Issue

• PicketLink is throwing the following LDAP exception when trying to match the IDM user in LDAP :

  org.picketlink.idm.common.exception.IdentityException:
   Cannot recognize identity object type by its DN: 
  cn=portaluser_administrator,cn=portaluser, ou=portalGroups, 
  dc=hds,dc=com
  
       at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.findIdentityObject(LDAPIdentityStoreImpl.java:836)
  
       at org.picketlink.idm.impl.store.ldap.LDAPIdentityStoreImpl.findIdentityObject(LDAPIdentityStoreImpl.java:1246)
  
       at 
  org.picketlink.idm.impl.repository.FallbackIdentityStoreRepository.findIdentityObject(FallbackIdentityStoreRepository.java:760)
  
       at org.picketlink.idm.impl.api.session.managers.RelationshipManagerImpl.findRelatedGroups(RelationshipManagerImpl.java:1264)
  
       at org.picketlink.idm.impl.api.session.managers.RelationshipManagerImpl.findRelatedGroups(RelationshipManagerImpl.java:1304)
  
       at org.exoplatform.services.organization.idm.GroupDAOImpl.findGroupsOfUser(GroupDAOImpl.java:594)
  

• The user exists, but is unable to authenticate