<server xmlns="urn:jboss:domain:3.0">

    <security-realms>
        <security-realm name="ManagementRealm">
            <authentication>
                <local default-user="$local" skip-group-loading="true"/>
                <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/>
            </authentication>
            <authorization map-groups-to-roles="false">
                <properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
            </authorization>
        </security-realm>
        <security-realm name="ApplicationRealm">
            <authentication>
                <local default-user="$local" allowed-users="*" skip-group-loading="true"/>
                <properties path="application-users.properties" relative-to="jboss.server.config.dir"/>
            </authentication>
            <authorization>
                <properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
            </authorization>
        </security-realm>
        <security-realm name="ActiveDirectoryRealm">
            <authentication>
                <ldap connection="AD" base-dn="OU=UserAccounts,OU=COMPANY,DC=companydomain,DC=local" recursive="true">
                    <username-filter attribute="sAMAccountName"/>
                </ldap>
            </authentication>
        </security-realm>
        </security-realms>
        <outbound-connections>
        <ldap name="AD" url="ldap://companydomain.local" search-dn="CN=MyUsername,OU=UserAccounts,OU=COMPANY,DC=companydomain,DC=local" search-credential="password"/>
        </outbound-connections>

    </security-realms>

    <subsystem xmlns="urn:jboss:domain:security:1.2">
        <security-domains>
            <security-domain name="other" cache-type="default">
                <authentication>
                    <login-module code="Remoting" flag="optional">
                        <module-option name="password-stacking" value="useFirstPass"/>
                    </login-module>
                    <login-module code="RealmDirect" flag="required">
                        <module-option name="password-stacking" value="useFirstPass"/>
                    </login-module>
                </authentication>
            </security-domain>
            <security-domain name="jboss-web-policy" cache-type="default">
                <authorization>
                    <policy-module code="Delegating" flag="required"/>
                </authorization>
            </security-domain>
            <security-domain name="jboss-ejb-policy" cache-type="default">
                <authorization>
                    <policy-module code="Delegating" flag="required"/>
                </authorization>
            </security-domain>
            <security-domain name="active-directory" cache-type="default">
                <authentication>
                    <login-module code="Remoting" flag="optional">
                        <module-option name="password-stacking" value="useFirstPass"/>
                    </login-module>
                    <login-module code="RealmDirect" flag="sufficient">
                        <module-option name="password-stacking" value="useFirstPass"/>
                        <module-option name="realm" value="ActiveDirectoryRealm"/>
                    </login-module>
                </authentication>
            </security-domain>
        </security-domains>
    </subsystem>

</server>