Forgive me for shameless advertising. This should be useful to lots of people.
We've published a free Tomcat 6 Negotiate authenticator based on JNA that supports the Negotiate protocol, including Kerberos and the much requested NTLM. This is equivalent to checking the Integrated Authentication box in IIS, enabling single sign-on for windows servers that are both joined or not to an Active Directory domain. The authenticator is part of project Waffle. Tutorial: http://code.dblock.org/ShowPost.aspx?id=103 Download Waffle: http://waffle.codeplex.com/ Hope this helps, your feedback is much appreciated, -dB. dB. @ dblock.org<http://www.dblock.org/> Moscow|Geneva|Seattle|New York