eborisow wrote:

mgainty wrote:
NAMES: You cannot change to any names unknown to your (NTLM)
authentication
algorithm
http://tomcat.apache.org/tomcat-5.5-doc/catalina/docs/api/org/apache/catalin
a/realm/RealmBase.html#authenticate(java.lang.String,%20java.lang.String)

Martin


Martin,

Thanks for the reply.  So, does what I'm thinking sound do-able?  I want to
use NTLM authentication which is returning:

DOMAIN\username

but, then I want to check to see if that user is in a role (group) from
LDAP.  The format for that user is something like:

Group dn: cn=manager,ou=groups,dc=mycompany,dc=com
member: cn=username,ou=people,dc=mycompany,dc=com

So, I want to go from my user autheticated as DOMAIN\username to finding out
if that user is contained in my LDAP group.  Does that sound possible?
I guess I misunderstood your objective. You are not interested in manipulating the user name.
You just want to check if the stripped user name is in a specific role?

--
Regards

Gabe Wong
NGASI AppServer Manager
JAVA AUTOMATION and SaaS Enablement
<a href=http://www.ngasi.com>http://www.ngasi.com</a>
NEW! 8.0 - Centrally manage multiple physical servers


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to