Tomcat Authenticates to AD. How do I access AD variables?

[Robyne Vaughn]

Hi,
Thanks to Dean Searle my Tomcat now Authenticates to Active Directory
with this in my server.xml
(of course, the names have been changed to protect the innocent)
 
<Realm  className="org.apache.catalina.realm.JNDIRealm" debug="99"
          connectionURL="ldap://99.999.9.9:389 <ldap://99.999.9.9:389> "
 
connectionName="CN=connectionUID,OU=connectionUIDou,dc=mycompany,dc=isd"
          connectionPassword="connectionUIDpassword"
          referrals="follow"
          userBase="dc=mycompany,dc=isd"
 
          userSearch="(&amp;(sAMAccountName={0})(objectClass=user))"
          userSubtree="true"
          roleBase="dc=mycompany, dc=isd"
          roleSearch="(uniqueMember={0})"
          rolename="cn"
         />
 
My web-app/web.xml fires off a form for authentication when my web-app
opening .jsp is requested.  After being authenticated the opening .jsp
fires off.
 
In my opening .jsp, how can I get user data from Active Directory?
 
For instance, how would I retrieve their Surname, firstname, and e-mail
address from AD using my .jsp after Tomcat has authenticated them?
 
getRemoteUser gives me their login id, but I don't know how to get to
all their data since I don't know the path along which Tomcat found them
and authenticated them.
 
 
thanks,
Robyne Vaughn