How do I pass HTTP authentication to JNDI for Active Directory using Tomcat?

I currently have IIS with the Jakarta redirector to JBoss/Tomcat. I turn Tomcat authentication off in order to have IIS do the HTTP authentication for me (Integrated Windows Authentication).

What I want to do is be able to also query Active Directory from a webpage for things like group membership and e-mail addresses.

How do I pass the HTTP authentication to JNDI in order to query Active Directory so that I never need to ask the user for userID/password (since IIS/Tomcat can do this silently)??

My current solution requires me to store a generic AD user account or ask the user for their password (username can be read by request.getRemoteUser()):

Start Free Trial

1:
2:
3:
4:
5:

env.setProperty(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.setProperty(Context.PROVIDER_URL, activeDirectory);
env.setProperty(Context.SECURITY_AUTHENTICATION,"simple");
env.setProperty(Context.SECURITY_PRINCIPAL, username);
env.setProperty(Context.SECURITY_CREDENTIALS, password);