Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (herse.apache.org: local policy)
Message-ID: <4548F8A0.4010005@industria.be>
Date: Wed, 01 Nov 2006 20:42:24 +0100
From: Velpi <velpi@industria.be>
Organization: studentenvereniging Industria vzw
User-Agent: Thunderbird 1.5.0.7 (Windows/20060909)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: JNDI Realm and Active Directory root search
References: <C16E4268.9601B%mwarren@hnw.com>
In-Reply-To: <C16E4268.9601B%mwarren@hnw.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

> When searching LDAP from the root,  you will get a referral reply from AD
> that has a server DNS name of JUST the domain name (ie company.com). NOT the
> initial server name you used in your connectionURL.

one small remark:
"company.com" in your post is what you chose as root object for your AD 
when you installed it. I guess this is one of the reasons why MS tells 
you to give the machine an FQDN *before* upgrading it to a domain 
controller. I've already seen a few variations from people that do not 
use their AD for DNS (eg company.local etc).

Good job ;).


Have you tried setting referrals="ignore"? I would think this would mean 
"don't bother about referrals", but in my last attempt that didn't solve 
things. What's the result in your case?


-- Velpi

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org