JAAS and openLDAP (and Tomcat)

I wrote wiki article about how to configure JAAS that uses OpenLDAP to auth users. Article also announce new feature i.e. portal property: portal.jaas.auth.type that allows JAAS to authenticate users based on their email address, screen name, user id, or login ( determined by the property "company.security.auth.type").

The only problem with current settings described in article is the 403 error once user gets authenticated by jaas. User is authenticated by JAAS, signed in portal correctly, still, the error appears. As I see on the net, others have the very same problem with Tomcat. When I tried the same on WebSphere there was no error. Also, I was playing with the tomcat_users.xml but that didn't  help much. So, until I make a dummy example to see what is going on inside tomcat, i wonder if someone can help:)

Blogs
Really impressed! Everything is very open and very clear explanation of issues. It contains truly information. Your website is very useful. Thanks for sharing. Looking forward to more!