realm get user attributes

[hyrogen]

I've successfully connected to an active directory through realm and returned the user groups, now im trying to return some extra details about the user such as their email address.

I can return the roles of the user by setting
userRoleName="memberOf"

and I can get the email address by setting
userRoleName="mail"

But I dont seem to be able to return both. Im totally lost on this so any help is much appreciated. All I need is a pointer in the right direction.

Many Thanks in advance

 

[hyrogen]

Here is my current realm configuration if it helps at all:

<Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
connectionURL="ldap://xxxx/"
connectionName="xxx"
connectionPassword="xxx"

userBase="OU=xxx,DC=xxx,DC=xx,DC=com"
userSearch="(sAMAccountName={0})"

userRoleName="memberOf"


roleSubtree ="true"

userSubtree="true"
/>

thanks in advance!