Windows 2000 Authentication

Question

Hi. I've tested the sample JAAS authentication code below and it works. I have two questions: 1) How do I modify this to authenticate a Windows 2000 user and 2) how do I get it to run as a Java Servlet? Thanks for any suggestions.
Using:
java -Djava.security.auth.login.config==jaas.config JAASSampleApp testuser sasquatch
jaas.config:
Sample {
PasswordLoginModule required;
import javax.security.auth.*;
import javax.security.auth.login.*;
import java.security.*;
public class JAASSampleApp extends Object {
     public static void main(String[] args)
     throws Exception {
          if (args.length != 2) {
               System.err.println
                    ("Usage: java JAASSampleApp username password");
               System.exit(1);
          String username = args[0];
          char[] password = args[1].toCharArray();
          LoginContext loginContext = new LoginContext(
               "Sample", new UsernamePasswordCallbackHandler
                    (username, password));
          loginContext.login();
          // Now we're logged in, so we can get the current subject.
          Subject subject = loginContext.getSubject();
          // Display the subject
          System.out.println(subject);

Answer 1

User Authentification in servlets has 2 purposes:
1) You want to be shure that the incoming user is a "true" one (user-password verification)
2) You want to use the user's object authorities inside of your servlet.
So, if you want to do the user-password verification, you have to do it youself - you have to write some JAVA class with a native method (the DLL, that was menthioned in Reply from nort_de). Inside of this DLL you have to do the user-password verification, for example, throw the LogonUser function from Windows SDK. You can do it without any using of JAAS.
If you want to use the user's object authorities inside of your JAVA code, you have to use JAAS.
Regards,
Oleg