I'm trying to use JNDI Realm for the first time and I think I'm pretty close. It allows me to login, authenticating me to our LDAP server, but then I am denied access because it thinks I don't have the right roles. I don't know whether my role search is configured improperly or whether I'm specifying the role incorrectly or what.
Presumably the thing to do would be to check the log to see what sort of problem it has encountered, but I'm unable to figure out how to enable logging of JNDI Realm messages.
In my webapp's context.xml, I have:
Every example I've seen has that 'debug="99"', but I've never seen an explanation of what it actually does. Does that turn on debug log message? Or turn them off? I've tried changing it to other values (1 and 0), but have seen no change in behavior.
My log4j.properties file looks like this:
Do I need to add/change a line in there to enable logging of JNDI Realm messages?