I've been refraining from the implementation of an LDAP module because no matter how generic it won't be generic enough to fit all structures. anonymous wrote : | I think where user/group/identity service should become interfaces in the core. | I totally agree, this has to start with an abstract scheme and could be extended to match all users requirements. JBoss portal has some module for Ldap integration you could have a look or you can even have a look at the JBoss authentication Ldap modules. Cheers, Fady View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4136391#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...