import jcifs.ntlmssp.NtlmMessage; //导入依赖的package包/类
protected String performNtlmAuthentication(InetSocketAddress target,
        String challenge) throws IOException {
    if (challenge.length() == 4) {
        NtlmMessage type1 = new Type1Message(NTLMV2_FLAGS, null, null);
        return "NTLM "
                + Base64
                        .encodeBytes(type1.toByteArray(), Base64.NO_OPTIONS);
    } else {
        challenge = challenge.substring(5); // "NTLM "
        Type2Message type2 = new Type2Message(Base64.decode(challenge,
                Base64.NO_OPTIONS));
        String domain = type2.getTarget();
        String hostname = target.getHostName();
        InetAddress addr = target.isUnresolved() ? null : target
                .getAddress();
        PasswordAuthentication pa = Authenticator
                .requestPasswordAuthentication(hostname, addr, target
                        .getPort(), "HTTP", domain, "NTLM");
        if (pa == null)
            return null;

        String username = pa.getUserName();
        String password = new String(pa.getPassword());
        int slash = username.indexOf('\\');
        if (slash > -1) {
            domain = username.substring(0, slash);
            username = username.substring(slash + 1);
        }
        Type3Message type3 = new Type3Message(type2, password, domain,
                username, null, NTLMV2_FLAGS_TYPE3);
        return "NTLM "
                + Base64
                        .encodeBytes(type3.toByteArray(), Base64.NO_OPTIONS);
    }
}
 

import jcifs.ntlmssp.NtlmMessage; //导入依赖的package包/类
private void doHandshake () throws IOException, GeneralSecurityException {
    connect();
    try {
        int response = parseResponseCode();
        if ( response != HTTP_UNAUTHORIZED && response != HTTP_PROXY_AUTH ) {
            return;
        }
        NtlmMessage type1 = attemptNegotiation(response);
        if ( type1 == null )
            return; // no NTLM
        int attempt = 0;
        while ( attempt < MAX_REDIRECTS ) {
            this.connection.setRequestProperty(this.authProperty, this.authMethod + ' ' + Base64.toBase64String(type1.toByteArray()));
            this.connection.connect(); // send type 1
            response = parseResponseCode();
            if ( response != HTTP_UNAUTHORIZED && response != HTTP_PROXY_AUTH ) {
                return;
            }
            NtlmMessage type3 = attemptNegotiation(response);
            if ( type3 == null )
                return;
            this.connection.setRequestProperty(this.authProperty, this.authMethod + ' ' + Base64.toBase64String(type3.toByteArray()));
            this.connection.connect(); // send type 3
            if ( this.cachedOutput != null && this.doOutput ) {
                @SuppressWarnings ( "resource" )
                OutputStream output = this.connection.getOutputStream();
                this.cachedOutput.writeTo(output);
                output.flush();
            }
            response = parseResponseCode();
            if ( response != HTTP_UNAUTHORIZED && response != HTTP_PROXY_AUTH ) {
                return;
            }
            attempt++;
            if ( this.allowUserInteraction && attempt < MAX_REDIRECTS ) {
                reconnect();
            }
            else {
                break;
            }
        }
        throw new IOException("Unable to negotiate NTLM authentication.");
    }
    finally {
        this.cachedOutput = null;
    }
}