jboss ldapextloginmodule

[rasha123]

hi ,

im not sure if this is the right place to ask, if not plz direct me,

im trying to authinticate jboss with active directory and i did this login file

application-policy name="OpenKM">

     <authentication>

         <login-module flag="required" code="org.jboss.security.auth.spi.LdapExtLoginModule">

             <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>

          <module-option name="java.naming.provider.url">ldap://10.100.xx.xx:389/</module-option>

          <module-option name="java.naming.security.authentication">simple</module-option>

          <module-option name="bindDN">xxx\Admin</module-option>

          <module-option name="bindCredential">password</module-option>

          <module-option name="baseCtxDN">ou=user,dc=xxx,dc=local</module-option>

          <module-option name="baseFilter">(sAMAccountName={0})</module-option>

          <module-option name="rolesCtxDN">ou=user,dc=xxx,dc=local</module-option>

          <module-option name="roleFilter">(member={1})</module-option>

          <module-option name="roleAttributeIsDN">true</module-option>

          <module-option name="roleNameAttributeID">name</module-option>

          <module-option name="java.naming.referral">follow</module-option>

        </login-module>

     </authentication>

</application-policy>

and this is my configuration file

system.login.lowercase=on
principal.adapter=com.openkm.principal.LdapPrincipalAdapter


principal.ldap.server=ldap://10.100.200.91:389/

principal.ldap.security.principal=CN=Admin,ou=user,dc=xx,dc=local

principal.ldap.security.credentials=password

principal.ldap.user.search.base=ou=user,dc=xxx,dc=local

principal.ldap.user.search.filter=(objectclass=person)

principal.ldap.user.attribute=sAMAccountName



principal.ldap.role.search.base=ou=xxx,dc=xxx,dc=local

principal.ldap.role.search.filter=(jectcoblass=group)


principal.ldap.role.attribute=cn




principal.ldap.mail.search.base=cn={0},ou=xxx,dc=xxx,dc=local

principal.ldap.mail.search.filter=(&(objectclass=person)(sAMAccountName={0}))


principal.ldap.mail.attribute=mail

principal.ldap.users.by.role.search.base=ou=xxxx,dc=xxx,dc=local


principal.ldap.users.by.role.search.filter=(objectclass=group)

principal.ldap.users.by.role.attribute=member

principal.ldap.roles.by.user.search.base=ou=xxxx,dc=xxx,dc=local


principal.ldap.roles.by.user.search.filter=(&(objectclass=person)(sAMAccountName={0}))


principal.ldap.roles.by.user.attribute=memberOf



i can succesfully login with active directory user but the ploblem that all users and roles are not imported to openkm!!

my active directory dn is

"cn= user1, CN=group1,OU=xxx,DC=xxxx,DC=local"

"cn= user2,CN=group2,OU=xxx,DC=xxxx,DC=local"

"cn= user3,CN=group3,OU=xxx,DC=xxxx,DC=local"

where users and roles (groups) under OU

i m not sure if my mistake is in the configuring of roles ands users ?!

any help