Check out
jCIFS.
It's pretty neat. If your
servlet runner supports Servlet Chaining, they give you a servlet that you can chain which will enforce NTLM. So you can code your own servlet without even using the API.
Also, there is an NTLM class in Jakarta Commons HttpUtils. But I think that one works the other way -- you run a client in
Java to access a web site that is already protected with NTLM.