Re: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-23 Thread doume
Nikola Milutinovic-2 wrote: Just to make the picture complete, it can also be done with Apache + mod_auth_kerb + mod_jk. It does require some steps and the most tricky one is getting a proper Kerberos Service key from MS ADS. We've done it, so it is not really a big deal. However, people

Re: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-16 Thread Nikola Milutinovic
Just to make the picture complete, it can also be done with Apache + mod_auth_kerb + mod_jk. It does require some steps and the most tricky one is getting a proper Kerberos Service key from MS ADS. We've done it, so it is not really a big deal. However, people tend to state that TC is as good

Re: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-14 Thread Nikola Milutinovic
There is also a module from Quest Software, using Kerberos authentication, but it costs mega $. Has anyone considered writing a TC realm for Kerberos? Before MS ADS came into popular use, Kerberos was a rare beast, but now it is more present. And it much better than NTLM, which is why MS

RE: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-14 Thread George Sexton
If you're fronting Tomcat w/ IIS using the ISAPI redirector, then this can be done. Here's a link to the instructions for our product that describe how to do it. http://www.mhsoftware.com/caldemo/manual/en/pageFinder.html?page=895.htm Essentially, following steps 2-4 will cause the

Re: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-13 Thread André Warnier
Quick answer : Look at http://www.ioplex.com, Jespa. Derlei Luff wrote: Hi all, I’m new to Tomcat and normally work in a Microsoft Windows world. I’ve stumbled into a problem using Tomcat as a web server, that I’m sure there is a simple solution for though I can’t find it. I’m sure it works

Re: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-13 Thread André Warnier
To Martin, Steve and others : Samba's JCIFS works fine, but only for NTLMv1 authentication. (It is also no longer maintained, see http://jcifs.samba.org.) It does NOT work for NTLMv2 authentication, which is fast becoming the norm, and the default from Vista onwards. Jespa works with NTLMv2,

Re: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-13 Thread Steve Ochani
To Martin, Steve and others : Samba's JCIFS works fine, but only for NTLMv1 authentication. (It is also no longer maintained, see http://jcifs.samba.org.) Yes I saw that on the jcifs website. However I left to up to the OP to see that as well, considering the blue important notice is

Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-12 Thread Derlei Luff
Hi all,   I’m new to Tomcat and normally work in a Microsoft Windows world. I’ve stumbled into a problem using Tomcat as a web server, that I’m sure there is a simple solution for though I can’t find it. I’m sure it works if I use a MS IIS server instead of a Tomcat server at least. I hope some

Re: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-12 Thread Steve Ochani
Send reply to: Tomcat Users List users@tomcat.apache.org Date sent: Sat, 12 Sep 2009 12:50:41 -0700 (PDT) From: Derlei Luff derlei...@yahoo.com Subject:Windwos Integrated Authentication using AD and Tomcat (no prompt to the users) To: users@tomcat.apache.org Hi all,

RE: Windwos Integrated Authentication using AD and Tomcat (no prompt to the users)

2009-09-12 Thread Martin Gainty
did you look at the jcifs.http.NtlmHttpFilter filter? http://jcifs.samba.org/src/docs/ntlmhttpauth.html nbtstat -a MYHOSTNAME http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/nbtstat.mspx?mfr=true the IP and the 'ntstat name' *should* be located in