Configuring Tomcat to authenticate using Windows Active Directory

Question

What is the best way to configure Tomcat 5.5 or later to authenticate users from Windows Active Directory?

Answer 1

Blauhr's answer is good, but the CN of a user in AD is based on their "Display Name", not their saMAccountName (which user's are used to logging in with). Based on his solution, it looks like someone would have to log in with their Display Name, based on the userPattern.

I've personally used the following:

Everything else would pretty much work the same.