It's not possible to configure LDAP cache in security realms under "authorization=ldap/group-search=principal-to-group" Possible reason: The LdapCacheResourceDefinition is not registered under the org.jboss.as.domain.management.security.PrincipalToGroupResourceDefinition When I try to add the cache configuration manually to standalone.xml, server doesn't start and reports: 15:23:44,619 ERROR [org.jboss.as.controller] (Controller Boot Thread) JBAS014629: No resource definition is registered for address [ ("core-service" => "management"), ("security-realm" => "JBossTest"), ("authorization" => "ldap"), ("group-search" => "principal-to-group"), ("cache" => "by-search-time") ] 15:23:44,621 FATAL [org.jboss.as.server] (Controller Boot Thread) JBAS015957: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.
Verified in 6.4.0.DR3 CLI Steps: /core-service=management/ldap-connection=ldapConnection:add(url="ldap://localhost:10389", search-credential="secret", search-dn="uid=admin,ou=system") /core-service=management/security-realm=JBossTest:add /core-service=management/security-realm=JBossTest/authentication=ldap:add(connection=ldapConnection, base-dn="dc=jboss,dc=org", recursive=true, username-attribute=uid) batch /core-service=management/security-realm=JBossTest/authorization=ldap:add(connection=ldapConnection) /core-service=management/security-realm=JBossTest/authorization=ldap/group-search=principal-to-group:add(group-name=SIMPLE, group-name-attribute=cn, iterative=true, group-attribute=description) run-batch reload
John Doyle <jdoyle> updated the status of jira EAP6-191 to Closed