Authorities at multiple locations in an active directory

[messofaperson]

As it stands, we have groups (authorities) located in two (or more) locations in our AD.

<bean id="authoritiesPopulator" class="org.springframework.security.ldap.populator .DefaultLdapAuthoritiesPopulator">
<constructor-arg ref="contextSource" />
<constructor-arg value="CN=Users" />
<property name="groupRoleAttribute" value="CN" />
<property name="searchSubtree" value="true" />
<property name="rolePrefix" value="" />
<property name="convertToUpperCase" value="false" />
</bean>

Now, I've tried changing the second constructor-arg to value="" but that generates an error, and I've been looking for a way to set up more than one populator but to no avail (other than making one myself - which is I guess an option if there's no configuration-based way to do it). Spring security version is 2.0.4.

[messofaperson]

Heh, referrals. Problem solved:

<bean id="contextSource" class="org.springframework.security.ldap.DefaultSp ringSecurityContextSource">
........
<property name="baseEnvironmentProperties">
<map>
<entry key="java.naming.referral" value="follow" />
</map>
</property>
</bean>