I'm trying to get a JNDI Realm working as one might expect with Active
Directory.

Tomcat 5.5.20
Java 1.5.06
Windows 2000 Server

The basic issue is that searching from a domain root "dc=company,dc=com" and
using userSubtree="true" results in:

Oct 31, 2006 3:18:20 PM org.apache.catalina.realm.JNDIRealm authenticate
SEVERE: Exception performing authentication
javax.naming.PartialResultException: Unprocessed Continuation Reference(s);
remaining name 'dc=company,dc=com'

If I use a more specific search base of "ou=Employees,dc=company,dc=com" and
then the userSubtree is irrelevant, it works fine.

Problem is our AD structure demands that users be in two different OU's and
thus the search must be done from the root. I understand that AD does not
handle referrals as expected and that could be contributing.

A related ref here:
http://forum.java.sun.com/thread.jspa?threadID=386553&messageID=1677974
And here:
http://marc.theaimsgroup.com/?l=tomcat-dev&m=110080212903359&w=2

a post on the first thread by "jainee" offers that possibly using
NamingEnumeration.hasMoreElements() and NamingEnumeration.nextElement()

Instead of 
NamingEnumeration.hasMore() and NamingEnumeration.next()

in the JNDIRealm.java class fixes the problem.

Is this a bug? Anyone have pointers on a solution through configuration?


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to