answer to

1 : I don't think this is possible. Maybe you can tell the OS to use default
user/pass or something, but I don't think you can withdraw the password and
use it as you wish, since you then could easy do an application that shows
all the passwords to people.
If you can tell the OS to login, there should be the same encrytion way of
the password, since windows only uses the password in a encrypted way (else
you could also easy recieve/read it and it would be a security risk...)

2 : No there is no way since this would be a huge security risk. Think if
you would go to a website, and that website got all your information (user,
password, name and so on). Noone want that, do they? I belive that you are
limited in IE (or mozilla) by the same restriction that you have in an
Applet

I don't know much about NIS and NTLM, but this I wrote is somehow simple
logic. It would be a huge secrurity risk.
What you can do (if you have an application, and not a webpage login) is to
use the windows registry. Then your user only have to write in the password
once. If you have an weblogin, you can build an application GUI that do the
login automaticly. This won't work on weblogins at firewall on and
high-security website, since they often hash a value in an applet or
something (at least our does)

Hope it help somewhat

// Jan Aren�

-----Ursprungligt meddelande-----
Fr�n: A mailing list about Java Server Pages specification and reference
[mailto:[EMAIL PROTECTED]]F�r Glenn Wearen
Skickat: den 24 oktober 2001 19:12
Till: [EMAIL PROTECTED]
�mne: NTLM auto-authentication with IE


Two question and one part solution follows.

1. Is there a way to get the username/password of a user who has logged onto
a network domain (i.e. NIS or NTLM) without asking the user to (re)enter it
in a form (without using IIS or Cookies)?

2. Is IE (or Mozilla) capable of automatically picking up the user/pass
logged in at the OS, and how would your servlet container request it?

I've used the sfg.sourceforge project to authenticate my web  application
login against a NTLM Domain controllers SAM, it works but still requires the
user to enter the user/pass on my form after the user has already logged
into their windows PC.

Regards
Glenn Wearen






________________________________________________________
PRIVATE, CONFIDENTIAL AND PRIVILEGED COMMUNICATION
This e-mail and any files transmitted with it are confidential and/or
privileged. They are intended solely for the use of the intended recipient.
The content of this e-mail and any files transmitted with it may have been
changed or altered without the consent of the author. Please note that any
representations, opinions, conclusions, advices or other information in this
message that do not relate to the official business of this company shall be
understood as neither been given or sanctioned by it. If you are not the
intended recipient please note that any review, dissemination, disclosure,
alteration, printing, copying or transmission of this e-mail and/or any file
transmitted with it is prohibited and may be unlawful. If you have received
this e-mail and any file transmitted with it in error, please notify Columba
Global Systems, M1 Technology Park, Swords Business Campus, Swords, Co.
Dublin, Ireland, telephone no: +353 1 8900209 email [EMAIL PROTECTED]

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST
DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:

 http://archives.java.sun.com/jsp-interest.html
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.jsp
 http://www.jguru.com/faq/index.jsp
 http://www.jspinsider.com

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:

 http://archives.java.sun.com/jsp-interest.html
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.jsp
 http://www.jguru.com/faq/index.jsp
 http://www.jspinsider.com

Reply via email to