I’d like to setup Tomcat on Windows and have authentication in my web application be done against the Windows users (or a subset of those users). I read that if you have users setup on Active Directory, you can use the JNDI realm.
What if you don’t have Active Directory, but just have ‘simple Windows users’ setup on the server? Is it possible to setup a Tomcat realm to authenticate against those, or would I have to implement a realm that does this?
How about using the JAAS realm? The realm documentation refers to a ‘JAAS Realm (org.apache.catalina.realm.JAASRealm).’ JAAS is the Java Authentication and Authorization Service, which allows pluggable authentication modules. One of the default modules is NTLoginModule, which sounds like it would do what you need.