Problem: User Authentication Failed

Solution: Verify operation of Directory Server, availability of user, baseDN, and LDAP service property values.

To Troubleshoot Authentication Problems

1. Verify that the Directory Server is running.

   For example:

   # /usr/bin/ps -ef | grep slapd ./ns-slapd -D /var/opt/mps/serverroot/slapd-host1 -i /var/opt/mps/serverroot/slapd-host1

2. If necessary, start Directory Server using one of the following commands:

   For example, if Directory Server 5.2 is the default version:

   On Solaris: /usr/sbin/directoryserver start

   On Linux: /opt/sun/sbin/directoryserver start

3. Check that the user ID in question exists in the directory.

   For example:

   ldapsearch -h host -p port -D dn -w password -s sub -b basedn "uid=uid"

   This will return the user entry, if it exists, or ’No such object’ if the entry does not exist.

4. Check the uwcauth.properties file is using the correct baseDN and credentials.

   See the following for more information:

   Communications Express Configuration Files in Sun Java System Communications Express 6 2005Q4 Administration Guide

5. In an Access Manager deployment, check that the LDAP service property values are valid.

   1. Log in to the Access Manager console as amAdmin.

   2. Under Identity Management, click the appropriate organization.

   3. Choose Services from the View menu.

      The services list should have at a minimum Authentication Configuration, and Authentication Modules Core and LDAP. Click the LDAP Properties arrow and verify the information that appears in the Data pane.

   4. If the service is not added, continue with the steps that follow.

   5. Click Add in the Navigation pane.

      A list of available services is displayed in the Data pane.

   6. Select the checkbox for Authentication Configuration and click OK.

      The Authentication Configuration service will appear in the Navigation pane assuring you that it has been added.

   7. Click the Authentication Configuration Properties arrow.

      The Service Instance List is displayed in the in the Data pane.

   8. Click New to add the service instance.

      Type the name and click Submit.