We're using the LdapLoginModule to authenticate and do authorization against and Active Directory container.
But we're having two problems... --------------------------------- The first and more important one is: Our users are separated in different "directories" according to the functional area were they work on the organization. For instance: \IT \Commercial \Users (generic ones) \Financial But while using the LdapLoginModule we can only search against one directory. We believe that one of two things can happen... Either search recursively against all the directories or be able to specify a set of directories (in the configuration) were the search is done. --------------------------------- The second one is: Each user has a set of roles... Typically the user's roles will increase a lot since for each report (I'm referring to a website that produces financial information reports) that the user can access he will have a set of roles... Typically we have three major groups of roles that most users will have and than we have the exceptions... Those users that need to specifically set roles. Suppose this is what we have: User1 - role1 - role2 User2 - role7 - role8 What we'd like is to create 3 or 4 groups of roles and associate those groups to the users. User1 - RoleGrp1 - role1 - role2 User2 - RoleGrp2 - role7 - role8 Once again, the problem is that while using the LdapLoginModule we can only search against the first level of roles (if we have a group it won't search inside of it). One choice would be to search recursively. But if that is very complicated, being able to search two levels would solve our problem. ------------------------------- Can you help us with both of these problems? Thanks in advance. J. Diogo O. Ramos mailto:[EMAIL PROTECTED] _______________________________________ Critical Software, SA http://www.criticalsoftware.com ------------------------------------------------------- This SF.net email is sponsored by:Crypto Challenge is now open! Get cracking and register here for some mind boggling fun and the chance of winning an Apple iPod: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user