Hi Doron, oxtrust.log should include the reason. Location of this log: /opt/tomcat/logs/oxtrust.log

/opt/tomcat/logs/oxtrust.log does not give any hints as to why I can't add a user. The file is basically filled with this: 2014-10-14 16:39:54,513 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation 2014-10-14 16:39:54,513 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished 2014-10-14 16:40:38,433 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Starting update of appliance status 2014-10-14 16:40:57,517 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation 2014-10-14 16:40:57,517 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished 2014-10-14 16:41:39,430 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Starting update of appliance status 2014-10-14 16:42:00,508 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation 2014-10-14 16:42:00,508 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished 2014-10-14 16:42:40,434 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Starting update of appliance status 2014-10-14 16:43:03,509 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation 2014-10-14 16:43:03,509 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished 2014-10-14 16:43:41,434 DEBUG [org.gluu.oxtrust.ldap.service.StatusCheckerTimer] Starting update of appliance status 2014-10-14 16:44:06,515 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Starting metadata validation 2014-10-14 16:44:06,515 DEBUG [org.gluu.oxtrust.ldap.service.MetadataValidationTimer] Metadata validation finished

It should. There should be some error in this log. You can try to "tail -f ~/oxtrust.log" while trying to add a new user from GUI.

You can use latest LDAP schema: [https://raw.github.com/GluuFederation/community-edition-setup/blob/master/static/opendj/101-ox.ldif](https://raw.github.com/GluuFederation/community-edition-setup/blob/master/static/opendj/101-ox.ldif) You should copy it into `/opt/opendj/config/schema/101-ox.ldif`. And restart opendj and tomcat services: `service opendj restart` `service tomcat restart`