I am using the code posted here in applicationContext-security.xml. The authenticate is done on windows 2000 active directory. It worked fine. The only problem is that it take unbearable long time (70 seconds) to just authenticate. Is there anyone else has the same problem? How did you resolve it. Thanks a lot.