<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <title>LDAP: error code 49 - INVALID_CREDENTIALS</title>
  <link rel="self" href="https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=4384542" />
  <subtitle>LDAP: error code 49 - INVALID_CREDENTIALS</subtitle>
  <id>https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=4384542</id>
  <updated>2026-04-08T00:07:19Z</updated>
  <dc:date>2026-04-08T00:07:19Z</dc:date>
  <entry>
    <title>RE: LDAP: error code 49 - INVALID_CREDENTIALS</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=32501675" />
    <author>
      <name>Mohamed Faisal</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=32501675</id>
    <updated>2013-12-17T06:26:23Z</updated>
    <published>2013-12-17T06:26:23Z</published>
    <summary type="html">Hi Muhtaroglu,&lt;br /&gt;&lt;br /&gt;I am getting same error.&lt;br /&gt;what modification needs to be done in portal-ext.properties?&lt;br /&gt;&lt;br /&gt;Regards,&lt;br /&gt;Faisal</summary>
    <dc:creator>Mohamed Faisal</dc:creator>
    <dc:date>2013-12-17T06:26:23Z</dc:date>
  </entry>
  <entry>
    <title>RE: LDAP: error code 49 - INVALID_CREDENTIALS</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=4394513" />
    <author>
      <name>ilke Muhtaroglu</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=4394513</id>
    <updated>2009-12-21T17:42:06Z</updated>
    <published>2009-12-21T17:42:06Z</published>
    <summary type="html">It worked. I was getting the error because my password was not saved in plain text. It was hashed but looks like plain...&lt;br /&gt;&lt;br /&gt;I modified ext.properties file and after debugging and controlling whether required is set. I found that LDAPAuth.java (authenticate()) and required() are called and now functions properly.&lt;br /&gt;&lt;br /&gt;Thanks for the help.</summary>
    <dc:creator>ilke Muhtaroglu</dc:creator>
    <dc:date>2009-12-21T17:42:06Z</dc:date>
  </entry>
  <entry>
    <title>RE: LDAP: error code 49 - INVALID_CREDENTIALS</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=4394508" />
    <author>
      <name>Hubert Felber</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=4394508</id>
    <updated>2009-12-21T17:38:17Z</updated>
    <published>2009-12-21T17:38:17Z</published>
    <summary type="html">I would suggest you to debug LDAPAuth.java (authenticate()) to see what&amp;#39;s going on.&lt;br /&gt;Do you authenticate by screenname or email address? Is your search filter in portal-ext.properties set?&lt;br /&gt; ldap.auth.search.filter=(uid=@screen_name@)&lt;br /&gt;&lt;br /&gt;hint: if you change the ext.properties file after the initial run, you have to do the changes in the portal, because these settings overwrite the properties settings.&lt;br /&gt;&lt;br /&gt;Regards&lt;br /&gt;hub&lt;br /&gt;&lt;br /&gt;p.s.&lt;br /&gt;test@liferay.com is authenticated against LDAP and probly does not exist in the LDAP directory.&lt;br /&gt;as far as I know, LDAP authentication is skipped if the user is omni admin. Is your company web id still &amp;#34;liferay.com&amp;#34;?&lt;br /&gt;&lt;br /&gt;company.default.web.id=liferay.com</summary>
    <dc:creator>Hubert Felber</dc:creator>
    <dc:date>2009-12-21T17:38:17Z</dc:date>
  </entry>
  <entry>
    <title>LDAP: error code 49 - INVALID_CREDENTIALS</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=4384541" />
    <author>
      <name>ilke Muhtaroglu</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=4384541</id>
    <updated>2009-12-17T11:27:59Z</updated>
    <published>2009-12-17T11:27:59Z</published>
    <summary type="html">From the browser(Liferay Contraol panel) I can connect to Apache DS and list the users successfuly !&lt;br /&gt;&lt;br /&gt;But when I try to login with one of that available person. I get following error :&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;09:09:18,245 ERROR [LDAPAuth:299] Failed to bind to the LDAP server: [LDAP: error code 49 - INVALID_CREDENTIALS: Bind failed: Cannot authenticate user cn=janesmith,dc=example,dc=com]&lt;br /&gt;&lt;br /&gt;what i was doing is following the simple LDAP guide at page &amp;#34;http://docs.liferay.com/portal/4.2/official/liferay-installation-guide-4.2/multipage/ch05s02.html&amp;#34; ! &lt;br /&gt;&lt;br /&gt;Any suggestion or idea ?&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;AND&lt;br /&gt;&lt;br /&gt;this is the exception thrown when I login with test@liferay.com&lt;br /&gt;&lt;br /&gt;here there is ou=users at dn !&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;12:04:10,088 ERROR [PortalLDAPUtil:256] javax.naming.NameNotFoundException: [LDAP: error code 32 - NO_SUCH_OBJECT: failed for     Add Request :&lt;br /&gt;ClientEntry&lt;br /&gt;    dn: cn=test,ou=users,dc=example,dc=com&lt;br /&gt;    objectclass: top&lt;br /&gt;    objectclass: person&lt;br /&gt;    objectclass: inetOrgPerson&lt;br /&gt;    objectclass: organizationalPerson&lt;br /&gt;    mail: test@liferay.com&lt;br /&gt;    sn: Test&lt;br /&gt;    cn: test&lt;br /&gt;    givenName: Test&lt;br /&gt;: Parent ou=users,dc=example,dc=com not found]; remaining name &amp;#39;cn=test,ou=users,dc=example,dc=com&amp;#39;&lt;br /&gt;javax.naming.NameNotFoundException: [LDAP: error code 32 - NO_SUCH_OBJECT: failed for     Add Request :&lt;br /&gt;ClientEntry&lt;br /&gt;    dn: cn=test,ou=users,dc=example,dc=com&lt;br /&gt;    objectclass: top&lt;br /&gt;    objectclass: person&lt;br /&gt;    objectclass: inetOrgPerson&lt;br /&gt;    objectclass: organizationalPerson&lt;br /&gt;    mail: test@liferay.com&lt;br /&gt;    sn: Test&lt;br /&gt;    cn: test&lt;br /&gt;    givenName: Test&lt;br /&gt;: Parent ou=users,dc=example,dc=com not found]; remaining name &amp;#39;cn=test,ou=users,dc=example,dc=com&amp;#39;</summary>
    <dc:creator>ilke Muhtaroglu</dc:creator>
    <dc:date>2009-12-17T11:27:59Z</dc:date>
  </entry>
</feed>
