thorntail:
  deployment:
    process-migration.war:
      web:
        login-config:
          auth-method: BASIC
          security-domain: pim
        security-constraints:
          - url-pattern: /*
            methods: [GET]
            roles: [admin, user]
  security:
    security-domains:
      pim:
        classic-authentication:
          login-modules:
            Database:
              code: LdapExtended
              flag: required
              module-options:
                bindDN: uid=admin,ou=system
                bindCredentials: secret
                baseCtxDN: ou=users,dc=example,dc=com
                baseFilter: (uid={0})
                rolexCtxDN: ou=groups,dc=example,dc=com
                roleFilter: (uniqueMember={1})
                roleAttributeID: uid
                java.naming.factory.initial: com.sun.jndi.ldap.LdapCtxFactory
                java.naming.provider.url: ldap://localhost:10389
                java.naming.security.authentication: simple