[jcifs] Is SingleSignOn with jcifs possible?

[Michael B Allen]

On Wed, 13 Sep 2006 09:22:46 +0200
"Axel Seinsche" <axel.seinsche at innosystec.de> wrote:

> Hi all,
> 
> my jCIFS implementation is working well now. What I need in the end is a
> SingleSignOn scenario. This is what I want to have:
> 
> 1. user authenticates to the OS (authentication is done by the PDC)
> 2. the accounts on the cifs share are inherited from the PDC as well
> 3. the user should access the data without authenticating again
> 
> My problem is that I can't get the credentials to write my own
> authenticator. Or don't I need anything and this is automatically done by
> the OS because the cifs share gets the accounts from the PDC as well? This
> would be the easiest way for me. ;-)

I'm not certain I understand your question but if you want to use the
authenticated user's delegated credentials to then authenticate with
another tier you cannot do that with NTLM. You need Kerberos for that
and the jCIFS filter doesn't do Kerberos.

Mike

-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/