Hello all,
I have Domino and Notes 6.5 configured as an LDAP Directory. I have also configured Domino for LTPA tokens for a domain (operating system domain and NOT Lotus Domain).
If I login as user “A” with password for “A” I get the Server challenge to logon as I expect. If I log on as the user I create the appropriate LTPA token also as expected.
Now comes the problem: I want to create this token for the user within a servlet. Can it be done by doing an LDAP BIND to the Domino server? I have read that it is possible to do this sort of thing in WebSphere, but does anyone know if it is possible when a BIND occurs to a DOMINO LDAP Directory?
If it is not possible is it possible to create an LTPA token programmatically given the username and password for a given domain?
Thanking any response
Rolf Pfotenhauer
Subject: One way to create/validate LTPA token programmatically is via the C API…
STATUS LNPUBLIC SECTokenGenerate() and STATUS LNPUBLIC SECTokenValidate()
From the C-API documentation:
“Use this function to generate an authentication token for interoperability with Domino protocols that support Single Sign-On (IE: HTTP and DIIOP), as well as IBM WebSphere Advanced Server. The return value retmhToken is a MEMHANDLE that references an SSO_TOKEN structure when locked with OSMemoryLock. See SSO_TOKEN for more information.”
Also, check the designer help db for “Securing JSP tag access to Domino data” to get addtl. info on how to use SSO with IIOP or websphere…
Subject: RE: One way to create/validate LTPA token programmatically is via the C API…
Thanks for your answer. I was trying to avoid the C API.
Is there a Java equivalent?
Regards
Rolf Pfotenhauer
Subject: RE: One way to create/validate LTPA token programmatically is via the C API…
Hi Thomas,
I have SSO logging verbose switched on so I can see that the commands that you specify are being used.
Is it possible to call these functions from a Java servlet?
Regards
Rolf Pfotenhauer
Subject: Potentially via JNI (Java native Interface to C)