Well, for Bruno and Group, here is what we did. I don't know if it is going to work
out for you.
And Yes, this is a TC solution not weblogic. Don't be miserable!
We had two implementations since we were in the middle of an exchange upgrade and just
rolled out
a 2K domain. We use exchange and are setup for NT authentication on exchange. Given
this information....
Implementation
1) My first realm "pop-ed" off the exchange server with domain username and pass.
Since the exchange server uses NT authentication that worked. It is/was kinda hackey,
but it did for a few weeks until we rolled out exchange 2K.
to get the roles, the realm then went and looked into a company wide addressbook (an
LDAP server) for a particular attribute
that had been reserved for just such purposes. In there we added roles with ';'
semi-colons as delimiters.
so
if(popOffExchange(username,pass) == GOOD)
{
roles = checkLDAPforRoles(attribute,ssearchbase);
}
We couldn't use the JNDI realm with TC because our LDAP at the time required no
authentication.
2) Win2k domain with Active Directory (AD) and exchange 2k. Similar to above, but with
everything
being one-stop login. Because AD is an LDAP server, and requires domain logon to get
into it,
authenticating against it using the credentials supplied and then going straight to
the user branch
of the LDAp tree was great. Exchange 2K was essential because it adds a field in AD
for customAttributes
which we use for roles. We couldn't use JNDI realm here as we don't have a single user
account to lookup info
and neither our admin nor I knew were (or if) the passwds for NT were in AD.
if you are short on time you can probably buy the bins from my company, but they only
work with exch 2k, and win2k domain
with AD. If you are in that situation then this will just plug in.
Chris
-----Original Message-----
From: ans M [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 20, 2001 10:24 AM
To: Bongiorno.Christian
Subject: RE: Please help me on NT Authentication
Hey
Don't tell me how to do this in Weblogic
I had mentioned it clearly that I am Using Tomcat and don't forget that U are in
Tomcat User List
--
On Thu, 20 Dec 2001 10:05:30
Bongiorno.Christian wrote:
>What mail servers do you run and how do they authenticate?
>
>I.E... exchange 5.5 exchange 2K
>
>Hack-ware pop.... what?
>
>-----Original Message-----
>From: ans M [mailto:[EMAIL PROTECTED]]
>Sent: Thursday, December 20, 2001 9:57 AM
>To: Bongiorno.Christian
>Subject: RE: Please help me on NT Authentication
>
>
>I am using NT Domain
>--
>
>On Thu, 20 Dec 2001 09:24:57
> Bongiorno.Christian wrote:
>>First thing, are you using Win NT domain Controllers or Win2k ?
>>
>>If win2k, do you have Active Directory installed?
>>
>>What mail servers do you run? How do they authenticate?
>>
>>
>>
>>
>>-----Original Message-----
>>From: ans M [mailto:[EMAIL PROTECTED]]
>>Sent: Thursday, December 20, 2001 9:14 AM
>>To: Bongiorno.Christian
>>Subject: RE: Please help me on NT Authentication
>>
>>
>> HI
>>Thanks for helping me.
>>Please tell me how to do it in detail. Also tell me if any document available?
>>
>>Thanks
>>Reply soon
>>
>>--
>>
>>On Thu, 20 Dec 2001 08:37:07
>> Bongiorno.Christian wrote:
>>>Hi there,
>>> I can give you all the help you need -- I just did that. You will need to
>create a custom realm (not tough), and then there are some infrastructure dependent
>details to consider. Email me back if you want info.
>>>
>>>
>>>Chris
>>>
>>>
>>>
>>>
>>>-----Original Message-----
>>>From: ans M [mailto:[EMAIL PROTECTED]]
>>>Sent: Thursday, December 20, 2001 3:55 AM
>>>To: [EMAIL PROTECTED]
>>>Subject: Please help me on NT Authentication
>>>
>>>
>>>Hi,
>>>
>>>I am building a system for the Intranet. We have a NT network. I wanted to know if
>by any means I can use the username and password that is registered in the NT Server,
>so that when a user logs in to NT system, he should be automatically logged in to my
>application built on Tomcat?
>>>
>>>Can anybody guide me on how to go abt it?
>>>
>>>Thanks in anticipation
>>>
>>>
>>>
>>>
>>>--
>>>You Win! We Donate.
>>>Register to win $10,000 and Lycos will donate $1 to the Children's Wish Foundation
>(up to $20,000 in total). Limit of one registration per person. Go to
>http://shop.lycos.com/holidays/sweeps/
>>>
>>>--
>>>To unsubscribe: <mailto:[EMAIL PROTECTED]>
>>>For additional commands: <mailto:[EMAIL PROTECTED]>
>>>Troubles with the list: <mailto:[EMAIL PROTECTED]>
>>>
>>>
>>>--
>>>To unsubscribe: <mailto:[EMAIL PROTECTED]>
>>>For additional commands: <mailto:[EMAIL PROTECTED]>
>>>Troubles with the list: <mailto:[EMAIL PROTECTED]>
>>>
>>>
>>
>>
>>--
>>You Win! We Donate.
>>Register to win $10,000 and Lycos will donate $1 to the Children's Wish Foundation
>(up to $20,000 in total). Limit of one registration per person. Go to
>http://shop.lycos.com/holidays/sweeps/
>>
>
>
>--
>You Win! We Donate.
>Register to win $10,000 and Lycos will donate $1 to the Children's Wish Foundation
>(up to $20,000 in total). Limit of one registration per person. Go to
>http://shop.lycos.com/holidays/sweeps/
>
--
You Win! We Donate.
Register to win $10,000 and Lycos will donate $1 to the Children's Wish Foundation (up
to $20,000 in total). Limit of one registration per person. Go to
http://shop.lycos.com/holidays/sweeps/
--
To unsubscribe: <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>
