When specifying LDAP as your authentication service, you must specify what LDAP server to use.
Set the property derby.authentication.server to the URL to the LDAP server. For example:
derby.authentication.server=ldap://godfrey:389/
The LDAP server may be specified using just the server name, the server name and its port number separated by a colon, or a ldap URL. If a full URL is not provided, Derby will by default use unencrypted LDAP - to use SSL encrypted LDAP an URL starting with "ldaps://" must be provided.
Also note that support for ldaps:// URLs requires that Derby runs on Java 1.4.2 or higher.