title: Apache Shiro - LDAP for Authentication and Properties/Ini for Authorization
body: <p>i´m trying to add some authentication and authorization functionality to my small web application. therefore i´m using apache shiro.</p>
  
  <p>my plan: using an existing ldap server for user authentication and using a properties or ini file for authorization.</p>
  
  <p>here´s a small example: 
  user x wants to use the application
  he enters his username and his password
  the ldap server is used for authentication --> user + pwd correct?
  if authentication is verified and correct, a properties file or ini file is used to check if the user is permitted, to start some functions inside the application.</p>
  
  <p>i hope you know what i´m trying to do.</p>
  
  <p>now i´m not sure how to implement this feature. is it enough to use an ini file or is it required to implement my own realm?! is there an example implementation?</p>
  
  <p>i´m grateful for every information</p>
  
  <p>and sorry for my bad english :/</p>