Hi @raobelina_toky_ Is this setup done? Else Please try out below steps. Step1: In rolesByGroup please specify only the group's cn and not the full. Change "cn=Group-admin,dc=domain,dc=company": to Group-admin:admin_role Step2: Validate your group search base path ldapRealm.groupSearchBase and group Object class name and memberAttribute. For instance if your ldapRealm.groupSearchBase = dc=domain, dc=company ldapRealm.groupObjectClass = posixGroup ldapRealm.memberAttribute = member As per the source code it pulls group's cn based on these values. Also comment out below if there is no group inside groups. # Enable support for nested groups using the LDAP_MATCHING_RULE_IN_CHAIN operator #ldapRealm.groupSearchEnableMatchingRuleInChain = true To cross verify your settings try using ldapsearch this comes as part of ldap-utils package. Replace the values in <> and try search. ldapsearch -h <ldapHost> -p <ldapport> -D <ldapRealm.contextFactory.systemUsername> -w <bind user password> -b <groupSearchBase> -s sub "(objectclass=<groupObjectClass>)"
... View more
