https://issues.apache.org/bugzilla/show_bug.cgi?id=46323

--- Comment #2 from cdauth+issues.apache....@cdauth.de 2010-02-10 02:41:37 UTC 
---
So do I understand this right? This authenticator does not do any
authentication but only receives the user name on the user's computer?

If so, I am against including this in the Tomcat distribution, as people would
probably think that this would provide any security. Instead, we need an
authenticator that authorises against the Active Directory somehow and offers
fallback Basic authentication (like mod_ntlm for Apache does, for example).

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to