Hey All-
Finally Finally, Finally, I figured out how to authenticate to Active
Directory...(code below minus the login form).now to go further,
I would like to implement Single Sign-On.somehow we would need to
retrieve the user's name and password off their NT machine and use them
t
I think you are looking for NTLM authentication which was done by the samba
folks. See http://jcifs.samba.org/
-Tim
Pitre, Russell wrote:
Hey All-
Finally Finally, Finally, I figured out how to authenticate to Active
Directory...(code below minus the login form).now to go further,
I
t: Tuesday, September 09, 2003 4:17 PM
To: Tomcat Users List
Subject: Re: Active Directory Single Sign-On
I think you are looking for NTLM authentication which was done by the
samba
folks. See http://jcifs.samba.org/
-Tim
Pitre, Russell wrote:
> Hey All-
>
>
>
> Finally Finall
l [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 09, 2003 4:54 PM
> To: Tomcat Users List
> Subject: RE: Active Directory Single Sign-On
>
>
> Okay, Checked it out, can I use this API to grab the username and
> password with a .jsp or servlet off the NT machine.and
| Tim mentioned the use of the JCIFS library. I don't think that'd work
| either since it'd need to run on the same machine as the browser, which
| doesn't seem right. Or perhaps I'm missing something. Now if Tomcat
| supported Windows SSO using JCIFS, then that's a different story. I
| don't t
> -Original Message-
> From: Endre Stølsvik [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, September 10, 2003 3:45 AM
> To: Tomcat Users List
> Subject: Re: Active Directory Single Sign-On
>
>
> | Tim mentioned the use of the JCIFS library. I don't think
&g
ation..
Any thoughts, suggestions, comments?
Cheers
Russ
-Original Message-
From: Allen Hadden [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 10, 2003 6:36 AM
To: Tomcat Users List
Subject: RE: Active Directory Single Sign-On
> -Original Message-
> From: End
If you are using IIS, IIS can propogate the REMOTE_USER variable for you so
that authentication is already done.
As for authorization, there is a Valve called NonLoginAuthenticator
http://cvs.apache.org/viewcvs.cgi/jakarta-tomcat-4.0/catalina/src/share/org/apache/catalina/authenticator/NonLoginAu
It sounds like we should come up with a de facto way of achieving SSO with
Tomcat and NTLM (since there is plenty of M$ workstations out
there).Which leads me to believe that a lot of people could very well
benefit from this.. I'm required to implement this for our intranet
application whic
