Boy, you guys just thought of everything, huh? Looking through the LdapExtLoginModule code (to place a hack), I found the defaultRole option. Unfortunately, this option wasn't covered in the Wiki.
Okay, so that fixes my main problem of my thousands of users who have the default primary group of "Domain User" As for the rest, I'll just fix it in Active Directory by adding my own groups, rather than using the primary groups, and hacking into LdapExtLoginModule (or creating a new login module). For those who want to use the defaultRole option, just add it to your configuration: | <module-option name="defaultRole">myDefaultRole</module-option> | You can then use "myDefaultRole" as a defined role in your app. Of course, I've only tested in JUnit. I'll place it in my production-code soon. ActiveDirectory and LdapExtLoginModule is great! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3913914#3913914 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3913914 ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user