With that lead, I figured out what was going on.
Two issues:
- referrals="follow" is required if you search from the top of an ldap tree
instead of a specific OU. That property is not documented in Tomcat docs as
it might be:
http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html#JNDIRealm
Wit
I'm trying to get a JNDI Realm working as one might expect with Active
Directory.
Tomcat 5.5.20
Java 1.5.06
Windows 2000 Server
The basic issue is that searching from a domain root "dc=company,dc=com" and
using userSubtree="true" results in:
Oct 31, 2006 3:18:20 PM org.apache.catalina.realm.JNDI