Hello,

>As Ilya hints, you'll have to use NTLM to get this to work. IIRC, this
>requires that you use IIS with mod_jk to capture the authentication
>information and forward it over to Tomcat. If you want to be able to
>use NTLM for authentication into your webapp, you'll need to use a
>specific type of realm to do that.

IE and almost all modern browsers on windows may sent authentication info
transparently. Old, non-ie browsers can't and you need user needs to use
HTTP plain auth (401 Unauthorized) or form authentication.
Only IIS is able to accept it transparently AFAIK, tomcat natevly accepts
only form and HTTP-based auth. 

So: 

If you want your user not to enter log and pass (you just log into windows
and go to web site) -- you need IIS and IE (or modern version of another
browser).

In all other cases user would need to enter her login and password in
browser window (for http auth) or special page (form auth). 

You may use LDAP AD interface to check this info. That could be done with
out of IIS.

But for _transparent_ authentication IIS is required as Christopher
mentioned.

Ilya.



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to