Search code examples
javaactive-directoryjaasactive-directory-group

Authorise a JAAS session by NT Group?


Is it possible to authorise JAAS sessions based on membership of NT Groups?


Solution

  • It looks like it is user level only. http://download.oracle.com/javase/6/docs/technotes/guides/security/jaas/JAASRefGuide.html

    http://download.oracle.com/javase/6/docs/jre/api/security/jaas/spec/com/sun/security/auth/module/LdapLoginModule.html

    (ie administration is via a policy file - not possible to change authorisation based on NT Group.)