windows integrated authentication question

I am writing a JSP application. I have a servlet container (actually a
Websphere application server) running on an IBM iSeries. I have a Windows
machine running IIS as my HTTP server.

I have a web site (folder under "default web site" within web sites). All is
working fine for authentication purposes since this is an internal app and
we are all running IE.

I need to retrieve the user's name (only, not password). I cannot understand
how this information is being sent from the browser in the request so I
cannot figure out how to get the user name information. The help says:

...."is a secure form of authentication because the user name and password
are hashed before being sent across the network. When you enable Integrated
Windows authentication, the user's browser proves its knowledge of the
password through a cryptographic exchange with your Web server, involving
hashing."

I am not knowledgable enough to understand what this means.

I would know how to do this in ASP. But alas, we are not using ASP. Can
anyone point me to a direction to do this with straight up HTML, JSP or a
Java servlet? I would appreciate it.

Thanks

S

"Stephanie Stowe" <stowe RemoveThis @whackthisvsac.org> wrote in message
news:OTG5QjhBEHA.624@TK2MSFTNGP10.phx.gbl...
 > I am writing a JSP application. I have a servlet container (actually a
 > Websphere application server) running on an IBM iSeries. I have a Windows
 > machine running IIS as my HTTP server.
 >
 > I have a web site (folder under "default web site" within web sites). All
is
 > working fine for authentication purposes since this is an internal app and
 > we are all running IE.
 >
 > I need to retrieve the user's name (only, not password). I cannot
understand
 > how this information is being sent from the browser in the request so I
 > cannot figure out how to get the user name information. The help says:
 >
 > ..."is a secure form of authentication because the user name and password
 > are hashed before being sent across the network. When you enable
Integrated
 > Windows authentication, the user's browser proves its knowledge of the
 > password through a cryptographic exchange with your Web server, involving
 > hashing."
 >
 > I am not knowledgable enough to understand what this means.
 >
 > I would know how to do this in ASP. But alas, we are not using ASP. Can
 > anyone point me to a direction to do this with straight up HTML, JSP or a
 > Java servlet? I would appreciate it.

Wish I could help you, but I don't know JSP. I *can* tell you that you
can't do it with plain HTML.

--
Tom Kaminski IIS MVP
<a style='text-decoration: underline;' href="http://www.iistoolshed.com/" target="_blank">http://www.iistoolshed.com/</a> - tools, scripts, and utilities for running IIS
<a style='text-decoration: underline;' href="http://mvp.support.microsoft.com/" target="_blank">http://mvp.support.microsoft.com/</a>
<a style='text-decoration: underline;' href="http://www.microsoft.com/windowsserver2003/community/centers/iis/" target="_blank">http://www.microsoft.com/windowsserver2003/community/centers/iis/</a><!-- ~MESSAGE_AFTER~ -->