title: LDAP authorization
body: <p>I'm starting to implement authorization and authentication mechanism using LDAP, for some existing system. On the development stage, I'm facing a difficult design decision: <strong>where should user roles be stored?</strong></p>
  
  <p>If I used RDBMS, it looks like there will be three tables: <strong>user</strong>, <strong>role</strong> and <strong>user_role</strong> to map roles and users. </p>
  
  <p>Please suggest available solutions. I think about storing the user roles in DB and users in LDAP, but not sure if that is the best solutions. I use JBoss as my application server.</p>