I feel I am close but I need some advice on login-config.xml with LDAP

[tomliu6999]

Hello LDAP experts,

I defined a LDAP in the login-config.xml and I was able to get roles. But the roles were in the format of cn=ABC,o=team,dc=company,dc=com.

Trace.

17:09:07,347 TRACE [LdapExtLoginModule] Assign user to role cn=ABC,o=team,dc=company,dc=com.

I hope it would be Assgin user to role ABC.

My configuration is

	<module-option name = "rolesCtxDN">o=team,dc=company,dc=com</module-option>
	<module-option name = "roleFilter">(uid={0})</module-option>
	<module-option name = "roleAttributeID">nsRole</module-option>
	<module-option name = "roleAttributeIsDN">false</module-option>
	<module-option name = "roleRecursion">0</module-option>
	<module-option name = "allowEmptyPasswords">true</module-option>

What shall I change?

Thanks,

Tom