Mailing-List: contact geronimo-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: geronimo-dev@incubator.apache.org
Date: Mon, 1 Dec 2003 15:58:09 -0600
Subject: Re: [security] Authentication mechanism
Content-Type: text/plain; charset=US-ASCII; format=flowed
Mime-Version: 1.0 (Apple Message framework v553)
From: Dain Sundstrom <dain@coredevelopers.net>
To: geronimo-dev@incubator.apache.org
Content-Transfer-Encoding: 7bit
In-Reply-To: <79B184B0417FD41184DB00508BA540B8058C3A6C@corpmail01>
Message-Id: <7374FF61-2449-11D8-81EB-000393DB559A@coredevelopers.net>

On Monday, December 1, 2003, at 03:25 PM, Cabrera, Alan wrote:

> NTLoginModule and SolarisLoginModule are provided by Sun in JDK1.4 as 
> part
> of the JAAS distribution.

I looked at these are they are very disappointing.  All they do is get 
you the username the current java process is running as.  You can not 
get a windows security ticket that the server could then verify.  As 
for Solaris (or any unix) I don't think there is anything like a ticket 
unless the admins are using Kerbos and even then I don't know of anyway 
to get the OS to give you a ticket for the currently logged in user 
(which means they need to type in username and password again).   Maybe 
someone who knows more about unix security can comment on the state of 
single sign on.

-dain

/*************************
  * Dain Sundstrom
  * Partner
  * Core Developers Network
  *************************/