Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have an installation of WSO2 Identity Server and I'm trying to make it work with an external OpenLDAP instance I have followed this guide: http://wso2.org/project/solutions/identity/3.2.3/docs/user-core/admin_guide.html#LDAP For the read-only mode.

But when I try to log-in I get a failed login and the following error on the console:

TID: [0] [WSO2 Identity Server] [2012-08-10 17:10:25,493]  WARN {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} -  Failed Administrator login attempt 'john[0]' at [2012-08-10 17:10:25,0493] from IP address {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil}

Full log: http://pastebin.com/pHUGXBqv

My configuration file looks as follows:

        <EveryOneRoleName>everyone</EveryOneRoleName> <!-- By default users in this role sees the registry root -->
        <Property name="url">jdbc:h2:repository/database/WSO2CARBON_DB</Property>
        <Property name="userName">wso2carbon</Property>
        <Property name="password">wso2carbon</Property>
        <Property name="driverName">org.h2.Driver</Property>
        <Property name="maxActive">50</Property>
        <Property name="maxWait">60000</Property>
        <Property name="minIdle">5</Property>
<UserStoreManager class="org.wso2.carbon.user.core.ldap.LDAPUserStoreManager">
        <Property name="ReadOnly">true</Property>
        <Property name="MaxUserNameListLength">100</Property>
        <Property name="ConnectionURL">ldap://</Property>
        <Property name="ConnectionName">cn=admin,dc=example,dc=com</Property>
        <Property name="ConnectionPassword">admin</Property>
        <Property name="UserSearchBase">ou=People,dc=example,dc=com</Property>
        <Property name="UserNameListFilter">(objectClass=inetOrgPerson)</Property>
        <Property name="UserNameAttribute">uid</Property>
        <Property name="ReadLDAPGroups">false</Property>
        <Property name="GroupSearchBase">ou=Groups,dc=example,dc=com</Property>
        <Property name="GroupSearchFilter">(objectClass=groupOfNames)</Property>
        <Property name="GroupNameAttribute">uid</Property>
        <Property name="MembershipAttribute">member</Property>
<AuthorizationManager class="org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager"></AuthorizationManager>

I followed this guide to configure my LDAP server up to Loggging: https://help.ubuntu.com/12.04/serverguide/openldap-server.html

Could you suggest what might be wrong?

The LDAP log is available at: http://pastebin.com/T9rFYEAW

share|improve this question

migrated from stackoverflow.com Aug 12 '12 at 16:27

This question came from our site for professional and enthusiast programmers.

please check if the user john exist in the LDAP. If exist, then check if the password is correct. –  SureshAtt Aug 11 '12 at 18:16
The user exists (it's the only user) and the password is correct, should the password be stored with an specific encryption algorithm? This is the script I used to populate the directory: pastebin.com/qBwrgBQj –  Rockiano Aug 11 '12 at 19:08

1 Answer 1

I presume you are using a 3.x.x. version of IS. Could you please check if the admin role that you have admin is defined in the LDAP server. Also, please make sure that you provided the correct value for the group search base property in user-mgt.xml

In the latest release (IS 4.5.0), the configuration is different than what you have pasted above. You may refer this [1], if you are trying the latest version.

[1] - http://pavithramadurangi.blogspot.ch/2013/09/configuring-openldap-as-external-user.html

share|improve this answer
I'm sorry but I'm not longer working on this and I'm unable to test it, but thanks. –  Marco Rivadeneyra Oct 18 '13 at 22:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.