LdapExtLoginModule does not use empty string for rolesCtxDN search correctly ---------------------------------------------------------------------------- Key: SECURITY-941 URL: https://issues.jboss.org/browse/SECURITY-941 Project: PicketBox Issue Type: Bug Reporter: Ondrej Lukas Assignee: Peter Skopek Priority: Critical Fix For: 4.9.6.Final Using LdapExtLoginModule rolesCtxDN with empty string causes that no role search is done, i.e. no roles are assigned to user even if LDAP contains this mapping. In correct behavior empty string should be used as base DN of ldap search. It is regression against PicketBox 4.9.3.Final.