So I have SPNEGO working and I want to use the JNDI realm for authorisation.
I have this configured :- <Realm className="org.apache.catalina.realm.JNDIRealm" connectionURL="ldap://win-dc01.kerbtest.local:389" userBase="ou=Users,dc=kerbtest,dc=local" userSearch="(uid={0})" userRoleName="memberOf" roleBase="ou=Users,dc=kerbtest,dc=local" roleName="cn" roleSearch="(uniqueMember={0})"/> I would like to use AD groups to control authorisation in my application. However currently it appears the tomcat-users is being used :- <user username="test" password="testpass" roles="manager-gui"/> How do I configure tomcat Manager web app to use the realm and ignore the users file ? Alternatively is there other example code I can use with the JNDI realm ? many thanks David --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org