IE 安全区问题
我正在开发一个将在公司内部网中使用的网站，该网站使用 JCIFS 和 NTLM 自动对用户进行身份验证，而不要求他们登录。 在 IE 6 中似乎一切正常，但在 IE 7 中系统会提示某些用户输入密码。
我们通过让用户将其登录选项更改为“使用当前用户名和密码自动登录”（工具 > ; Internet 选项 > 安全选项卡 > 选择本地 Intranet > 一直在底部用户身份验证 > 登录），但我们仍然有一些用户收到用户名/密码提示。
此外，我们有一些用户报告说，当出现提示时，他们只需单击“取消”，页面就会正确显示。
如果有人有任何其他建议，我将不胜感激。
I'm developing a website which will be used in the corporate intranet which uses JCIFS and NTLM to automatically authenticate the users without asking them to log on. Everything seems to be working in IE 6, but some users are being prompted for their passwords in IE 7.
We've had some success by getting the users to change their Logon option to "Automatic logon using current username and password" (Tools > Internet Options > Securty Tab > Select Local Intranet > Custom Level > All the way at the bottom User Authentication > Logon), but we are still having a few users who are getting username/password prompts.
Also, we've had some users report they can just click cancel when the prompt comes up and the page will come up correctly.
If anyone has any other suggestions, I'd greatly appreciate them.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
事实证明，笔记本电脑上的新安全设置需要 NTLMv2，而 JCIFS NLTM 库对此没有很好的支持。
经过一些研究，发现 NTLM 的 JCIFS 实现非常 hacky（如 JCIFS 开发人员所述），并且他们正在取消 JCIFS 的下一个主要版本中的支持。 我们已改用 Tomcat IIS 连接器 (http://tomcat.apache .org/connectors-doc/webserver_howto/iis.html），效果更好。
感谢大家的回应。
Turned out that the new security settings on the laptops required NTLMv2 which is not well supported by the JCIFS NLTM library.
After some research, found out that JCIFS implementation of NTLM is very hacky (as described by the JCIFS devs) and they're removing support in the next major version of JCIFS. We've moved to using the Tomcat IIS Connector (http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html), which works much better.
Thanks everyone for your responses.
您可能还想尝试让您的用户将您的域添加到他们的受信任站点列表中。 我知道我必须这样做才能让我们的网站与 NTLM 兼容。
You may also want to try having your users add your domain to their trusted sites list. I know that I had to do that to get our sites working with NTLM.
如果您使用 IP 地址、完全限定域名或带点的 url 访问 Intranet 网站，则该网站可能会被标识为位于 Internet 区域，而不是位于本地 Intranet 区域。
http://support.microsoft.com/kb/303650
If you access an intranet Web site by using an IP address or a fully qualified domain name , or a url with a dot in it the Web site may be identified as in the Internet zone instead of in the Local intranet zone.
http://support.microsoft.com/kb/303650