Users have to be defined in sonar database. Passwords are validated from an external LDAP repository.