From: <glassfish_at_javadesktop.org>
Date: Wed, 24 Sep 2008 14:47:02 PDT

you are correct that the issue is how to get the collected creds to the servlet container, and then how to inject some code in the servlet container, that will validate them, and assign the corresponding identity to the servlet invocation.

The preferred way to do this in Glassfish, is to write a Server Authentication Module or SAM. You can see a description of how to do this at

http://blogs.sun.com/enterprisetechtips/entry/adding_authentication_mechanisms_to_the

and you can find an open source project that developed a SPNEGO SAM for use it Glassfish at

https://spnego.dev.java.net/

Ron
[Message sent by forum member 'monzillo' (monzillo)]

http://forums.java.net/jive/thread.jspa?messageID=301390