Issue

We are using ldap-module.xml to authenticate with Active directory. This works fine in 6.1. In 6.2P1, the authentication is working, but it's not finding the roles. A user will be defined for a role, but it fails to authorize. You can even see in the log where it matches the role, but says it doesn't:

org.apache.karaf.jaas.modules - 2.4.0.redhat-620143 | User test2 is a member of role ROLE_Fuse_Admins
io.hawt.hawtio-web - 1.4.0.redhat-133 | role ROLE_Fuse_Admins doesn't match admin, continuing
....
io.hawt.hawtio-web - 1.4.0.redhat-133 | role ROLE_Fuse_Admins doesn't match  Role_Fuse_Admins, continuing
...
User test2 does not have the required role admin,manager,viewer,Monitor, Operator, Maintainer, Deployer, Auditor, Administrator, SuperUser, Role_Fuse_Admins

Even though it seems like the ldap filter saw test2 was in Role_Fuse_admins, when it tries to match it later, it fails.