----------------------------------------------------------------
BEFORE YOU POST, search the faq at <http://java.apache.org/faq/>
WHEN YOU POST, include all relevant version numbers, log files,
and configuration files. Don't make us guess your problem!!!
----------------------------------------------------------------
Mohamed...thanks for reply
the way I see the whole process (when using servlets) is:
apache can base its security on several different ways, depending on modules
that I use........
I already installed the NT authentification module and apache works just
fine with it.
That means that it is the apache getting the authentificated login at that
moment.
On the other hand, when working with servlets.........JServ allows us to
fetch that username (with getRemoteUserName) and that mechanism should not
be dependant on the mechanism used bellow ?!?.
Well, at that point, I am getting null pointer back.
Can anyone tell me if I am wrong with things mentioned above?
thank again
SeJo
p.s. For all mailing list readers......sorry for the previous empty mail.
Donno what happened.
----- Original Message -----
From: Mohamed Riaz <[EMAIL PROTECTED]>
To: Java Apache Users <[EMAIL PROTECTED]>
Sent: Saturday, December 04, 1999 6:47 AM
Subject: Re: NT-Apache authorization.....URGENT
> ----------------------------------------------------------------
> BEFORE YOU POST, search the faq at <http://java.apache.org/faq/>
> WHEN YOU POST, include all relevant version numbers, log files,
> and configuration files. Don't make us guess your problem!!!
> ----------------------------------------------------------------
>
> Hi Sejo,
>
> I am not sure whether my suggestios is what u need, but u may give it a
try.
> Every http based transaction has a structure called basic authentication
> which is implemented by every web server and web browser suitably. For
eg,
> in Apache we have the .htaccess file concept. In NT there would be
> something similar. When somebody access such protected dir/files then a
> login window is thrown by the browser. what ever is entered is sent to
the
> server in a certain way and checked by the server. When u try the method
u
> have mentioned below, it is this 'user' you will get. With my knowledge
> base, It is not possible to get (and one should not get) the 'Login' of
the
> current session of the NT machine. If such an Api exists that is a
> cake-walk for a hacker to make the NT server (where the webserver runs) go
> crash.
>
> HTH.
>
> Riaz
>
>
> ----- Original Message ----- > I'll certainly view these docs lateron but
> what I am actually looking for is
> > a way to retrieve (nt)userid from the servlet code. THe getRemoteUser()
> > gives null back. I am wondering if something is wrong with my server
> > configuration since I can view the remote IP address but not the
hostname
> > and (nt) login name which I need.
>
>
>
>
> --
> --------------------------------------------------------------
> Please read the FAQ! <http://java.apache.org/faq/>
> To subscribe: [EMAIL PROTECTED]
> To unsubscribe: [EMAIL PROTECTED]
> Archives and Other: <http://java.apache.org/main/mail.html>
> Problems?: [EMAIL PROTECTED]
>
--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Archives and Other: <http://java.apache.org/main/mail.html>
Problems?: [EMAIL PROTECTED]