Simple Tomcat realm, authenticate against LDAP, group roles defined in server.xml file