I have configured an application policy in JBoss 4.2.0 to use the LDapLoginModule against my active directory. Now my problem is that I'd like to chek user/password against active directory, but I'd like to manage the group using another login module (for example the UsersRolesLoginModule). Is is possible to configure the application policy to check user/password with one login module and group with another one ? I have tried that but it does not works: | <application-policy name="example1"> | <authentication> | <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="sufficient" > | ... | </login-module> | <login-module code = "org.jboss.security.auth.spi.UsersRolesLoginModule" | flag = "sufficient" /> | </authentication> | | </application-policy> View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4074704#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...