Hi, All,

I solved the problem by replacing the "ldapfiles" directory under
test/testserver/ldap/ with the "good" backed up ones (you can use your
own backups or the ones from weblogic test/testserver/ldap/backup),
the problem was solved straightaway.

there may be some corrupted ldap data in that directory.

Cheers

Feng Xue

martinxue6@yahoo.com (feng) wrote in message news:...
> hi,
>
> we have a problem when login from the admin console, the
> username/password (this user belongs to Administrators group in the
> realm) are stored in the NovellRealm and the weblogic start up
> scripts use this username/password to start up the server, I mean the
> weblogic can authenticate this user. but it can not authorize it,
> because from the log file, it does not have return any role back, here
> are the snapshot of logs file that contains the error:
>
> <7/10/2004 07:55:05 AM EST> <000000>
> > Principal = class
> weblogic.security.principal.WLSUserImpl("wlproxy")
> Principal = class
> weblogic.security.principal.WLSGroupImpl("Administrators")
> Resource: type=, application=, server=prdmemberserver,
> action=boot>
> <7/10/2004 07:55:05 AM EST> <000000> > RoleMapper getRoles(): input arguments:
> Subject: 2
> Principal = class
> weblogic.security.principal.WLSUserImpl("wlproxy")
> Principal = class
> weblogic.security.principal.WLSGroupImpl("Administrators")
>
> Resource: type=, application=, server=prdmemberserver,
> action=boot>
> <7/10/2004 07:55:05 AM EST> <000000> > RoleMapper getRoles(): returning roles: >
> <7/10/2004 07:55:05 AM EST> <000000>
> > Principal = class
> weblogic.security.principal.WLSUserImpl("wlproxy")
> Principal = class
> weblogic.security.principal.WLSGroupImpl("Administrators")
> Resource: type=, application=, server=prdmemberserver,
> action=boot roles.>
> <7/10/2004 07:55:05 AM EST> <000000> > Authorization isAccessAllowed(): input arguments:>
> <7/10/2004 07:55:05 AM EST> <000000> <
> Subject: 2
> Principal = class
> weblogic.security.principal.WLSUserImpl("wlproxy")
> Principal = class
> weblogic.security.principal.WLSGroupImpl("Administrators")
> >
>
> It is very wierd ...
>
> does anyone know what the "getRoles()" method need (i.e. does it need
> the roleMapper files), as it returns empty roles, which it supposes to
> return "Admin".
>
>
>
> Thanks in advance.
>
>
> Feng