Java EE (Java Enterprise Edition) General Discussion

Has anybody ever figured this out? I've been searching Google for a week and haven't turned up anything. The only way I can get NTLM to work is if I set Tomcat's service user to a domain account and using the Authenticator class (At this point not really sure if the Authenticator is working correctly. Might just be using Tomcat's credentials rather than what I sent through the Authenticator. Need to do more testing.). Our client doesn't see setting the Tomcat service user as a viable solution as well. Without setting the Tomcat service user I'm seeing the 403 HTTP code.