[ https://issues.jboss.org/browse/SECURITY-941?page=com.atlassian.jira.plug... ] Ondrej Lukas updated SECURITY-941: ---------------------------------- Description: Using LdapExtLoginModule rolesCtxDN with empty string causes that no role search is done, i.e. no roles are assigned to user even if LDAP contains this mapping. In correct behavior empty string should be used as base DN of ldap search. It is regression against PicketBox 4.9.3.Final. (was: Using LdapExtLoginModule rolesCtxDN with empty string causes that no role search is done, i.e. no roles are assigned to user even if LDAP contains this mapping. In correct behavior empty string should be used as base DN of ldap search. It is regression against . Issue is caused by fix of JBEAP-137. This issue was discovered during development of new regression tests for that issue.) -- This message was sent by Atlassian JIRA (v6.4.11#64026)