Help with IIS and JBOSS Authentication.

[lesquivel]

Hello,

I need to have integrated windows authentication working with JBoss for an intranet app.  I have been trying to do this but my userPrincipal attribute from the request is always null.

Please read below for my setup:

We are using jboss-5.1.0.GA-jdk6.  Our web server is IIS7.  The connection between the 2 is working fine as we have an Internet app working.

We need to create an Intranet app.  I have IIS7 Authentication set to Windows authentication for this.  Our organization uses Active Directory for our internal authentication.  Our current intranet app that uses JRun app server, doesn't require anything special to retrieve the userPrincipal attribute in a filter we have setup.

So far, I have not been able to get that attribute.  Can somebody help in how this can be achieved using JBoss and IIS7?  Do I need to setup a login module in JBoss for IIS?  Do I need a login-config attribute in my web.xml?  Any help will be greatly appreciated!

Thank you in advance.

[lesquivel]

UPDATE: 

This is for the benefit of anyone that might encounter a problem like this. 

In the server.xml file under deploy/jbossweb.sar, your AJP Connector must have the tomcatAuthentication attribute set to false.  So add: tomcatAuthentication="false".

That attribute allows all authentication to be done by IIS and it passes the remoteUser information to the application server.