[jcifs] jCIFS Jboss Tomcat IIS NTLM Authentication

Scott Shaver Scott.Shaver at mcdata.com
Wed Oct 26 16:31:44 GMT 2005

I thought I tried that but I'll give it another go. Won't this mean that
the user's realm groups (security groups from active directory) won't be
loaded then? If tomcat doesn't do the authentication via the filter I
would assume that would be the case. That won't work for me if it is

The application I have is an employee portal. I want the user to not
have to log in to be authenticated. I have this working perfectly in
WebLogic but I'm exploring a possible move to JBoss. I use the user's
groups to avoid displaying certain sections of the portal.

Thanks, Scott.

On 10/26/05 Richard Caper wrote:

>In my experience, IIS tends to "grab" the NTLM messages coming from the
client; I've had similar issues using the filter fronted by IIS.
>If all you need is to have getRemoteUser return the user name (i.e.
just using the filter to authenticate against the domain controller)
then you don't really need jCIFS; IIS can do this for you.  See here for
more details:


All information transmitted hereby is intended only for the use of the
addressee(s) named above and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution
of confidential and privileged information is prohibited. If the reader
of this message is not the intended recipient(s) or the employee or agent
responsible for delivering the message to the intended recipient, you are
hereby notified that you must not read this transmission and that disclosure,
copying, printing, distribution or use of any of the information contained
in or attached to this transmission is STRICTLY PROHIBITED.

Anyone who receives confidential and privileged information in error should
notify us immediately by telephone and mail the original message to us at
the above address and destroy all copies.  To the extent any portion of this
communication contains public information, no such restrictions apply to that
information. (gate01)
-------------- next part --------------
HTML attachment scrubbed and removed

More information about the jcifs mailing list