Hello,
After much frustration, I was able to get the LDAP authentication working.
The main problem was that most examples are incorrectly showing the role context as the object that has the roles itself.
However, the role context needs to be above the other role group objects.
The attribute "rolesCtxDN" of the LDAP LoginModule that are shown in examples (like the QuickStart 3.0 draft) should specify one level higher in the hierarchy than the example shows.
In the QuickStart draft, "rolesCtxDN" should say:
ou=Roles,o=jboss.org
and not have the cn in it.
I hope this helps some other people.
