Hi,
When I configure this, it does not bind with the user (checked with
wireshark on the ad server)
(only when I use userPattern, but I cannot seem to use that as it needs a
user for both bind and search)
I don't want to have a username/password of a delegated user)
Realm className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://x.1.1.22:389"
userSearch="userPrincipalName={0}"
userBase="cn=Users,dc=mydomain,dc=lab"
userSubtree="true"
userRoleName="memberOf"
userSearchAsUser="true"
/>