[jcifs] authentication

[Göran Karlsson (KA/EAB)]

As I wrote in my previous post, it was an attempt to see if it would make IE not append the domain name to the remote user name. I didn't think it would work, but it didn't take long to try... ;)

/Göran

-----Original Message-----
From: Michael B Allen [mailto:mba2000 at ioplex.com] 
Sent: den 12 juli 2006 18:19
To: Göran Karlsson (KA/EAB)
Cc: jcifs at lists.samba.org
Subject: Re: [jcifs] authentication

On Wed, 12 Jul 2006 14:05:09 +0200
Göran Karlsson (KA/EAB) <goran.karlsson at ericsson.com> wrote:

> Now I get unsure whether I understood the context correctly or not. I use jcifs as a servlet filter to authenticate web clients. The domain I'm thinking of is the one in the filter configuration in the web.xml. 
> 
> In case we are talking about the same thing, I tried without the domain tag in the web.xml too. That would be null, right?

What are you're trying to achieve by leaving the Windows domain out? When you don't specify the domain with smbclient I believe the remote server simply assumes the user is to be authenticated against the domain with which the server is joined. The domain in the NTLM HTTP Filter is effectively the domain with which the Filter is joined. Therefore not specifying a domain with the Filter should have no visible effect on clients.

Mike

--
Michael B Allen
PHP Extension for SSO w/ Windows Group Authorization http://www.ioplex.com/