Hello folks, I need some help with a topic that has been discussed very often on the mailing list - LDAP. I've tried going through most of the posts on the mailing list but since I am not a networking guy, I've had lot of trouble understanding the basic terminology involved with LDAP & AD. The AD that we've on production environment is available only through SSL which I know will be a bigger challenge to configure with XWiki. Hence, to start with, I would like to connect my XWiki with the MS Active Directory I setup on my test machine. With some help, I managed to create a Active Directory. Also, I am able to connect to this AD using Apache Directory Browser. So this confirms that the AD is working fine. Both the AD and XWiki are installed on the same machine. Now, I tried changing the xwiki.cfg LDAP properties but I am unable to login using any of the users I created in AD. Moreover, I lost my default Admin credentials for the Wiki (UN:Admin & PW:admin doesn't work anymore). The configuration is as follows: xwiki.authentication.ldap=1 xwiki.authentication.ldap.server=127.0.0.1 xwiki.authentication.ldap.port=389 xwiki.authentication.ldap.base_DN=dc=dilip,dc=com xwiki.authentication.ldap.bind_DN=cn={0},dc=dilip,dc=com xwiki.authentication.ldap.bind_pass={1} xwiki.authentication.ldap.UID_attr=cn xwiki.authentication.ldap.fields_mapping=name=cn,last_name=sn,first_name=giv enName,fullname=displayName,mail=cn,ldap_dn=dn And the AD structure can be loosely described as follows: dilip.com -----Builtin -----Computers -----Domain Controllers -----ForeignSecurityPrincipals -----Users All my users are listed under the "Users" node including Windows administrator called "Administrator" with password "redhat". Does the {0} need to be replaced with an actual username & {1} replaced with actual password. Could someone please have a look at my configuration settings & probably suggest some changes. I am sure I've missed something somewhere. Thank you for your valuable time.