Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jetty-dev] Jetty SPNEGO not supported for localhost, how to know the user?

I don't know of a way for SPNEGO to help you out here, it is pretty clear in its limitations, at least when I looked last.  This might be more of a Windows question since it is hard to guarantee something like that.  I suspect you are looking at a custom authenticator/login mechanism leveraging AD or something, perhaps the LdapAuthenticator would give you what you need but it isn't going to give you transparent authn like I think you are shooting for.


jesse mcconnell

On Wed, Nov 16, 2016 at 6:01 AM, Houtman, Roland <Roland.Houtman@xxxxxxxxxxxxxxx> wrote:

Dear Jetty-dev,


We’re using Jetty 9.0.3 and set it up for spnego.

The client application is a .NET plugin in Excel.


We require spnego being performed on the localhost as well, because then we can safely obtain the desktop username from the servletRequest.

Since spnego is not supported for localhost(afaik), how then can we guarantee the provided username is authentic?


Kind regards,



jetty-dev mailing list
To change your delivery options, retrieve your password, or unsubscribe from this list, visit

Back to the top