I’m looking to authenticate with a Domino server using some non-Domino based JSP pages. Also, when the user authenticates, I need to be able to determine what roles he/she has for a particular database and what group memberships they have in the NAB. Is this possible?
Thanks in advance.
Subject: JAAS and Domino?
Assuming that the jsp pages are running on something other than WebSphere… since you are given the username and password you can attempt to create a session to the domino server via diiop, check if the session is valid, then set the authentication cookie in the browser (ltpatoken) if successful. In addition to using domino for authentication (which could also be done using ldap), it will allow for the db operations you need. This token can then be reused for subsequent backend connections to domino or http connections directly to domino - without the need to reauthenticate (assuming all servers are in the same dns domain, and if domino is accessible via http)
very rough code:
Session ses = NotesFactory.createSession(dominoservername, username, password);
String token = ses.getSessionToken(); //obtains the ltpatoken
Cookie cookie = new Cookie(“LtpaToken”, token);
response.addCookie(cookie); //send the ltpatoken cookie to the browser
search the help for “roles property” for sample code on how to obtain what roles the user has for a given db.