title: Single Sign On using NTLMv1 or NTLMv2 or kerberos to a Spring webapp on tomcat on linux
body: <p>We make an appliance with a spring web interface running on Tomcat on Centos Linux.</p>
  
  <p>I'm investigating how we users can connect with out entering a username/password, but instead use windows authentication over http (aka SPNEGO). </p>
  
  <p>as available options mentioned in other SO questions I'm seeing:</p>
  
  <ul>
  <li>NTLMv1 but not NTLMv2 via <a href="http://jcifs.samba.org/src/docs/faq.html" rel="nofollow">JCIFS</a></li>
  <li>NTLMv1+NTLMv2+kerberos via <a href="http://waffle.codeplex.com/" rel="nofollow">Waffle</a> but only for windows :(</li>
  <li>Kerberos only via <a href="http://blog.springsource.com/2009/09/28/spring-security-kerberos/" rel="nofollow">"Spring Security Kerberos Extension"</a></li>
  </ul>
  
  <p>none of which sounds like a reliable all around SSO option for tomcat on Centos.
  also much of the information on these projects is over a year old so it's hard to know if these limits still apply.</p>
  
  <p>What is a viable option for SSO on linux these days? </p>