Active Directory

Configuration

• OpenKM 5.0 ( valid for more recent versions )
• OpenKM 4.1 ( valid for older versions )

Enable debug on login process

It's good practice to enable login debugging when you make any change to the authentication mechanism. Edit the file /server/default/conf/jboss-log4j.xml and add the category ( remember you must restart jboss for it to take effect ):

<category name="org.jboss.security">
    <priority value="TRACE" class="org.jboss.logging.XLevel"/>
</category>

or

<category name="org.jboss.security">
    <priority value="TRACE" class="org.jboss.logging.XLevel"/>
    <appender-ref ref="SECURITY_F"/>
</category>

<appender name="SECURITY_F" class="org.jboss.logging.appender.DailyRollingFileAppender">
    <param name="Append" value="true"/>
    <param name="DatePattern" value="'.'yyyy-MM-dd"/>
    <param name="File" value="${jboss.server.home.dir}/log/jboss.security.log"/>
    <layout class="org.apache.log4j.PatternLayout">
        <param name="ConversionPattern" value="%d{ABSOLUTE} %-5p [%c] %m%n"/>
    </layout>
</appender>

More info at JBoss and JAAS debug.

Active directory utilities

We recommend to take a look at these tools:

• Apache Directory Studio
• Active Directory Explorer Utility

See also:

• Testing LDAP configuration
• Forum: Usuario administrador LDAP v.4
• JBoss and JAAS debug
• LDAP authentication using LDAPExtUserModuleImpl is case-inse
• LdapExtLoginModule
• LdapLoginModule
• Problems with LdapExtLoginModule