Authenticating Windows users in Java server
.net, authentication, java
Solution
The approach is the right one. Notice a number of things, though:
- this will have nothing to do with "Basic Authentication" (in http)
- .NET will try to use the SPNEGO GSS mechanism. See the Sun documentation for proper support of this mechanism.
- your service will need to incarnate a service principal. So you need to create an Active Directory account not only for the user, but also for the service, and you need to put the service's password into the Java keytab.
Problem
I'm working on a server written in Java, and a client (a desktop application written in .Net) that runs on Windows machines on the same network. I would like to have some basic authentication so that the server can determine the username of the user running the client, without needing the user to re-enter their Windows password in the client. Is this possible, and what's the simplest way to accomplish it? I had a look at some of the available APIs, it looks as though the org.ietf.jgss package in Java, and NegotiateStream class in .Net, should probably be able to talk to one another to achieve this - but I keep hitting frustrating error messages I don't understand. I thought I'd check if this is the right approach, if so I'll post a separate question with more detail about the errors in question :)