Can't configure empty base-dn for ldap realm -------------------------------------------- Key: WFLY-5722 URL: https://issues.jboss.org/browse/WFLY-5722 Project: WildFly Issue Type: Bug Components: Security Manager Affects Versions: 2.0.2.Final Reporter: Alberto Persello Assignee: Darran Lofthouse Labels: authentication, authorization, group, ldap, realm It is not possible to set the empty value for base-dn attribute in authentication-->ldap element and in authorization-->ldap-->group-search-->group-to-principal element. The empty value is the only valid option for java ldap searches to scan the entire ldap (the equivalent of RootDSE).