Hi,

I'm having trouble with the LDAP authentification available in SRM v6.3. Even after having configured the "server.xml" file located in "\opt\APG\Web-Servers\Tomcat\Default\conf" with the AD informations I have, the AD authentification doesn't seem to work.

I've heard that if you want to use an AD account in SRM, you have to create first this account in SRM, assign it a role, and a profile and then try to log in with this account. Is that right?

Unfortunately, the existing logs in Centralized Management aren't making any mention of the problem. It just says that attempt to login to realm with the AD account has failed. There is no more information about this fail, so I don't get it... Am I missing something?

Here is the part of my "server.xml" file concerning the LDAP Authentification:

connectionURL="ldap://IP-of-my-Primary-AD-Server:389"              alternateURL="ldap://IP-of-my-Secondary-AD-Server:389"                         connectionName="CN=ServiceAccountToBrowseAD,OU=Organization01,OU=Organization02,              DC=mycompany,DC=com"              connectionPassword="Password-of-ServiceAccountToBrowseAD"              userSearch="(sAMAccountName={0})"              userBase="OU=OrganizationUser01,DC=mycompany,DC=com"              referrals="follow"              derefAliases="always"              userSubtree="true"  />

After having completed this file, I restart all the SRM services (just to be sure everything is ok) and I try to log in using an account located in the OU "OrganizationUser01" of my AD (the account with which I try to log in has been previously created in SRM with default profile, and all the roles that exist in SRM).