title: Using WSO2 Identity Server with OpenLDAP
body: <p>While trying to use WSO2 Identity Server with  OpenLDAP after following the steps on:
  <a href="http://wso2.org/project/solutions/identity/3.2.3/docs/user-core/admin_guide.html#LDAP" rel="nofollow">http://wso2.org/project/solutions/identity/3.2.3/docs/user-core/admin_guide.html#LDAP</a></p>
  
  <p>I get this message, when trying to authenticate:</p>
  
  <pre><code>TID: [0] [WSO2 Identity Server] [2012-07-30 13:30:34,088]  WARN {org.wso2.carbon.core.services.authentication.AuthenticationAdmin} -  None active tenant trying to sign in.example.com {org.wso2.carbon.core.services.authentication.AuthenticationAdmin}
  TID: [0] [WSO2 Identity Server] [2012-07-30 13:30:34,088] ERROR {org.wso2.carbon.core.services.authentication.AuthenticationAdmin} -  Your account is not active. Please activate your account first. {org.wso2.carbon.core.services.authentication.AuthenticationAdmin}
  org.wso2.carbon.core.common.AuthenticationException: Your account is not active. Please activate your account first.
      at org.wso2.carbon.core.services.authentication.AuthenticationAdmin.login(AuthenticationAdmin.java:79)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at org.apache.axis2.rpc.receivers.RPCUtil.invokeServiceClass(RPCUtil.java:212)
      at org.apache.axis2.rpc.receivers.RPCMessageReceiver.invokeBusinessLogic(RPCMessageReceiver.java:117)
      at org.apache.axis2.receivers.AbstractInOutMessageReceiver.invokeBusinessLogic(AbstractInOutMessageReceiver.java:40)
      at org.apache.axis2.receivers.AbstractMessageReceiver.receive(AbstractMessageReceiver.java:110)
      at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:181)
      at org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:172)
      at org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:146)
      at org.wso2.carbon.core.transports.CarbonServlet.doPost(CarbonServlet.java:199)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
      at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)
      at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
      at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:67)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
      at org.wso2.carbon.bridge.BridgeServlet.service(BridgeServlet.java:164)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
      at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:240)
      at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:164)
      at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
      at org.wso2.carbon.server.CarbonStuckThreadDetectionValve.invoke(CarbonStuckThreadDetectionValve.java:154)
      at org.wso2.carbon.server.TomcatServer$1.invoke(TomcatServer.java:254)
      at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:563)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:399)
      at org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.java:396)
      at org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:356)
      at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1534)
      at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
      at java.lang.Thread.run(Thread.java:662)
  TID: [] [WSO2 Identity Server] [2012-07-30 13:30:34,100] ERROR {org.wso2.carbon.authenticator.proxy.AuthenticationAdminClient} -  Error occurred while logging in {org.wso2.carbon.authenticator.proxy.AuthenticationAdminClient}
  org.apache.axis2.AxisFault: Your account is not active. Please activate your account first.
      at org.apache.axis2.util.Utils.getInboundFaultFromMessageContext(Utils.java:531)
      at org.apache.axis2.description.OutInAxisOperationClient.handleResponse(OutInAxisOperation.java:375)
      at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:421)
      at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229)
      at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
      at org.wso2.carbon.authenticator.stub.AuthenticationAdminStub.login(AuthenticationAdminStub.java:659)
      at org.wso2.carbon.authenticator.proxy.AuthenticationAdminClient.login(AuthenticationAdminClient.java:64)
      at org.wso2.carbon.ui.DefaultCarbonAuthenticator.authenticate(DefaultCarbonAuthenticator.java:142)
      at org.wso2.carbon.ui.DefaultCarbonAuthenticator.authenticate(DefaultCarbonAuthenticator.java:85)
      at org.wso2.carbon.ui.CarbonSecuredHttpContext.handleSecurity(CarbonSecuredHttpContext.java:387)
      at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:86)
      at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
      at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:67)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
      at org.wso2.carbon.bridge.BridgeServlet.service(BridgeServlet.java:164)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
      at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:240)
      at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:164)
      at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
      at org.wso2.carbon.server.CarbonStuckThreadDetectionValve.invoke(CarbonStuckThreadDetectionValve.java:154)
      at org.wso2.carbon.server.TomcatServer$1.invoke(TomcatServer.java:254)
      at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:563)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:399)
      at org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.java:396)
      at org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:356)
      at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1534)
      at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
      at java.lang.Thread.run(Thread.java:662)
  TID: [] [WSO2 Identity Server] [2012-07-30 13:30:34,105] ERROR {org.wso2.carbon.ui.CarbonSecuredHttpContext} -  error occurred while login {org.wso2.carbon.ui.CarbonSecuredHttpContext}
  org.wso2.carbon.core.common.AuthenticationException: Exception occured
      at org.wso2.carbon.ui.DefaultCarbonAuthenticator.authenticate(DefaultCarbonAuthenticator.java:87)
      at org.wso2.carbon.ui.CarbonSecuredHttpContext.handleSecurity(CarbonSecuredHttpContext.java:387)
      at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:86)
      at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
      at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:67)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
      at org.wso2.carbon.bridge.BridgeServlet.service(BridgeServlet.java:164)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
      at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:240)
      at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:164)
      at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:164)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100)
      at org.wso2.carbon.server.CarbonStuckThreadDetectionValve.invoke(CarbonStuckThreadDetectionValve.java:154)
      at org.wso2.carbon.server.TomcatServer$1.invoke(TomcatServer.java:254)
      at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:563)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:399)
      at org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.java:396)
      at org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:356)
      at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1534)
      at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
      at java.lang.Thread.run(Thread.java:662)
  Caused by: org.apache.axis2.AxisFault: Exception occured
      at org.wso2.carbon.ui.DefaultCarbonAuthenticator.authenticate(DefaultCarbonAuthenticator.java:150)
      at org.wso2.carbon.ui.DefaultCarbonAuthenticator.authenticate(DefaultCarbonAuthenticator.java:85)
      ... 25 more
  Caused by: org.wso2.carbon.core.common.AuthenticationException: org.apache.axis2.AxisFault: Your account is not active. Please activate your account first.
      at org.wso2.carbon.authenticator.proxy.AuthenticationAdminClient.login(AuthenticationAdminClient.java:70)
      at org.wso2.carbon.ui.DefaultCarbonAuthenticator.authenticate(DefaultCarbonAuthenticator.java:142)
      ... 26 more
  Caused by: org.apache.axis2.AxisFault: Your account is not active. Please activate your account first.
      at org.apache.axis2.util.Utils.getInboundFaultFromMessageContext(Utils.java:531)
      at org.apache.axis2.description.OutInAxisOperationClient.handleResponse(OutInAxisOperation.java:375)
      at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:421)
      at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229)
      at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
      at org.wso2.carbon.authenticator.stub.AuthenticationAdminStub.login(AuthenticationAdminStub.java:659)
      at org.wso2.carbon.authenticator.proxy.AuthenticationAdminClient.login(AuthenticationAdminClient.java:64)
      ... 27 more
  </code></pre>
  
  <p>My user-mgt.xml is:</p>
  
  <pre><code>&lt;UserManager&gt;
      &lt;Realm&gt;
          &lt;Configuration&gt;
                  &lt;AdminRole&gt;admin&lt;/AdminRole&gt;
                  &lt;AdminUser&gt;
                       &lt;UserName&gt;admin@example.com&lt;/UserName&gt;
                       &lt;Password&gt;admin&lt;/Password&gt;
                  &lt;/AdminUser&gt;
              &lt;EveryOneRoleName&gt;everyone&lt;/EveryOneRoleName&gt; &lt;!-- By default users in this role sees the registry root --&gt;
              &lt;ReadOnly&gt;true&lt;/ReadOnly&gt;
              &lt;MaxUserNameListLength&gt;500&lt;/MaxUserNameListLength&gt;
              &lt;Property name="url"&gt;jdbc:h2:repository/database/WSO2CARBON_DB&lt;/Property&gt;
              &lt;Property name="userName"&gt;wso2carbon&lt;/Property&gt;
              &lt;Property name="password"&gt;wso2carbon&lt;/Property&gt;
              &lt;Property name="driverName"&gt;org.h2.Driver&lt;/Property&gt;
              &lt;Property name="maxActive"&gt;50&lt;/Property&gt;
              &lt;Property name="maxWait"&gt;60000&lt;/Property&gt;
              &lt;Property name="minIdle"&gt;5&lt;/Property&gt;
      &lt;/Configuration&gt;
      &lt;UserStoreManager class="org.wso2.carbon.user.core.ldap.LDAPUserStoreManager"&gt;
              &lt;Property name="ReadOnly"&gt;true&lt;/Property&gt;
              &lt;Property name="MaxUserNameListLength"&gt;100&lt;/Property&gt;
              &lt;Property name="ConnectionURL"&gt;ldap://192.168.81.128:389&lt;/Property&gt;
              &lt;Property name="ConnectionName"&gt;uid=admin@example.com,ou=users,dc=maxcrc,dc=com&lt;/Property&gt;
              &lt;Property name="ConnectionPassword"&gt;admin&lt;/Property&gt;
              &lt;Property name="UserSearchBase"&gt;ou=users,dc=maxcrc,dc=com&lt;/Property&gt;
              &lt;Property name="UserNameListFilter"&gt;(objectClass=person)&lt;/Property&gt;
              &lt;Property name="UserNameAttribute"&gt;uid&lt;/Property&gt;
              &lt;Property name="ReadLDAPGroups"&gt;false&lt;/Property&gt;
              &lt;Property name="GroupSearchBase"&gt;ou=system,dc=maxcrc,dc=com&lt;/Property&gt;
              &lt;Property name="GroupSearchFilter"&gt;(objectClass=groupOfNames)&lt;/Property&gt;
              &lt;Property name="GroupNameAttribute"&gt;cn&lt;/Property&gt;
              &lt;Property name="MembershipAttribute"&gt;member&lt;/Property&gt;
      &lt;/UserStoreManager&gt;
      &lt;AuthorizationManager class="org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager"&gt;&lt;/AuthorizationManager&gt;
      &lt;/Realm&gt;
  &lt;/UserManager&gt;
  </code></pre>
  
  <p>Can you give any suggestions as to where the error might be?</p>
  
  <p>The only user on my OpenLDAP installation is admin@example.com with password admin</p>