<Realm
    className="org.apache.catalina.realm.JNDIRealm" debug="99"
    connectionURL="ldap://DAServer:389"
    connectionName="userAuth@mydomain.local"
    connectionPassword="secret"
    referrals="follow"
    userBase="OU=mycompany,DC=mydomain,DC=local"
    userSubtree="true"
    roleBase="OU=groups,DC=mydomain,DC=local"
    roleName="name"
    roleSubtree="true"
    roleSearch="(member={0})"/>

<!-- Define a Security Constraint on this Application -->
    <security-constraint>
    	<web-resource-collection>
    	<web-resource-name>Entire Application</web-resource-name>
    		<url-pattern>/*</url-pattern>
    	</web-resource-collection>

    	<auth-constraint>
    		<role-name>myCompany Users</role-name>
    	</auth-constraint>
    </security-constraint>

    <!-- Define the Login Configuration for this Application -->
    <login-config>
    	<auth-method>BASIC</auth-method>
    	<realm-name>myRealm</realm-name>
    </login-config>

    <!-- Security roles referenced by this web application -->
    <security-role>
    	<description>The role that is required to log in to APP</description>
    	<role-name>myCompany Users</role-name>
    </security-role>