> Re "... Apache has cleaner support for NTLM than MS's own
> product ...":
>
> Cleaner how? Disallowing Anonymous is all it takes in IIS.
>
To get the user name passed through for use with a Basic Authentication scheme managed
from your server app yes I have done that
many times. Probably you can get the NTLM user name the same way.
To get NTLM to manage access to your servlets is a bit more challenging.
Certainly I had problems with it the last time I tried it. My search of the web led me
to believe I was not alone.
The thread started here: http://codeguru.earthweb.com/isapi/authfilt.shtml
is typical of the types of things I saw.