Page Comparison

Use the The information in this page can be used to help troubleshoot LDAP issues.

References

• https://tomcat.apache.org/tomcat-7.0-doc/realm-howto.html#JNDIRealm
• https://wiki.apache.org/tomcat/JNDI_HowTo
• https://www.ibm.com/support/knowledgecenter/SSZH4A_6.0.0/com.ibm.worklight.help.doc/appcenter/r_ac_tom_ldap.html

Debugging

...

You have to edit the $CATALINA_HOME/conf/logging.properties file. 

Insert the following lines (in blue):

############################################################
# Facility specific properties.
# Provides extra control for each logger.
############################################################
# This would turn on trace-level for everything 

# the possible levels are: SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST or ALL 

#org.apache.catalina.level = ALL 

#org.apache.catalina.handlers = 2localhost.org.apache.juli.FileHandler 

org.apache.catalina.realm.level = ALL 

org.apache.catalina.realm.useParentHandlers = true 

org.apache.catalina.authenticator.level = ALL 

org.apache.catalina.authenticator.useParentHandlers = true

org.apache.catalina.core.ContainerBase.[Catalina].[localhost].level = INFO
org.apache.catalina.core.ContainerBase.[Catalina].[localhost].handlers = 2localhost.org.apache.juli.FileHandler

...

Enabling UI Service LDAP Trace

To enable trace logging edit the UI service log4j configuration file : /app/ui/MonTier-UI/lib/log4j2.xml

Change the "MNTR_CUSTOM_ROLES" logger to level="trace" as describe below :

<Logger name="MNTR_CUSTOM_ROLES" level="trace" additivity="false">
		<AppenderRef ref="LDAPLOG"/>
</Logger>

The output log file will be created in the UI service log directory : /logs/ui with the name ldapLog.log

Common Issues

Referrals

You might get the following error message:

...