Well, I was using CLIENT-CERT because that is how it works in WebLogic.
But if you use BASIC the user gets prompted to login. I have a feeling
that this doesn't work in Jboss.  Basically what I need is a combination
of the jCFISs NTML code and the
org.jboss.security.auth.spi.LdapExtLoginModule security realm class.

The NTLM code would get the user credentials from the NTLM headers and
then pass it to the login module to authenticate the user and load the
roles. This is a real bummer I can't believe no one has wanted this
functionality before.

Thanks anyway.
Scott

> -----Original Message-----
> From: Pulkit Singhal [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, August 22, 2006 4:37 PM
> To: Tomcat Users List
> Subject: Re: IIS 5.0 - Jboss with Tomcat 5.5 - JK 1.2.15 - NTLM
>
> Hi Scott,
>
> I'm not exactly an expert on this but I'm quite sure that if
> you strictly want to use NTLM...you do not need to this:
> >> 2> set the auth-method to CLIENT-CERT in the web.xml
> unless ofcourse you are doing it because you want a secure
> channel between your IIS server and the tomcat instance which
> is (I think) a whole different game.
>
> Cheers,
> - Pulkit

SPECIAL NOTICE

All information transmitted hereby is intended only for the use of the
addressee(s) named above and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution
of confidential and privileged information is prohibited. If the reader
of this message is not the intended recipient(s) or the employee or agent
responsible for delivering the message to the intended recipient, you are
hereby notified that you must not read this transmission and that disclosure,
copying, printing, distribution or use of any of the information contained
in or attached to this transmission is STRICTLY PROHIBITED.

Anyone who receives confidential and privileged information in error should
notify us immediately by telephone and mail the original message to us at
the above address and destroy all copies.  To the extent any portion of this
communication contains public information, no such restrictions apply to that
information. (gate01)

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to