I don't understand the LdapLoginModule avaailable in page 64 of the documentation. There is no module option to specify the password field of the ldap, so i am wondering how could the password passed in be checked upon? I don't understand what is the matchOnUserDN module option about? When it says matching the user's fully distinguished name what does it means? is it the full ldap name? Can someone kindly explain to me please. Thanks in advance.