Retrieve current Windows user in Java EE web application for Single Sign On purposes

Question

I am doing a Java EE web application that requires Single Sign On with Active Directory.

The application will no longer prompt for a username and password. The authentication process would require retrieval of the current Windows logged on user. Once I have the user, I need to query Active Directory to get the roles for that logged on user. I am aware that this will exclude non-Windows users, but this is an internal application and all clients are using Windows.

I have to implement the SSO in 2 Java EE web applications. 1 application is runnning on GlassFish v2.1.1 (JDK 1.6) and the other is running on Tomcat (JDK 1.5).

Basically my main problem is how to retrieve the current Windows logged on user.

I've already come across JAAS and Kerberos. Kindly correct me if I'm wrong. My understanding is that these are authentication protocol and they do not have the feature to retrieve the current windows logged on user.

I've already tried the following but I am always getting null or Server's own username.

1. System.getProperty("user.name");
2. new com.sun.security.auth.module.NTSystem().getName();
3. request.getUserPrincipal().getName();
4. System.getenv("USERNAME");
5. JCIF NTLM HTTP Authentication in Tomcat
6. LoginContext

I am open to any suggestions.

Answer 1

WAFFLE is a great solution for this. It does not need Kerberos configuration.