Internal Auth with LDAP User Name Attribute

[Max DiOrio]

We were acquired a year ago and are just getting around to migrating servers between the old and new domains. As such, all user names are now different.

To ease the migration, we are testing keeping the username the same by adding an Internal Auth with LDAP provider pointing to the new domain. We added the user's login username (old email address) to the extensionAttribute10 field in AD and have configured the new authentication provider to look at this field by setting "User Name Attribute" to extensionAttribute10.

When we go to log in, we get the following error:

user@olddomain.com tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

We're also seeing a large number of localhost login failures relating to search login, event login and membership login.

'Confluence - localhost - ad0db1d5-939d-3380-834b-c887d22f6f0a' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

Any ideas on why this doesn't work? I figured it'd be extremely simple to do it this way.

Thanks for your help!

Max

[Tiago Comasseto]

Hi Max,

This message indicate that the user is not member of any group with permission to log in JIRA (see this doc)

user@olddomain.com tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

Try to make sure that the user belogs to at least one group with the appropriated permission

Cheers