>>> On 25/08/2008 at 16:32, in message <[log in to unmask]>, "Williams, John" <[log in to unmask]> wrote: > Andy, > This is the extract from our server.xml that authenticates to AD, the global > catalog connector: > > <Realm className="org.apache.catalina.realm.JNDIRealm" > connectionURL="ldap://gc.campus.aston.ac.uk:3268" Thanks John, That's useful to see the use of port 3268, I just found reference to it at http://www.jspwiki.org/wiki/ActiveDirectoryIntegration and also to referrals="follow" at http://wiki.apache.org/tomcat/JNDI_HowTo I think both may be important! > > Can't you set returningAttributes in the JNDIDirectoryDataConnector to limit > the attributes returned, we don't use it now as we don't have a problem > returning all attributes. Thanks, I'm checking that out now. Cheers Andy The University of Dundee is a registered Scottish charity, No: SC015096