return roles;
    }

    protected void processSubRoles(final LdapUser ldapUser, final String bindDn, final Set<String> subRoleSet, final String groupFilter,
            final Set<String> roleSet) {
        // (member:1.2.840.113556.1.4.1941:=%s)
        if (subRoleSet.isEmpty()) {
            return;
        }
        String filter = subRoleSet.stream().map(s -> String.format(groupFilter, s)).collect(Collectors.joining());

labels.ldap_admin_security_credentials=パスワード
labels.ldap_base_dn=Base DN
labels.ldapAccountFilter=アカウントフィルタ
labels.ldapGroupFilter=グループフィルタ
labels.ldapMemberofAttribute=memberOf属性
labels.ldap_account_filter=アカウントフィルタ
labels.ldap_group_filter=グループフィルタ
labels.ldap_memberof_attribute=memberOf属性
labels.notification_login=ログインページ
labels.notification_search_top=検索トップページ
labels.storage_endpoint=エンドポイント
labels.storage_access_key=アクセスキー

                for (final Map<String, Object> memberOf : memberOfList) {
                    if (logger.isDebugEnabled()) {
                        logger.debug("member: {}", memberOf);
                    }
                    String memberType = (String) memberOf.get("@odata.type");
                    if (memberType == null) {
                        logger.warn("@odata.type is null: {}", memberOf);
                        continue;

    public static final String LDAP_ACCOUNT_FILTER = "ldap.account.filter";

    public static final String LDAP_GROUP_FILTER = "ldap.group.filter";

    public static final String LDAP_MEMBEROF_ATTRIBUTE = "ldap.memberof.attribute";

    public static final String NOTIFICATION_LOGIN = "notification.login";

    public static final String NOTIFICATION_SEARCH_TOP = "notification.search.top";

                    type: integer
                    example: 1
                  end_record_number:
                    type: integer
                    example: 20
                  page_numbers:
                    type: array
                    items:
                      type: string
                    example: ["1", "2", "3", "4", "5"]
                  partial:
                    type: boolean

labels.ldap_security_principal=Benutzer-DN
labels.ldap_admin_security_principal=Bind-DN
labels.ldap_admin_security_credentials=Passwort
labels.ldap_base_dn=Base-DN
labels.ldap_account_filter=Konto-Filter
labels.ldap_memberof_attribute=memberOf-Attribut
labels.notification_login=Anmeldeseite
labels.notification_search_top=Suche Top-Seite
labels.send_testmail=Sende Testmail
labels.backup_configuration=Sichern
labels.backup_name=Name

labels.ldap_admin_security_credentials	=	Mot de passe
labels.ldap_base_dn	=	DN de base
labels.ldap_account_filter	=	Filtre de compte
labels.ldap_group_filter	=	Filtre de groupe
labels.ldap_memberof_attribute	=	Attribut memberOf
labels.notification_login	=	Page de connexion
labels.notification_search_top	=	Rechercher en haut de la page
labels.storage_endpoint	=	Point final
labels.storage_access_key	=	Clef d'accès

        asyncManager.async(() -> {
            insertLogin(user);
        });
    }

    protected void insertLogin(final Object member) {
        // nothing
    }

    @Override
    protected void checkPermission(final LoginHandlingResource resource) throws LoginRequiredException {

labels.related_query_title_details=Related Query
labels.crud_link_create=Create New
labels.crud_title_create=Create
labels.general_storage=Storage
labels.ldap_group_filter=Group Filter
labels.ldap_memberof_attribute=memberOf Attribute
labels.storage_endpoint=Endpoint
labels.storage_access_key=Access Key
labels.storage_secret_key=Secret Key
labels.storage_bucket=Bucket
labels.upgrade_reindex=Reindex

            buf.append(startRecordNumber);
            buf.append(",\"end_record_number\":");
            buf.append(escapeJson(endRecordNumber));
            buf.append(",\"page_numbers\":");
            buf.append(escapeJson(pageNumbers));
            buf.append(",\"partial\":");
            buf.append(escapeJson(partial));
            buf.append(",\"search_query\":");