When a user is authenticated from an LDAP directory service then the roles for this user are used from the shiro.ini fiel with the entry <username> in the section [users].
With this approach the roles can be defined in the shiro.ini file instead of using the roles defined from an LDAP groupes/roles mapping.
Desired Behavior
It may be neccessary to avoid reading the roles from the shiro.ini file, e.g. in a mulit-realm environment with the $iniRealm and some LDAP realms. To switch the role assignment from the shiro.ini file a new option is introduced: myLdapRealm.roleAssignmentFromIni=false (default=true)
Fix
Minor