[jcifs] How to retrieve password

Michael B Allen mba2000 at ioplex.com
Thu Nov 25 18:03:53 GMT 2004


Roel De Nijs said:
> 		out.println("<br>DEBUG: pass = " +
> autho.getPassword());

The NtlmPasswordAuthentication password member is only populated when a
clear text password is supplied using jcifs.smb.client.password or in the
URL credentials field. NTLM HTTP Authentication never sends the password
iself -- only the password hashes. Indeed you never will be able to
retrieve a user's clear text password as that would be a security
vulnerbility.

What do you ultimately want to do exactly?

Mike




More information about the jcifs mailing list