Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Enable drop-in Windows Single Sign On for popular Java web servers.

Merge pull request #197 from hazendaz/master

Maintainance and Unit test library change
latest commit 4382b6a953
Daniel Doubrovkine (dB.) @dblockdotorg authored

README.md

WAFFLE - Windows Authentication Framework

Build Status Coverity Scan Build Status Coverage Status Maven central Eclipse

waffle

WAFFLE is a native Windows Authentication Framework consisting of two C# and Java libraries that perform functions related to Windows authentication, supporting Negotiate, NTLM and Kerberos. Waffle also includes libraries that enable drop-in Windows Single Sign On for popular Java web servers, when running on Windows. While Waffle makes it ridiculously easy to do Windows Authentication in Java, on Windows, Waffle does not work on *nix.

Unlike many other implementations Waffle on Windows does not require any server-side Kerberos keytab setup, it's a drop-in solution. You can see it in action in this slightly blurry video produced for TeamShatter.com.

Essentials

Legacy 1.7.x Branch

Waffle will soon see legacy support for various integrations removed. From 1/3/2015 through 1/1/2016 we will continue to support the 1.7.x branch for any bug fixes to legacy items.

Legacy is defined as...

  • Spring 2
  • Tomcat 5

and possiblity of...

  • Servlet 2.5
  • Java 6

More to come on this in the near future. Stay tuned...

Documentation

There're several semi-independent parts to Waffle. Choose the appropriate HowTo.

  • Simple native interfaces in C# and Java to do all things Windows authentication. Useful if you're building a custom client that requires Windows authentication. See Getting Started with WAFFLE API
  • A generic Servlet Negotiate (NTLM and Kerberos) Security Filter that can be used with many web servers, including Tomcat, Jetty and WebSphere. See HowTo.
  • A Tomcat Negotiate (NTLM and Kerberos) Authenticator Valve, built for the Tomcat Web Container. See HowTo.
  • A Tomcat Single Sign-On + Form Authentication Mixed Valve, built for the Tomcat Web Container and allowing users to choose whether to do form authentication (a username and password sent to the server from a form) or Windows SSO (NTLM or Kerberos). See HowTo.
  • A Spring-Security Negotiate (NTLM and Kerberos) Filter. See HowTo.
  • A Spring-Security Windows Authentication Manager. See HowTo.
  • A JAAS Login Module, useful when extending a custom Java client that already implements JAAS to support Windows SSO. See HowTo.

Waffle was created and is sponsored by Application Security Inc.. For a long story, read the Project History. Also, feel free to use this PowerPoint presentation from NYJavaSIG to talk about Waffle.

Features

  • Account lookup locally and in Active Directory via Win32 API with zero configuration.
  • Enumerating Active Directory domains and domain information.
  • Returns computer domain / workgroup join information.
  • Supports logon for local and domain users returning consistent fully qualified names, identity (SIDs), local and domain groups, including nested.
  • Supports all functions required for implementing server-side single-signon with Negotiate and NTLM and various implementations for Java web servers.
  • Supports Windows Identity impersonation.
  • Includes a Windows Installer Merge Module for distribution of C# binaries.

Related and Similar Products

Contributing

Sonar Results

Current status of sonar results for Waffle.

sonar-results

License and Copyright

Copyright (c) Application Security Inc., 2010-2014 and Contributors.

This project is licensed under the Eclipse Public License.

Project maintained by Daniel Doubrovkine & Jeremy Landis.

Something went wrong with that request. Please try again.