Well, I was using CLIENT-CERT because that is how it works in WebLogic. But if you use BASIC the user gets prompted to login. I have a feeling that this doesn't work in Jboss. Basically what I need is a combination of the jCFISs NTML code and the org.jboss.security.auth.spi.LdapExtLoginModule security realm class.
The NTLM code would get the user credentials from the NTLM headers and then pass it to the login module to authenticate the user and load the roles. This is a real bummer I can't believe no one has wanted this functionality before. Thanks anyway. Scott > -----Original Message----- > From: Pulkit Singhal [mailto:[EMAIL PROTECTED] > Sent: Tuesday, August 22, 2006 4:37 PM > To: Tomcat Users List > Subject: Re: IIS 5.0 - Jboss with Tomcat 5.5 - JK 1.2.15 - NTLM > > Hi Scott, > > I'm not exactly an expert on this but I'm quite sure that if > you strictly want to use NTLM...you do not need to this: > >> 2> set the auth-method to CLIENT-CERT in the web.xml > unless ofcourse you are doing it because you want a secure > channel between your IIS server and the tomcat instance which > is (I think) a whole different game. > > Cheers, > - Pulkit SPECIAL NOTICE All information transmitted hereby is intended only for the use of the addressee(s) named above and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of confidential and privileged information is prohibited. If the reader of this message is not the intended recipient(s) or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that you must not read this transmission and that disclosure, copying, printing, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. Anyone who receives confidential and privileged information in error should notify us immediately by telephone and mail the original message to us at the above address and destroy all copies. To the extent any portion of this communication contains public information, no such restrictions apply to that information. (gate01) --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]