// -----------------------------------------------Directory Server Instance Variables

    /**
     *  The type of authentication to use.
     */
    protected String authentication = null;

    /**
     * The connection username for the directory server we will contact.
     */
    protected String ldapConnectionName = null;


    /**
     * The connection password for the directory server we will contact.
     */
    protected String ldapConnectionPassword = null;


    /**
     * The connection URL for the directory server we will contact.
     */
    protected String ldapConnectionURL = null;


    /**
     * The directory context linking us to our directory server.
     */
    protected DirContext context = null;


    /**
     * The JNDI context factory used to acquire our InitialContext.  By
     * default, assumes use of an LDAP server using the standard JNDI LDAP
     * provider.
     */
    protected String contextFactory = "com.sun.jndi.ldap.LdapCtxFactory";


    /**
     * How aliases should be dereferenced during search operations.
     */
    protected String derefAliases = null;

    /**
     * Constant that holds the name of the environment property for specifying
     * the manner in which aliases should be dereferenced.
     */
    public final static String DEREF_ALIASES = "java.naming.ldap.derefAliases";


    /**
     * The protocol that will be used in the communication with the
     * directory server.
     */
    protected String protocol = null;


    /**
     * Should we ignore PartialResultExceptions when iterating over NamingEnumerations?
     * Microsoft Active Directory often returns referrals, which lead
     * to PartialResultExceptions. Unfortunately there‘s no stable way to detect,
     * if the Exceptions really come from an AD referral.
     * Set to true to ignore PartialResultExceptions.
     */
    protected boolean adCompat = false;


    /**
     * How should we handle referrals?  Microsoft Active Directory often returns
     * referrals. If you need to follow them set referrals to "follow".
     * Caution: if your DNS is not part of AD, the LDAP client lib might try
     * to resolve your domain name in DNS to find another LDAP server.
     */
    protected String referrals = null;


    /**
     * The base element for user searches.
     */
    protected String userBase = "";


    /**
     * The message format used to search for a user, with "{0}" marking
     * the spot where the username goes.
     */
    protected String userSearch = null;


    /**
     * The MessageFormat object associated with the current
     * <code>userSearch</code>.
     */
    protected MessageFormat userSearchFormat = null;


    /**
     * Should we search the entire subtree for matching users?
     */
    protected boolean userSubtree = false;


    /**
     * The attribute name used to retrieve the user password.
     */
    protected String userPassword = null;


    /**
     * A string of LDAP user patterns or paths, ":"-separated
     * These will be used to form the distinguished name of a
     * user, with "{0}" marking the spot where the specified username
     * goes.
     * This is similar to userPattern, but allows for multiple searches
     * for a user.
     */
    protected String[] userPatternArray = null;


    /**
     * The message format used to form the distinguished name of a
     * user, with "{0}" marking the spot where the specified username
     * goes.
     */
    protected String ldapUserPattern = null;


    /**
     * An array of MessageFormat objects associated with the current
     * <code>userPatternArray</code>.
     */
    protected MessageFormat[] userPatternFormatArray = null;


    /**
     * An alternate URL, to which, we should connect if ldapConnectionURL fails.
     */
    protected String ldapAlternateURL;

    /**
     * The number of connection attempts.  If greater than zero we use the
     * alternate url.
     */
    protected int connectionAttempt = 0;


    /**
     * The timeout, in milliseconds, to use when trying to create a connection
     * to the directory. The default is 5000 (5 seconds).
     */
    protected String connectionTimeout = "5000";


    // --------------------------------------------------JDBC Instance Variables

    /**
     * The connection username to use when trying to connect to the database.
     */
    protected String jdbcConnectionName = null;


    /**
     * The connection password to use when trying to connect to the database.
     */
    protected String jdbcConnectionPassword = null;


    /**
     * The connection URL to use when trying to connect to the database.
     */
    protected String jdbcConnectionURL = null;


    /**
     * The connection to the database.
     */
    protected Connection dbConnection = null;


    /**
     * Instance of the JDBC Driver class we use as a connection factory.
     */
    protected Driver driver = null;


    /**
     * The JDBC driver name to use.
     */
    protected String jdbcDriverName = null;


    /**
     * The PreparedStatement to use for identifying the roles for
     * a specified user.
     */
    protected PreparedStatement preparedRoles = null;


    /**
     * The string manager for this package.
     */
    protected static final StringManager sm =
        StringManager.getManager(Constants.Package);


    /**
     * The column in the user role table that names a role
     */
    protected String roleNameCol = null;


    /**
     * The column in the user role table that holds the user‘s name
     */
    protected String userNameCol = null;


    /**
     * The table that holds the relation between user‘s and roles
     */
    protected String userRoleTable = null;


    /**
     * Descriptive information about this Realm implementation.
     */
    protected static final String info = "XXXXXX";


    /**
     * Descriptive information about this Realm implementation.
     */
    protected static final String name = "XXXRealm";

<mbean  name="XXXRealm"
        description="Custom XXXRealm..."
        domain="Catalina"
        group="Realm"
        type="com.myfirm.mypackage.XXXRealm">

    <attribute  name="className"
          description="Fully qualified class name of the managed object"
          type="java.lang.String"
          writeable="false"/>

    <attribute  name="debug"
          description="The debugging detail level for this component"
          type="int"/>
   ...

</mbean>

<?xml version="1.0"?>  
<mbeans-descriptors>  

  <mbean         name="CoralXRRealm"  
          description="Implementation of Realm that works with a directory server accessed via the Java Naming and Directory Interface (JNDI) APIs and JDBC supported database"  
               domain="Catalina"  
                group="Realm"  
                 type="org.opencoral.xreport.realm.CoralXRRealm">  

    <attribute   name="className"  
          description="Fully qualified class name of the managed object"  
                 type="java.lang.String"  
            writeable="false"/>  

    <attribute   name="ldapConnectionName"  
          description="The connection username for the directory server we will contact"  
                 type="java.lang.String"/>  

    <attribute   name="ldapConnectionPassword"  
          description="The connection password for the directory server we will contact"  
                 type="java.lang.String"/>  

    <attribute   name="ldapConnectionURL"  
          description="The connection URL for the directory server we will contact"  
                 type="java.lang.String"/>  

    <attribute   name="contextFactory"  
          description="The JNDI context factory for this Realm"  
                 type="java.lang.String"/>  

    <attribute   name="digest"  
          description="Digest algorithm used in storing passwords in a non-plaintext format"  
                 type="java.lang.String"/>  

    <attribute   name="userBase"  
          description="The base element for user searches"  
                 type="java.lang.String"/>  

    <attribute   name="userPassword"  
          description="The attribute name used to retrieve the user password"  
                 type="java.lang.String"/>  

    <attribute   name="ldapUserPattern"  
          description="The message format used to select a user"  
                 type="java.lang.String"/>  

   <attribute   name="userSearch"  
         description="The message format used to search for a user"  
                type="java.lang.String"/>  

    <attribute   name="userSubtree"  
          description="Should we search the entire subtree for matching users?"  
                 type="boolean"/>  

    <attribute   name="jdbcConnectionName"  
          description="The connection username to use when trying to connect to the database"  
                 type="java.lang.String"/>  

    <attribute   name="jdbcConnectionPassword"  
          description="The connection URL to use when trying to connect to the database"  
                 type="java.lang.String"/>  

    <attribute   name="jdbcConnectionURL"  
          description="The connection URL to use when trying to connect to the database"  
                 type="java.lang.String"/>  

    <attribute   name="jdbcDriverName"  
          description="The JDBC driver to use"  
                 type="java.lang.String"/>  

    <attribute   name="roleNameCol"  
          description="The column in the user role table that names a role"  
                 type="java.lang.String"/>  

    <attribute   name="userNameCol"  
          description="The column in the user role table that holds the user‘s username"  
                 type="java.lang.String"/>  

    <attribute   name="userRoleTable"  
          description="The table that holds the relation between user‘s and roles"  
                 type="java.lang.String"/>  


    <operation name="start" description="Start" impact="ACTION" returnType="void" />  
    <operation name="stop" description="Stop" impact="ACTION" returnType="void" />  
    <operation name="init" description="Init" impact="ACTION" returnType="void" />  
    <operation name="destroy" description="Destroy" impact="ACTION" returnType="void" />  
  </mbean>  

</mbeans-descriptors>