I changed our Gatein 3.0 configuration as described in http://community.jboss.org/wiki/GateInwithLDAPasadefaultuserandgroupstore
And it seems fine so far. But the user password are stored as cleartext password in ldap. That´s poor.
Are there any instruction to save the passwords as SHA1 hash?
This should be configured on the LDAP server side.