Reverse proxies

Microsoft IIS

There are three steps to configuring IIS to provide Windows authentication. They are:

Configure IIS as a reverse proxy for Tomcat.

Configure IIS to use Windows authentication

Configure Tomcat to use the authentication user information from IIS by setting the tomcatAuthentication attribute on the AJP connector to false.

Apache httpd

Apache httpd does not support Windows authentication out of the box but there are a number of third-party modules that can be used. These include:

mod_auth_sspi for use on Windows platforms.

mod_auth_ntlm_winbind for non-Windows platforms. Known to work with httpd 2.0.x on 32-bit platforms. Some users have reported stability issues with both httpd 2.2.x builds and 64-bit Linux builds.

There are three steps to configuring httpd to provide Windows authentication. They are:

Configure httpd as a reverse proxy for Tomcat.

Configure httpd to use Windows authentication

Configure Tomcat to use the authentication user information from httpd by setting the tomcatAuthentication attribute on the AJP connector to false.