Java Security

Hello.

I'm using Sun One LDAP server, and WSAD 5.1.2

Trying to implement some security for proof of concept. I've been able to configure application server so that Authentication with LDAP works using form based login.

I'm using information based on a tutorial found here:
http://www-106.ibm.com/developerworks/websphere/library/techarticles/0311_mitra /mitra.html#sec1

Having trouble with Authorization. How do I correctly map a J2EE role with my LDAP user? I've tried mapping role to group, user, etc, and trying all kinds of ldap naming to specify exact user, but I still get Authorization error while trying to acces web resource.

I removed all security contraints, and I'm able to access web resource. In this tutorial, the web resource with the security contraint is called TestServlet. It prints out username by calling request.getRemoteUser(). This is always null.

So, I'm assuming that my user information is not being passed from the login.jsp to the TestServlet, and that is why authorization if failing. What do I need to configure to ensure that user information gets passed?

Thanks in advance