[jboss-user] [JBoss Portal] - JBoss Portal and Kerberos Authentication with Form-Based Fal

[david.hoffman]

I am using Portal 2.6-GA-bundled.  I have been tasked with creating an Authentication Module which is capable of ATTEMPTING to authenticate the user silently using Kerberos to an ADS server.  Upon success, I am to let the user pass on into the portal.  If unsuccessful, I am to present the standard login form and prompt the user for username and password.

Can someone confirm if this is even possible? If it is possible, can someone point me in the direction of how to pull this off.  

I would even be appreciative if someone would point me towards a simple web-app example that would use kerberos to attemp authentication and fall back to form-based auth, I would be able to take it to the next step. 

Thus far all I have been able to do is get a Basic Auth popup using JCIFS which is not acceptable due to security concerns of basic auth and a poor user experience.  

Thank you in advance for any assistance in this matter.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4060928#4060928

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4060928