[ear1grey]

LDAP is a data-access protocol and not a solution in itself. Think of it as being similar to the fact that HTTP can access all kinds of different documents, so LDAP can be used to access information in directory servers, each of which may have different organizational structures, and within those structures, you often find entries describing users and entries describing roles.

I’ve just looked at the LDAP plugin source and currently login appears to be based on authenticating to the LDAP server using the credentials that are supplied to bbPress, roles dont’ appear to be considered… yet.