Metacat

	   LdapContext ctx = null;

	   double startTime;

	   double stopTime;

		   Hashtable env = new Hashtable();

		   env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");

		   env.put(Context.PROVIDER_URL, server);

		   env.put(Context.REFERRAL, "throw");

			   startTime = System.currentTimeMillis();

			   ctx = new InitialLdapContext(env, null);

			   // Start up TLS here so that we don't pass our jewels in cleartext

		       StartTlsResponse tls =

		              (StartTlsResponse)ctx.extendedOperation(new StartTlsRequest());

		       //tls.setHostnameVerifier(new SampleVerifier());

		       SSLSession sess = tls.negotiate();

		       ctx.addToEnvironment(Context.SECURITY_AUTHENTICATION, "simple");

			   ctx.addToEnvironment(Context.SECURITY_PRINCIPAL, userDN);

			   ctx.addToEnvironment(Context.SECURITY_CREDENTIALS, password);

			   ctx.reconnect(null);

			   stopTime = System.currentTimeMillis();

			   logMetacat.info("Connection time thru " + ldapsUrl + " was: " +

                       	(stopTime - startTime) / 1000 + " seconds.");

			   authenticated = true;

			   logMetacat.info("Caught IOException in login while negotiating TLS: "

	                                 + ioe.getMessage());

				   return authenticated;

				   logMetacat.info("Trying to authenticate without TLS");

				   env.put(Context.SECURITY_AUTHENTICATION, "simple");

				   env.put(Context.SECURITY_PRINCIPAL, userDN);

				   stopTime = System.currentTimeMillis();

				   logMetacat.info("Connection time thru " + ldapsUrl + " was: " +

	                       	(stopTime - startTime) / 1000 + " seconds.");

				   authenticated = true;

			   }

		   }

		   authenticated = false;

	        logMetacat.error("An invalid DN was provided!");

		   logMetacat.warn("Caught NamingException in login: " + e.getClass().getName());

		   logMetacat.info(e.toString() + "  " + e.getRootCause());

       return authenticated;

  }