<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
        <table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
                <tbody>
                        <tr>
                                <td>
                                        <table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
                                                <tbody>
                                                        <tr>
                                                                <td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
                                                                        <h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
                                                                        <!-- To have a header image/logo replace the name below with your img tag -->
                                                                        <!-- Email clients will render the images when the message is read so any image -->
                                                                        <!-- must be made available on a public server, so that all recipients can load the image. -->
                                                                        <a href="https://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
                                                                </td>
                                                        </tr>
                                                        <tr>
                                                                <td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Problems with JBPM 5.3
</h3>
<span style="margin-bottom: 10px;">
created by <a href="https://community.jboss.org/people/chandrasachin16">Sachin Chandra</a> in <i>jBPM Development</i> - <a href="https://community.jboss.org/message/749671#749671">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>Hi All,       </p><p>      I have been working with JBPM 5.2 for quite sometime and currently started with 5.3. I had explored a link  ( <span style="text-decoration: underline;"><a class="jive-link-external-small" href="http://mswiderski.blogspot.in/2012/05/jbpm-53-brings-ldap-into-picture.html" target="_blank">http://mswiderski.blogspot.in/2012/05/jbpm-53-brings-ldap-into-picture.html</a></span> )  which tells that JBPM 5.3 can be integerated with LDAP .I had gone through the link and also explored the JBOSS AS 7 document for configuring with LDAP.I am trying to integerate JBPM 5.3 with Microsoft Active Directory, however I am facing some problems. As mentioned in the document I had configured my standalone.xml with the following :</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><security-domain name="jbpm-console" cache-type="default"></p><p>                    <authentication></p><p>                        <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required"></p><p>                            <module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/></p><p>                            <module-option name="java.naming.provider.url" value="ldap://IPAddress:389"/></p><p>                            <module-option name="java.naming.security.authentication" value="simple"/></p><p>                            <module-option name="bindDN" value="CN=Sachin Chandra,CN=Users,DC=performixpune,DC=com"/></p><p>                            <module-option name="bindCredential" value="myuser345"/></p><p>                            <module-option name="baseDN" value="CN=Users,DC=performixpune,DC=com"/></p><p>                            <module-option name="baseFilter" value="(sAMAccountName={0})"/></p><p>                            <module-option name="rolesCtxDN" value="CN=Users,DC=performixpune,DC=com"/></p><p>                            <module-option name="roleAttributeID" value="memberOf"/></p><p>                            <module-option name="roleAttributeIsDN" value="true"/></p><p>                            <module-option name="roleFilter" value="(member={1})"/></p><p>                            <module-option name="searchScope" value="SUBTREE_SCOPE"/></p><p>                            <module-option name="throwValidateError" value="true"/></p><p>                            <module-option name="allowEmptyPasswords" value="true"/></p><p>                        </login-module></p><p>                    </authentication></p><p> </security-domain></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>My Active directory ldif file is somewhat like given below  ----- :</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>dn: CN=Sachin Chandra,CN=Users,DC=performixpune,DC=com</p><p>changetype: add</p><p>objectClass: top</p><p>objectClass: person</p><p>objectClass: organizationalPerson</p><p>objectClass: user</p><p>cn: Sachin Chandra</p><p>sn: Chandra</p><p>givenName: Sachin</p><p>distinguishedName: CN=Sachin Chandra,CN=Users,DC=performixpune,DC=com</p><p>instanceType: 4</p><p>whenCreated: 20120711110150.0Z</p><p>whenChanged: 20120711110209.0Z</p><p>displayName: Sachin Chandra</p><p>uSNCreated: 163824</p><p>uSNChanged: 163830</p><p>name: Sachin Chandra</p><p>objectGUID:: BNoV31Y1eE6kBwd2Bks64w==</p><p>userAccountControl: 66048</p><p>badPwdCount: 0</p><p>codePage: 0</p><p>countryCode: 0</p><p>badPasswordTime: 129870781036451250</p><p>lastLogoff: 0</p><p>lastLogon: 129870781158638750</p><p>pwdLastSet: 129864781106588750</p><p>primaryGroupID: 513</p><p>objectSid:: AQUAAAAAAAUVAAAAVIqQajNW1nCni/tpyAQAAA==</p><p>accountExpires: 9223372036854775807</p><p>logonCount: 0</p><p>sAMAccountName: sachinc</p><p>sAMAccountType: 805306368</p><p>objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=performixpune,DC=com</p><p>dSCorePropagationData: 16010101000000.0Z</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>I am able to  start my server without any problems.My ear files are getting deployed but I am not able to login into my JBPM console .My server log shows the following error -------</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>13:01:18,842 INFO  [solder-servlet] (MSC service thread 1-1) Catch Integration for Servlets enabled</p><p>13:01:18,877 INFO  [org.jboss.web] (MSC service thread 1-1) registering web context: /drools-guvnor</p><p>13:01:19,052 INFO  [org.jboss.as.server.controller] (DeploymentScanner-threads - 2) Deployed "jbpm-human-task-war.war"</p><p>13:01:19,052 INFO  [org.jboss.as.server.controller] (DeploymentScanner-threads - 2) Deployed "jbpm-gwt-console.war"</p><p>13:01:19,053 INFO  [org.jboss.as.server.controller] (DeploymentScanner-threads - 2) Deployed "jbpm-gwt-console-server.war"</p><p>13:01:19,053 INFO  [org.jboss.as.server.controller] (DeploymentScanner-threads - 2) Deployed "jbpm-form-builder.war"</p><p>13:01:19,053 INFO  [org.jboss.as.server.controller] (DeploymentScanner-threads - 2) Deployed "drools-guvnor.war"</p><p>13:01:19,053 INFO  [org.jboss.as.server.controller] (DeploymentScanner-threads - 2) Deployed "designer.war"</p><p>13:02:53,430 ERROR [org.jboss.security.authentication.JBossCachedAuthenticationManager] (http-localhost-127.0.0.1-8080-2) Login failure: javax.security.auth.login.FailedLoginException: Password Incorrect/Password Required</p><p>    at org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:252) [picketbox-4.0.1.jar:4.0.1]</p><p>    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [:1.6.0_24]</p><p>    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) [:1.6.0_24]</p><p>    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) [:1.6.0_24]</p><p>    at java.lang.reflect.Method.invoke(Method.java:597) [:1.6.0_24]</p><p>    at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769) [:1.6.0_24]</p><p>    at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186) [:1.6.0_24]</p><p>    at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683) [:1.6.0_24]</p><p>    at java.security.AccessController.doPrivileged(Native Method) [:1.6.0_24]</p><p>    at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680) [:1.6.0_24]</p><p>    at javax.security.auth.login.LoginContext.login(LoginContext.java:579) [:1.6.0_24]</p><p>    at org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:411) [picketbox-infinispan-4.0.1.jar:4.0.1]</p><p>    at org.jboss.security.authentication.JBossCachedAuthenticationManager.authenticate(JBossCachedAuthenticationManager.java:345) [picketbox-infinispan-4.0.1.jar:4.0.1]</p><p>    at org.jboss.security.authentication.JBossCachedAuthenticationManager.isValid(JBossCachedAuthenticationManager.java:154) [picketbox-infinispan-4.0.1.jar:4.0.1]</p><p>    at org.jboss.as.web.security.JBossWebRealm.authenticate(JBossWebRealm.java:127) [jboss-as-web-7.0.2.Final.jar:7.0.2.Final]</p><p>    at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:280) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:372) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.jboss.as.web.NamingValve.invoke(NamingValve.java:57) [jboss-as-web-7.0.2.Final.jar:7.0.2.Final]</p><p>    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:154) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:362) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:667) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:952) [jbossweb-7.0.1.Final.jar:7.0.2.Final]</p><p>    at java.lang.Thread.run(Thread.java:662) [:1.6.0_24]</p><p>Caused by: java.lang.NullPointerException</p><p>    at javax.naming.NameImpl.<init>(NameImpl.java:264) [:1.6.0_24]</p><p>    at javax.naming.CompositeName.<init>(CompositeName.java:214) [:1.6.0_24]</p><p>    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358) [:1.6.0_24]</p><p>    at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267) [:1.6.0_24]</p><p>    at org.jboss.security.auth.spi.LdapExtLoginModule.bindDNAuthentication(LdapExtLoginModule.java:471) [picketbox-4.0.1.jar:4.0.1]</p><p>    at org.jboss.security.auth.spi.LdapExtLoginModule.createLdapInitContext(LdapExtLoginModule.java:431) [picketbox-4.0.1.jar:4.0.1]</p><p>    at org.jboss.security.auth.spi.LdapExtLoginModule.validatePassword(LdapExtLoginModule.java:310) [picketbox-4.0.1.jar:4.0.1]</p><p>    at org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:249) [picketbox-4.0.1.jar:4.0.1]</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>I am able to access the Active directory using a client tool( Active Directory tool ) but with JBOSS it's not working . I have tried with different things but not able to trace what is the cause of this .Can anybody please guide me where  am I going wrong.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Regards</p><p>Sachin</p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="https://community.jboss.org/message/749671#749671">going to Community</a></p>
        <p style="margin: 0;">Start a new discussion in jBPM Development at <a href="https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2035">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>