File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Security and the fly likes NT authentication Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of REST with Spring (video course) this week in the Spring forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "NT authentication" Watch "NT authentication" New topic

NT authentication

Md Fizal
Ranch Hand

Joined: Dec 23, 2002
Posts: 61
I have Weblogic 6.1 on Solaris machine and the users are on Windows platform, hitting the application using IE browser.
Users has to enter the user id and password everytime to get authenticated and enter into the application, even though user has already logged into the windows using the login id. Is there any way browser can automatically send the user's windows login id to my unix box?
Anant Kadiyala

Joined: Aug 29, 2001
Posts: 24
We have the same problem as well. There are two not-easy solutions.
1) Use federated identity management. Get a Netegrity or Oblix that manages the user identity from a central place and all systems authenticate against this.
2) Use SPNEGO protocol. This is a custom Microsoft protocol, but widely relied upon (due to the ubiquity IE). WLS at this time does not have OTB support for this. So you have to deal with very low level stuff yourself. You will need to get into ASN parsing, etc.
I know this does not help, but this is how things are :-) SSO is not an easy beast to tame!

IBM Certified in Object-Oriented Analysis and Design with UML
Md Fizal
Ranch Hand

Joined: Dec 23, 2002
Posts: 61
But will these work on Unix machines? All I need is just the NT user id on the Unix side. I heard jCIFS has something to do with what I need. Do you have any idea?
I agree. Here's the link:
subject: NT authentication
It's not a secret anymore!