[chausberger]

I found it. I blame Windows!
My Windows username is "Hausberger", but I can also login into Windows with all lowercase and so I thought this must be the right principal name.

I had no idea that Windows is not case sensitive here.

thanks again for all your help and your work in JBoss Negotiation. It's an awesome tool.

Claus

[chausberger]

another question:
Currently our systems works like this:
We set an apache in front of JBoss and use Basic authentification. If the users goes straight to the JBoss Webserver without going over Apache, a login formular is presentet.

To check this, the software checks the HTTP header if Basis authentification was done and if not presents the login formular.

We now plan to to the same with SPNEGO. That is, if SPNEGO works, no login formular will be shown. If SPNEGO fails or is not available, the login formular should be shown.

Is there a way to check in the HTTP Header if SPNEGO was successful or done at all?

Claus

[dlofthouse]

Claus,

This sounds like a new issue, we do have an outstanding Jira issue to work on combining the SPNEGO authenticator with other authentication mechanisms so it might be worth starting a new thread on this as it is quite likely that your scenario could feed into the requirements for that part of the work,

Are you talking about this authentication being completely handled by JBoss?

I am thinking about something that would allow different authenticators to be provided in an ordered list but one think I need to look at in this case is that the web browser is likely to prompt for a username and password anyway and fall back to NTLM instead of SPNEGO so maybe that is the capability I need to add.

[chausberger]

I open another thread for this.

Claus