I found what you want to say. User entry should contain: --- cut --- dn: cn=Test User,ou=People, dc=foo,dc=bar ... sn: true ... --- cut --- I put that and error in the jboss output "user not activated" did not appear, but the web interface still not able to check password; " Login Failed.....". How can I use other attribute, different than "sn" to mark user as active? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4141736#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...