I am not aware of any actual implementations of this, although there has
been quite a bit of talk (search the archives for "turbine user".

Take a look of the TurbineSecurityService, and you will see some
implementations of the service for various authentication mechanisms, namely
Database and LDAP.  You would probably be most interested in LDAP, as it is
part of what windows domains use for authentication-communication.  The
other part is Kerberos, which you can learn about by searching the Internet.
Fortunately both of these are open and widely used standards, so there are
probably Java libraries available for both.  I am unsure, though, how
closely Microsoft stuck to the standards, especially since they have a
reputation for taking an open standard, mutating it, and calling it their
own (CSS, for example).  In fact there might even be a windows
authentication library you can use.

That would get you as far as having access to the domain user information.
Regarding the
not-having-to-sign-on-once-they-have-logged-into-their-computer part, you
are right about the Turbine java classes running on the server while the
client has the user.name information.  You could, however, write a small
java applet (applets are executed in the browser on the client, servlets on
the server) that grabs the pertinent system information, populates a hidden
html form, submits the form, etc.  This way the user's browser would log in
seemingly automatically to the user.

Understand, too, that security-oriented people might cringe over this last
paragraph.

If you decide to do the NTSecurityService implementation, take a look at
Turbine3 and Plexus (search the archives), as they are the future of Turbine
and lend themselves more easily to modular services.

You can also probably find quite a few people on the list to collaborate on
the project, as it seems like a popular feature request.

Good luck,

Chris

> -----Original Message-----
> From: Kleinhenz Thorsten [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, December 03, 2002 6:31 AM
> To: '[EMAIL PROTECTED]'
> Subject: Possible to use a nt user account to log into Turbine?
>
>
> Hello,
>
> I'm developing an intranet application using TDK 2.1 on WinNT4 / W2k.
> Is it possible to use the system user account to log into Turbine so the
> user only has to login once at the beginning? In Java one can get the
> username via 'System.getProperty("user.name")' but I think that won't help
> as long as the Java classes run on the server, not on the client.
>
> Does anyone know how to get the login working this way?
>
> Regards,
> Thorsten
>
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to