Develop Reference

How to authenticate to sql server as Windows User from java application? [duplicate]

I am currently investigating how to make a connection to a SQL Server database from my Java EE web application using Windows Authentication instead of SQL Server authentication. I am running this app off of Tomcat 6.0, and am utilizing the Microsoft JDBC driver. My connection properties file looks as follows:
dbDriver = com.microsoft.sqlserver.jdbc.SQLServerDriver
dbUser = user
dbPass = password
dbServer = localhost:1433;databaseName=testDb
dbUrl = jdbc:sqlserver://localhost:1433
I have zero problems with connecting to a SQL Server database in this fashion when using SQL Server authentication.
Is there any way I can retrieve the credentials of the user's Windows Authentication and use that authentication for SQL Server?
UPDATE: I know in ASP.net there is a way to set up Windows Authentication for access to the webapp, which is exactly what I am looking for, except I want to pass that token off to SQL Server for access to the database.

I do not think one can push the user credentials from the browser to the database (and does it makes sense ? I think not)
But if you want to use the credentials of the user running Tomcat to connect to SQL Server then you can use Microsoft's JDBC Driver.
Just build your JDBC URL like this:
jdbc:sqlserver://localhost;integratedSecurity=true;
And copy the appropriate DLL to Tomcat's bin directory (sqljdbc_auth.dll provided with the driver)
MSDN > Connecting to SQL Server with the JDBC Driver > Building the Connection URL

look at
http://jtds.sourceforge.net/faq.html#driverImplementation
What is the URL format used by jTDS?
The URL format for jTDS is:
jdbc:jtds:<server_type>://<server>[:<port>][/<database>][;<property>=<value>[;...]]
...
domain
Specifies the Windows domain to authenticate in. If present and the user name and password are provided, jTDS uses Windows (NTLM) authentication instead of the usual SQL Server authentication (i.e. the user and password provided are the domain user and password). This allows non-Windows clients to log in to servers which are only configured to accept Windows authentication.
If the domain parameter is present but no user name and password are provided, jTDS uses its native Single-Sign-On library and logs in with the logged Windows user's credentials (for this to work one would obviously need to be on Windows, logged into a domain, and also have the SSO library installed -- consult README.SSO in the distribution on how to do this).

This actually works for me:
Per the README.SSO that comes with the jtdsd distribution:
In order for Single Sign On to work, jTDS must be able to load the native SPPI library ntlmauth.dll. Place this DLL anywhere in the system path (defined by the PATH system variable) and you're all set.
I placed it in my jre/bin folder
I configured a port dedicated the sql server instance (2302) to alleviate the need for an instance name - just something I do. lportal is my database name.
jdbc.default.url=jdbc:jtds:sqlserver://192.168.0.147:2302/lportal;useNTLMv2=true;domain=mydomain.local

Unless you have some really compelling reason not to, I suggest ditching the MS JDBC driver.
Instead, use the jtds jdbc driver. Read the README.SSO file in the jtds distribution on how to configure for single-sign-on (native authentication) and where to put the native DLL to ensure it can be loaded by the JVM.

I was having issue with connecting to MS SQL 2005 using Windows Authentication. I was able to solve the issue with help from this and other forums. Here is what I did:
Install the JTDS driver
Do not use the "domain= " property in the jdbc:jtds:://[:][/][;=[;...]] string
Install the ntlmauth.dll in c:\windows\system32 directory (registration of the dll was not required) on the web server machine.
Change the logon identity for the Apache Tomcat service to a domain User with access to the SQL database server (it was not necessary for the user to have access to the dbo.master).
My environment:
Windows XP clinet hosting Apache Tomcat 6 with MS SQL 2005 backend on Windows 2003

Can't login to Jenkins behind Kerberos

I have kerberos setup on a series of machines and cannot login to a default deployment of Jenkins. My backend configuration looks like the following:
firewall.local (CentOS 7)
apache.local (CentOS 7)
tomcat.local (CentOS 7, Tomcat 7, Oracle JDK 7)
firewall.local forwards requests on 80 to apache.local. apache.local has AJP setup to tomcat.local
All webapp's work fine. I have them protected by a kerberos login being surfaced by apache.
The problem is when I try to hit firewall.local/jenkins (internally this ends up being routed all the way to tomcat.local:8009/jenkins). I get a dialog asking for my username and password for Kerberos. This works. Then I'm prompted with a dialog box for Jenkins.
I've tried several kerberos and non-kerberos combinations and they always fail resulting in continus prompts for user names and passwords.
Is there a default username and password for Jenkins? Is there something I might be missing?

I didn't know that Jenkins setup has changed. I had to first go through the wizard which first asked for a password located at
/opt/tomcat/.jenkins/secrets/initialAdminPassword
After the wizard compelted and setup my user I was able to login.

Window Login credentials

I want windows login credentials or windows login username using java.
I have done this
com.sun.security.auth.module.NTSystem NTSystem = new com.sun.security.auth.module.NTSystem();
System.out.println(NTSystem.getName());
Ex:- Jboss Server is in my system and when i run application is my system its showing my system username and if i run same application in jboss using another system then it is showing same my system username not another user name... how can i achieve this

How can I change the password used in netbeans to deploy an app to google app engine?

Deployment of a Java application to Google App Engine from Netbeans 7.4 was rejected with the error message:
com.google.appengine.tools.admin.AdminException:
Unable to update app:
Use an application-specific password instead of your regular account password.
See http://www.google.com/support/accounts/bin/answer.py?answer=185833
... etc
I created an application-specific password... as explained in the link provided in the error message.
BUT I cannot find an option to change/replace the password I entered when Netbeans first prompted me for one when I began the application deployment process. :/

Problem solved...
I changed my regular account password and then re-ran the Netbeans "deploy to Google App Engine" function.
The error message changed - to indicate the password was wrong - and then provided a prompt with which to enter a new password.
I then entered an application specific password...
The deployment function then proceeded successfully.
It would be a good thing if Netbeans displayed the prompt for entering a new password when it gave the first error message: "Unable to update app: Use an application-specific password ..."

Java - Access file with user authentication

I have a server where I work with a database and files using a java app.
When I start my app I give a report regarding file access to the server using:
public static boolean folderExists(String folderPath) {
File folderToCheck = new File(folderPath);
return folderToCheck.exists();
}
Every time I start my app (after a fresh restart of my computer)
I get a false response, even though the server is on.
The reason is because I must give an authentication as another user.
What I do is access the server through Windows
where I am being asked for username/password,
and after that I get a true response regarding file access to the server.
Is there a way to give the authentication username/password through Java,
and not through Windows?
Thank you

On Windows 'native' Java IO (e.g. java.io.File) always inherits the security context of the user running the JVM process. For example, you could run the Java app as a Windows service with the correct credentials.
The JCIFS project implements CIFS (the Windows SMB file server protocol) and allows you to directly specify the username/password.
See the API for examples.

I am pretty sure, that there is no way to grant fileaccess by java, without a Windows-Call.
You can call cacls file.log /e /t /p Everyone:f but this will be language-dependent.
I had a similar problem: How to change the file ACL in windows, if I only know the SID?
With Java7 there may be a way to do this.