Integrating LDAP with JBoss portal

Hi all,

I have been integrating LDAP with JBoss portal. Here comes doubt

<login-module code="org.jboss.portal.identity.auth.SynchronizingLDAPExtLoginModule" flag="required">
            <module-option name="synchronizeIdentity">true</module-option>
            <module-option name="synchronizeRoles">true</module-option>
            <module-option name="preserveRoles">true</module-option>
            <module-option name="additionalRole">Authenticated</module-option>
            <module-option name="defaultAssignedRole">User</module-option>
            <module-option name="userModuleJNDIName">java:/portal/UserModule</module-option>
            <module-option name="roleModuleJNDIName">java:/portal/RoleModule</module-option>
            <module-option name="membershipModuleJNDIName">java:/portal/MembershipModule</module-option>
            <module-option name="userProfileModuleJNDIName">java:/portal/UserProfileModule</module-option>
            <module-option name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module-option>
            <module-option name="java.naming.provider.url">ldap://localhost:389/</module-option>
            <module-option name="java.naming.security.authentication">simple</module-option>
            <module-option name="bindDN">cn=admin,CN=Users,DC=domain,DC=local</module-option>
            <module-option name="bindCredential">aaaaa</module-option>
            <module-option name="baseCtxDN">CN=Users,DC=domain,DC=local</module-option>
            <module-option name="baseFilter"><![CDATA[(&((sAMAccountName={0})(objectClass=person)))]]></module-option>
            <module-option name="rolesCtxDN">CN=Users,DC=domain,DC=local</module-option>
            <module-option name="roleFilter"><![CDATA[(&((member={1})(objectClass=group)))]]></module-option>
            <module-option name="roleAttributeID">cn</module-option>
            <module-option name="roleRecursion">-1</module-option>
            <module-option name="searchTimeLimit">10000</module-option>
            <module-option name="searchScope">SUBTREE_SCOPE</module-option>
            <module-option name="allowEmptyPasswords">false</module-option>
         </login-module>

If you can see in the roleFilter and baseFilter, i am trying to filter the account which objectClass=person. But the filter is not working. I doubt whether syntax is correct or wrong. Can anybody correct me here. Now it fetches all the records.

Got it working by giving the same filters in ldap_identity-config.xml