>>> "Schmidt, Allen J." <[EMAIL PROTECTED]> 02-Feb-00 1:28:26 PM
>>>
>>-----Original Message-----
>>From: Maria Turk [mailto:[EMAIL PROTECTED]]
>>Does anyone have an example servlet for authenticating people to a
database.
>>I'm creating one but I'm struggling at the moment.
I've discussed this before on the list... do a search on the
archives.
It's pretty easy really.
>Similar to this, I would like to find information and specific
examples on
>authenticating to an NT Domain User and Group list.
This is harder and more interesting.
There are 3 possible ways of doing it:
1. JNI (ie: C code to be called by Java) provides access by using
NT's registry calls to read user information.
2. MS class to access to registry - just the same as the JNI solution
really but M$ do the work for you (and charge you no doubt)
3. The bits of string method:
a) use AT to regularly dump contents of user registry (including
passwords) to a file
b) use the file within the servlet as the source of the security
info
SECURITY NOTE: All these methods are inherantly insecure since you
are providing access to NT's (supposedly secure - but you ask the dead
cow) security registry over a completly insecure link.
You have been warned.
Nic Ferrier
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
