> "Martin Gainty" <mgai...@hotmail.com> wrote in message > news:blu142-w7c108f09ee2529b84ca6eae...@phx.gbl... > > server.xml should contain this JNDIRealm specification defined globally > <Realm className="org.apache.catalina.realm.JNDIRealm" > > <!-- The LDAP Address of your DC --> > connectionURL="ldap://dc1.domain.local:389" > <!-- Account information to access the Directory --> > connectionName="tom...@domain" > connectionPassword="AReallyLongPassword" > > <!-- Where should Tomcat look for users --> > userBase="OU=users,OU=mydomain,DC=DOMAIN,DC=local" > userSearch="(sAMAccountName={0})" > userSubtree="true" > userRoleName="memberOf" > > <!-- Where should tomcat look for groups --> > roleBase="OU=groups,OU=mydomain,DC=DOMAIN,DC=local" > roleSubtree="true" > roleName="cn" > roleSearch="(member={0})" > <!-- Debug Level --> > debug="99" > />
Ironically, although I have seen several examples with debug="99", I found absolutely nothing in the documentation or in the source code that indicates that "debug" does anything at all in the Realm configuration. In fact, according to the docs, it isn't even a valid property. Thanks, Eric --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org