JBoss Community

Found the answer myself

------------------------------------

I modified the stanalone.xml file with roleFilter and it should be like:

<security-domain name="jbpm-console" cache-type="default">

                    <authentication>

                        <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required">

                            <module-option name="bindDN" value="uid=admin,ou=system"/>

                            <module-option name="bindCredential" value="secret"/>

                            <module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>

                            <module-option name="java.naming.provider.url" value="ldap://localhost:10389"/>

                            <module-option name="baseCtxDN" value="ou=People,dc=jbpm,dc=org"/>

                            <module-option name="baseFilter" value="(uid={0})"/>

                            <module-option name="rolesCtxDN" value="ou=Roles,dc=jbpm,dc=org"/>

                            <module-option name="roleFilter" value="(member={1})"/>

                            <module-option name="roleAttributeID" value="cn"/>

                            <module-option name="roleAttributeIsDN" value="true"/>

                            <module-option name="roleNameAttributeID" value="CN"/>

                            <module-option name="searchScope" value="SUBTREE_SCOPE"/>

                            <module-option name="allowEmptyPasswords" value="true"/>

                            <module-option name="throwValidateError" value="true"/>

                            <module-option name="roleRecursion" value="-1"/>

                        </login-module>                      

                    </authentication>

                </security-domain>