Ondrej Lukas created WFLY-6520: ---------------------------------- Summary: LdapExtLoginModule does not use empty string for rolesCtxDN search correctly Key: WFLY-6520 URL: https://issues.jboss.org/browse/WFLY-6520 Project: WildFly Issue Type: Bug Components: Security Reporter: Ondrej Lukas Assignee: Darran Lofthouse Priority: Critical Using LdapExtLoginModule rolesCtxDN with empty string causes that no role search is done, i.e. no roles are assigned to user even if LDAP contains this mapping. In correct behavior empty string should be used as base DN of ldap search. It is regression against EAP 6.4.x. Issue is caused by fix of JBEAP-137. This issue was discovered during development of new regression tests for that issue. -- This message was sent by Atlassian JIRA (v6.4.11#64026)