IBM Support

Login fails because Virtual Member Manager cannot find user (CWWIM4537E)

Technote (troubleshooting)


WebSphere Portal relies on Virtual Member Manager (VMM) for authentication when configured for federated LDAP security. VMM cannot find users when incorrectly configured. Users' attempts to log in fail.


Users cannot log in. Instead they receive:

EJPAK0004W: Login failed. Please enter a valid user ID and password.

Tracing the failure shows:

... LoginBridge   > checkPassword ENTRY inputUser = "user1", inputPassword = *
... LdapConnectio > searchEntities ENTRY "dc=ibm,dc=com" (&(objectClass=...)(uid=user1)) null 2 [LoginAccount, PersonAccount] [] false false
... LdapConnectio > JNDI_CALL search(...) ENTRY "dc=ibm,dc=com" (&(objectClass...)(uid=user1)) ...
... LdapConnectio < JNDI_CALL ... RETURN...
... LdapConnectio < searchEntities RETURN []
... exception     1 loginImpl                         CWWIM4537E No principal is found from the 'user1' principal name.... at at


VMM's configuration does not allow it to find the users in the LDAP.

Resolving the problem

Recreate and trace the failure. Determine the search criteria VMM uses by referencing the following line in trace.log:

LdapConnectio > JNDI_CALL search(...) ENTRY "dc=ibm,dc=com" (&(|(objectClass...))(uid=user1))

Use ldapsearch to verify this search criteria. In this example, "dc=ibm,dc=com" is the base DN for the search and "(&(|(objectClass...))(uid=user1))" is the search filter.

Correct VMM's configuration as needed. In this example, one of the following may need to be corrected: the repository's baseEntries, or PersonAccount's loginProperties, searchFilter, or objectClasses (from <profile>/config/cells/<cell name>/wim/config/wimconfig.xml):

<config:repositories xsi:type="config:LdapRepositoryType" ... id="ibm" ...>
   <config:baseEntries name="dc=ibm,dc=com" nameInRepository="dc=ibm,dc=com"/>
    <config:ldapEntityTypes name="PersonAccount" searchFilter="">

You may use WebSphere Portal configuration tasks to update VMM's configuration. You may also modify wimconfig.xml directly. If you choose to edit the file directly, back it up first and synchronize if clustered. Restart WebSphere Portal to pick up configuration changes (restart node agent and deployment manager as well, if clustered).

Related information

Managing the User Registry
Login MustGather

Document information

More support for: WebSphere Portal
VMM - Virtual Member Manager

Software version: 6.1

Operating system(s): AIX, HP-UX, IBM i, Linux, Solaris, Windows, z/OS

Software edition: Enable, Express, Extend, Server

Reference #: 1426941

Modified date: 19 April 2010

Translate this page: