Tomcat and Active Directory

[Tom Henricksen]

I hope to get Tomcat to use Active Directory. I am using tomcat 5.5.9. I have a simple application that uses form authentication. I have the login.jsp with form submitting to j_secuity_check. I tested this using the tomcat-user.xml. And now I want to add in Active Directory. I have tried adding in this realm to the server.xml

    
<Realm   className="org.apache.catalina.realm.JNDIRealm" debug="99"
          connectionName="cn=Manager,dc=company,dc=com"
      connectionPassword="secret"
           connectionURL="ldap://dc01:389"
            userPassword="userPassword"
             userPattern="uid={0},ou=people,dc=company,dc=com"
                roleBase="ou=groups,dc=company,dc=com"
                roleName="cn"
              roleSearch="(uniqueMember={0})"
/>

Is this look correct? I am getting this exception:

javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr:
DSID-0C09030B, comment: AcceptSecurityContext error, data 525, v893 ]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:2988)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2934)

Does anyone have a working entry I could see or any guidance? In the documentation it says I need a jar, I wouldn't think Microsoft would make a jar for us Java people

Thanks,
Tom

[Tom Henricksen]

I chnaged the server.xml to this and it started without error. I presume I need to comment out this first part to add the new realm?

    
<!--Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase"/ -->
      <Realm   className="org.apache.catalina.realm.JNDIRealm" debug="99"
                  connectionURL="ldap://dc01:389"
                    userPattern="uid={0},ou=people,dc=company,dc=com"
                       roleBase="ou=groups,dc=company,dc=com"
                       roleName="cn"
                     roleSearch="(uniqueMember={0})"
/>

When I tried to authenticate though I was still going against the tomcat users file I have. Is there another piece in the server.xml that needs to be commented out?
Thanks,
Tom

[Tom Henricksen]

Has anyone used tomcat with any other LDAP provider? What entries did you put in the server.xml?

Thanks,
Tom