Apache + Mod_Auth_NTLM_Mod + Samba + Tomcat
 

So what I want to do is have SSO in a servlet.

I had it sort of working - Apache was successfully setting the REMOTE_USER environment variable.

I reset the VM, though, and now it's stopped working. BUT winbind -u, -g, -n, and net ads testjoin reports that the Join is OK. And I've chown 750 /var/run/samba/winbindd_privileged . And added www-data to the winbindd_priv group.

What the bejeezus is wrong?

And is there an easier way to get the remote user to tomcat - I've tried using JCIFs - that's not /bad/, but we're moving to vista - which I think uses NTLMv2, which JCIFS does not support.

Here's my Apache security

<Directory />
Options FollowSymLinks Multiviews Indexes
AllowOverride All
AuthName "Authentication"
NTLMAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
NTLMBasicAuthoritative on
AuthType NTLM
require valid-user
</Directory>

I'm not using HTTPS, only HTTP

I think we're using server 200..8. But it might be 2003.

EDIT: I'm not sure if this is a network or a linux - server problem.