Hi,

Take a look at Trusted Association Interceptors (TAI) and JCIFS.
TAI : http://publib.boulder.ibm.com/infoc...tsec_trust.html)
JCIFS : http://jcifs.samba.org/

The first component will help you validate a user profile for the portal (me
aning creating the LTPA SSO Token).

The second component will help you automatically authenticate the user with 
his Windows session name.
Used as a servlet filter, it will authenticate the user if his browser is co
nfigured to consider that your portal is in the Local Intranet zone.
Note that this is a NTLM authentication, that is less secure than a solution
 based on kerberos.

Regards,

Charles Le Gallic
SQLI Toulouse

[ Post a follow-up to this message ]