You could try using org.jboss.security.auth.spi.LdapExtLoginModule, and setting baseCtxDN abd baseFilter, like this: <application-policy name="ldapLogin"> | <authentication> | <login-module flag="required" code="org.jboss.security.auth.spi.LdapExtLoginModule"> | ... | <module-option name="baseCtxDN">dc=org</module-option> | <module-option name="baseFilter">(cn={0})</module-option> | ... | </login-module> | </authentication> | </application-policy> View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4205949#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...