The limit on the number of roles still seems to be an issue in DNN 5 with ActiveDirectory_05.00.02, see thread linked below. I doesn't seem to be so much as the number of roles as the total number of characters used by the role names.

The system seems to break at around 950 characters and the the user gets the Inlvalid value for 'encrypted ticket parameter'  error, requiring our IT support to help them empty their cache and then we have to remove them from some groups sp they can limp on.

I know the consensus is that everyone with this issue should re-organize their roles structure, however that would not be feasible as the roles we use are also used in other areas of our system and doing so would be very costly for our organization. We're are renaming certain roles to use shorter, less descriptive names where possible, but certain ones can't be as they are referenced in other in-house applications we use and would require us to update and recompile/redistibute those application across our enterprise.

Is there any plans to design support for larger lists of roles?

Thanks.

http://www.dotnetnuke.com/Community/F...

I actually wrote a role compression provider over a year ago that increases the number of roles into the low hundreds (as I recall), obviously at the expense of the slight performance hit associated with a new httpModule in the pipeline.  

Unfortunately, I never released the thing!  (It's been a crazy year.)

If there is some demand for this sort of functionality, I can look at getting it into production-ready shape.  I recall that it was very close.

Brandon