General LDAP Question

[Stefan Müller]

Hi,
I've been using Active Directory LDAP for a while and there is still a question which is unanswered for me.

On one hand, every user has a DN like cn=Paul,ou=Department,o=company. On the other hand, when I authenticate a user, I use a line like

env.put(Context.SECURITY_PRINCIPAL, user + "@" + domain);

How does LDAP map the user@domain to the actual user's DN?

The specific problem is that I have to integrate LDAP servers with different schemas from time to time and I'm usually struggeling to get the login to work. In this case it's a Novell eDirectory and I can already login anonymously and browse the directory. But the authentication of a specific user fails. It comes back to the question above - what does the SECURTY_PRINCIPAL value need to look like for the login?

Thanks,
Stefan