https://bz.apache.org/bugzilla/show_bug.cgi?id=63550
--- Comment #3 from Eugène Adell <eugene.ad...@gmail.com> --- (In reply to Michael Osipov from comment #2) > Don't use the altenative URL. Oracle's default implementation for LDAP will > handle multiple space-separated URLs properly. Is it documented anywhere ? I don't see anything at least here : https://tomcat.apache.org/tomcat-8.5-doc/config/realm.html#JNDI_Directory_Realm_-_org.apache.catalina.realm.JNDIRealm > The issue you see is simply a bug in the realm. localhost:389 is queried > when no provider URL is given. Exactly, this is what I tried to show with the code excerpt. How to reproduce : by trying an unavailable server in connectionURL, or trying a server which is available but fail for any other reason (typically SSL handshake reasons : certificate not trusted by Tomcat, incompatible Cipher Suites,.. ) -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org