Problem

The StackState login page shows an 'Invalid credentials for user .. ' after logging in with LDAP based credentials. Also, in /opt/stackstate/var/log/stackstate.log the following error is logged:

  ... ERROR c.s.security.authenticators.StackstateLdapAuthenticator - Invalid credentials for user <username>
org.pac4j.core.exception.CredentialsException: DN cannot be null
  

Cause

The provided username is not found in the LDAP search's user query.

Affects

• StackState releases with LDAP configured 

Solution

Verify the userQuery settings in the LDAP configuration section in application_stackstate.conf. The userQuery.parameters must match the LDAP tree as defined in the Active Directory/LDAP server. The setting usernameKey must match the attribute within the LDAP query results. The value of the usernameKey field is matched against what is provided on the login page.