Use the information in this page to help troubleshoot LDAP issues.
References
- https://tomcat.apache.org/tomcat-7.0-doc/realm-howto.html#JNDIRealm
- https://wiki.apache.org/tomcat/JNDI_HowTo
- https://www.ibm.com/support/knowledgecenter/SSZH4A_6.0.0/com.ibm.worklight.help.doc/appcenter/r_ac_tom_ldap.html
Debugging
The application server's realm log level may be set to a finer level by adding debug="99" to Realm XML element.
Common issues
Referrals
You might get the following error message:
An exception performing authentication javax.naming.PartialResultException: Unprocessed Continuation Reference(s); remaining name 'DC=XX,DC=XX,DC=XX'
The issue may be resolved by changing the referrals parameter (both inside the server.xml file and system parameters) to "ignore" and connecting to the greater AD "forest", which acts like a regular LDAP server on port 3268 (or 3269 for LDAPS).
LDAP authentication error codes
See the following link: http://www-01.ibm.com/support/docview.wss?uid=swg21290631