hi all,

I have a portal application where i want to use ntlm authentication to authenticate and later authorize the user based on roles defined in jbp_role_membership table. The user details are available in jbp_users table and roles are defined in jbp_roles table.

I am using jcifs-1.2.6 .jar. and my web.xml is configured as


<filter-name>NTLM HTTP Authentication Filter</filter-name>
<filter-class>jcifs.http.NtlmHttpFilter</filter-class>
<init-param>
<param-name>jcifs.http.domainController</param-name>
<param-value>dchyd1.hyd.myorganisation.com</param-value>
</init-param>
<init-param>
<param-name>jcifs.util.loglevel</param-name>
<param-value>8</param-value>
</init-param>



<filter-mapping>
<filter-name>NTLM HTTP Authentication Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>



i have commented out form based authentication (inorder to skip JAAS authentication)
also i have commented all security constraints. in web.xml

I have synchronized the jbp_users,jbp_role and jbp_role_membership table seperately.

The problem i have come across is that the user is able to login in automatically (without having to enter his login name and password) -i.e. remote user and principal is being set. but user role is not being read by the portal application.

Can any one tell me what might be the possible reason for this. what can be done so that the application can read the user role.


thanks