You have | <option> | <name>externalContextJndiName</name> | <value>external/ldap/jboss</value> | </option> | uncommented. Using this all other LDAP connection options are ignored. Did you read the docs? http://docs.jboss.com/jbportal/v2.6/referenceGuide/html/ldap.html#d0e6811 If you configure all modules in ldap_identity-config.xml you don't need to change login-config.xml to authenticate. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4087800#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...