> LDAP authentication with a bind is supported in the JNDIRealm included with > Tomcat 4.1
John, thanks for the info. I tested tomcat 4.1.12 and noticed that HttpServletRequest.getUserPrincipal() returns a not-null object even if there has been absolutely no auth (new browser instance, no cookies, ...). If I extend the auth-test in BasicAuthenticator.authenticate it works: --- if (principal != null && !principal.getName().equals("")) { --- -- Dipl. Inf. Carsten Burghardt Login & Solutions AG email: [EMAIL PROTECTED] Tel: 0821/2488-311 Fax: 0821/2488-180 -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>