How to setup Jira with Microsoft AD

[Ahmed Ayoub]

Trying to add the AD to Confluence..  I was already very successful doing that with Jira Service Desk.. but I have hit a kind of a snag when doing so for Confluence.. as soon as i add all my users, I get the following page:

Oops - an error has occurred

 System Error

A system error has occurred — our apologies!

For immediate troubleshooting, consult our knowledge base for a solution.

If you would like to receive support from Atlassian's support team, ask your Confluence administrator to create a support issue on Atlassian's support system with the following information:

1. a description of your problem and what you were doing at the time it occurred
2. a copy of the error and system information found below
3. a copy of the application logs (if possible).

Your Confluence administrator can use the support request form to create a support ticket which will include this information.

We will respond as promptly as possible.
Thank you!

Return to site homepage…

Cause

Stack Trace:[hide]

i dont even know what to do, or which logs to look into. i am very new to this, please help :)

[Ahmed Ayoub]

Here's an image of how my settings are.  

[JP _AC Bielefeld Leader_]

Could you post your Jira AD configuration? Is it exactly the same? I suggest, adding User & Group DN to filter on them. How many users are in the AD?

[Ahmed Ayoub]

Sorry Jan, this went to my Junk Mail and I gave up on it  as it was not a priority... 
But let me post you my AD configuration...:

=== Current user ===
Directory ID: 98305
Username: admin
Display name: admin
Email address: administrator@XXXX.org

=== Directories configured ===
Directory ID: 98305
Name: Confluence Internal Directory
Active: true
Type: INTERNAL
Created date: 2018-11-07 16:02:21.0
Updated date: 2018-11-07 16:02:21.0
Allowed operations: [DELETE_ROLE, CREATE_USER, UPDATE_GROUP, CREATE_ROLE, UPDATE_USER_ATTRIBUTE, UPDATE_GROUP_ATTRIBUTE, CREATE_GROUP, UPDATE_ROLE, DELETE_USER, DELETE_GROUP, UPDATE_USER, UPDATE_ROLE_ATTRIBUTE]
Implementation class: com.atlassian.crowd.directory.InternalDirectory
Encryption type: atlassian-security
Attributes:
"user_encryption_method": "atlassian-security"

Directory ID: 1015809
Name: Active Directory
Active: true
Type: CONNECTOR
Created date: 2018-11-09 13:49:22.0
Updated date: Thu Dec 06 10:04:49 CET 2018
Allowed operations: [UPDATE_GROUP_ATTRIBUTE, UPDATE_USER_ATTRIBUTE]
Implementation class: com.atlassian.crowd.directory.MicrosoftActiveDirectory
Encryption type: sha
Attributes:
"com.atlassian.crowd.directory.sync.issynchronising": "false"
"com.atlassian.crowd.directory.sync.lastdurationms": "16"
"com.atlassian.crowd.directory.sync.laststartsynctime": "1544087089277"
"crowd.sync.group.membership.after.successful.user.auth.enabled": "only_when_first_created"
"crowd.sync.incremental.enabled": "true"
"directory.cache.synchronise.interval": "3600"
"ldap.basedn": "DC=XXXXfund,DC=org"
"ldap.connection.timeout": "10000"
"ldap.external.id": "objectGUID"
"ldap.filter.expiredUsers": "true"
"ldap.group.description": "description"
"ldap.group.filter": "(objectCategory=Group)"
"ldap.group.name": "cn"
"ldap.group.objectclass": "group"
"ldap.group.usernames": "member"
"ldap.local.groups": "false"
"ldap.nestedgroups.disabled": "true"
"ldap.pagedresults": "true"
"ldap.pagedresults.size": "1000"
"ldap.pool.timeout": "0"
"ldap.propogate.changes": "false"
"ldap.read.timeout": "120000"
"ldap.referral": "true"
"ldap.relaxed.dn.standardisation": "true"
"ldap.roles.disabled": "true"
"ldap.search.timelimit": "60000"
"ldap.secure": "false"
"ldap.url": "ldap://XXXXfund.org:389"
"ldap.user.displayname": "displayName"
"ldap.user.email": "mail"
"ldap.user.encryption": "sha"
"ldap.user.filter": "(&(objectCategory=Person)(sAMAccountName=*))"
"ldap.user.firstname": "givenName"
"ldap.user.group": "memberOf"
"ldap.user.lastname": "sn"
"ldap.user.objectclass": "user"
"ldap.user.password": "unicodePwd"
"ldap.user.username": "sAMAccountName"
"ldap.user.username.rdn": "cn"
"ldap.usermembership.use": "false"
"ldap.usermembership.use.for.groups": "false"
"localUserStatusEnabled": "false"

 what i dont understand is that i did the same thing i did in Jira Service Desk.. there it did not create any issues for me..

Thanks again for looking into this..

[Ahmed Ayoub]

I suggest, adding User & Group DN to filter on them.

i did do that, same problem.

How many users are in the AD?

569 Users

[Ahmed Ayoub]

Oh, i only bought the starter license - if that has any effect ...