IBM Verify

 View Only
  • 1.  ISVDI - cifs integration - best practice

    Posted 11 hours ago

    does anyone have experience with integration to samba share within SMB2/SMB3 (without ntlm authentication) within ISVDI script? I am creating an ISVG-IM custom adapter to reconcile a data file from a samba share and I want the authentication to be part of the configuration (not at the user level under which the RMI dispatch service is running). From the service form I pass the file path to the samba share, user and password and I need to authenticate under this domain user to access the file. Any ideas? 

    I've found tutorials to use smbj and jcifs-ng libraries. Just wondering if anyone has experience with this and advice on how best to proceed.

    Thank you



    ------------------------------
    Jakub Nejdl
    ------------------------------


  • 2.  RE: ISVDI - cifs integration - best practice

    Posted 10 hours ago

    I have tried many things - but not this ;-)

    Doing a brief look through the APIDOC I think the foremost challenge is that you will need to set (and later unset) Java system properties to define the parameters used for the connection. Setting is easy (just use the SDI system.setProperty() method (though in an adapter you may have to use the fully qualified name of the UserFunction class name as "System" is not always loaded in a Dispatcher) - unset of a Java Property you need to go to the native methods of Java - there is no helper method implemented for that in SDI.

    I do not quite understand the "without ntlm authentication" - can you clarify that a little more - in my brief look through I only saw NTLM authentication methods in the samples - I have not deep dived...

    As a standard recommendation to avoid class conflicts I would load the jars dynamically - either using the IDILoader or using the solution.properties of the dispatcher and a local directory under the dispatcher directory. 



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------



  • 3.  RE: ISVDI - cifs integration - best practice

    Posted 8 hours ago

    Thank you Franz for your response. About NTLM. Well as far as I know, the newer versions of samba (SMB2) do not support NTLM - it support at most NTLMv2, which is banned in the companies for security reasons by GPO. Other options Ive found are for example kerberos or something called pre-auth integrity. But to be honest, authentication was one of the things I wanted to discuss and ask for advice :) .



    ------------------------------
    Jakub Nejdl
    ------------------------------



  • 4.  RE: ISVDI - cifs integration - best practice

    Posted 7 hours ago

    Windows CIFS/SAMBA authentication is somewhat off topic for this forum I think - but if somebody knows something about it I will read it with interest.

    I believe you probably will find better support on forums for the SAMBA Java integrations.



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------