rdoc
+files: 
+- .gitignore
+- README.rdoc
+- Rakefile
+- VERSION
+- lib/rack-ntlm.rb
+- lib/rack/ntlm.rb
+- rack-ntlm.gemspec
+- test/rack_ntlm_test.rb
+- test/test_helper.rb
+has_rdoc: true
+homepage: http://github.com/dtsato/rack-ntlm
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- --main
+- README.rdoc
+- --inline-source
+- --line-numbers
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.3.5
+signing_key: 
+specification_version: 3
+summary: Rack middleware for transparent authentication with NTLM
+test_files: 
+- test/rack_ntlm_test.rb
+- test/test_helper.rb
+- test/rack_ntlm_test.rb
+- test/test_helper.rb