Two guesses:

* Did you try using the IP-address instead or use the FQDN for
connectionURL, maybe there's something wrong w/ DNS?

* Try w/o MD5 and see if it works then.

>   roleSubtree="True"

typo - or shouldn't this be "true"

I guess you already found the documentation here:
http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html#JNDIRealm

HTH,
    Yann

> BTW: I am using 4.1.27 on Windows 2000 and we're
> trying to connect to a Windows 2003 AD. Has this
> changed at all?
>
> here is the error trace:
>
> Catalina.start: LifecycleException:  Exception opening
> directory server connecti
> on:  javax.naming.CommunicationException:
> localhost:389 [Root exception is java.
> net.ConnectException: Connection refused: connect]
> LifecycleException:  Exception opening directory
> server connection:  javax.namin
> g.CommunicationException: localhost:389 [Root
> exception is java.net.ConnectExcep
> tion: Connection refused: connect]
>
> It keeps saying localhost:389 and I clearly don't have
> it in the Realm. Here is my setup.
>
> <Realm className="org.apache.catalina.realm.JNDIRealm"
>   debug="99"
>   connectionName="cn=TomcatRole,dc=vo,dc=net"
>   connectionPassword="*******"
>   connectionURL="ldap://orlmsdc001:389";
>   digest="MD5"
>   roleBase="dc=roles,dc=vo,dc=net"
>   roleName="cn"
>   roleSearch="(uniqueMember={0})"
>   roleSubtree="True"
>   userPassword="*******"
>   userPattern="cn={0},dc=vacationsonly,dc=net"  />
>
>
>
> --- Matt Fury <[EMAIL PROTECTED]> wrote:
> > Hi All,
> >
> > I've been trying for several weeks to compile
> > information on Tomcat and Active Directory through
> > LDAP. I can't quite get all the information I need
> > and
> > I am hoping someone has a link to what needs to be
> > done. I want to use the Realms in Tomcat but I can't
> > seem to connect properly. For some reason it seems
> > to
> > keep trying to connect to localhost even though its
> > not specified.
> >
> > Also, does SSL NEED to be implemented in order to
> > get
> > this to work? I will be doing AD connectivity
> > through
> > LAN only.
> >
> > Thanks.
> >
> > -Matt
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> > [EMAIL PROTECTED]
> > For additional commands, e-mail:
> > [EMAIL PROTECTED]
> >




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to