Style 1 - PicketBox

users.ldif

dn: dc=jboss,dc=org
objectclass: dcObject
objectclass: organization
o: JBoss
dc: JBoss

dn: ou=People,dc=jboss,dc=org
objectclass: top
objectclass: organizationalUnit
ou: People

dn: uid=jduke,ou=People,dc=jboss,dc=org
objectclass: top
objectclass: uidObject
objectclass: person
uid: jduke
cn: Java Duke
sn: Duke
userPassword: theduke

dn: ou=Roles,dc=jboss,dc=org
objectclass: top
objectclass: organizationalUnit
ou: Roles

dn: cn=Echo,ou=Roles,dc=jboss,dc=org
objectClass: top
objectClass: groupOfNames
cn: Echo
description: the JBossAdmin group
member: uid=jduke,ou=People,dc=jboss,dc=org

dn: cn=TheDuke,ou=Roles,dc=jboss,dc=org
objectClass: groupOfNames
objectClass: top
cn: TheDuke
description: TheDuke role context
member: uid=jduke,ou=People,dc=jboss,dc=org

Configuration using Java

LDAPSearchConfig searchConfig = new LDAPSearchConfig();
        searchConfig.setScope("subtree");
        searchConfig.setSearchBase("ou=Roles,dc=jboss,dc=org");
      searchConfig.setSearchAttributes(new String[] { "cn" });
     searchConfig.setSearchFilterExpression("member={0}");
searchConfig.setFilterArgs(new Object[] { "uid=jduke,ou=People,dc=jboss,dc=org" });