Existing project was using NTLM for user authentication via web Filter and JCIFS. For authorization and role management it is still using web filter (RoleFilter).
After successfull authentication DOMAIN\username was transfered via session parameters in RoleFilter. For security reasons NTLM Filter was eliminated and changed
to Server based authenticaiton (SPNEGO). Applicaiton is running on Webspehere Aplication Server. SPNEGO is already configured and running. Rolefilter is
now missing DOMAIN\username as input parameter. How can I get this parameter from Websphere context? Thanks in advance
Preferably, security should be handled by the JEE standard security system and not by application code. Or at a minimum, security code in webapps should be handled by a well-vetted security system such as Spring Security. User-designed security systems - including those developed by the local "genius" are almost invariably insecure and often take only minutes for unsophisticated users to crack. Security is too sensitive to be designed by someone whose main job is doing anything else.
Having said that, the preferred way to inject external data into a web application is via the application environment and JNDI. You can then set the value(s) you want to pass in using the webapp administration console and the webapp can retrieve those values from the JNDI java:comp/env directory tree. That process works under all JEE-compliant webapp servers, not just WebSphere and all OS's.
"privilege" comes from the Latin words for "private" and "law" (legal) and dates to feudal times. To "claim privilege" meant that you were above the laws that applied to the common people.
It's a pleasure to see superheros taking such an interest in science. And this tiny ad:
Building a Better World in your Backyard by Paul Wheaton and Shawn Klassen-Koop