add confluence to ldap

[Bahman Sharzad]

How to add confluece to freeipa ldap?

[Bahman Sharzad · Accepted solution]

I add confluence to freeipa. I write what i did, to use from other

Select user Directory under General configuration and select ldap

Configure LDAP User Directory

Server Settings

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

LDAP Schema

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

LDAP Permissions

Select ReadOnly

Advanced Settings: Default

User Schema Settings

-User Object Class: inetorgperson

-User Object Filter: &(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

Group Schema Settings

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

Membership Schema Settings

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password

[repi]

@Bahman Sharzad 

https://confluence.atlassian.com/doc/connecting-to-an-ldap-directory-229838241.html

https://confluence.atlassian.com/doc/connecting-to-an-internal-directory-with-ldap-authentication-229838462.html

[Bahman Sharzad]

It's error for all type of ldap

error is :

[LDAP: error code 49 - Invalid Credentials]; nested exception is javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

[repi]

Error code 49 says that there is something wrong with the login to the ldap server.

https://confluence.atlassian.com/stashkb/ldap-error-code-49-317195698.html

49

LDAP_INVALID_CREDENTIALS

Indicates that during a bind operation one of the following occurred: The client passed either an incorrect DN or password, or the password is incorrect because it has expired, intruder detection has locked the account, or another similar reason. See the data code for more information.

https://docs.servicenow.com/bundle/orlando-platform-administration/page/administer/reference-pages/reference/r_LDAPErrorCodes.html

[Bahman Sharzad]

My problem is i have ldap in freeipa and i don't know which type i select. There are 

Microsoft and openldap..... , not something to close to freeipa ldap. 

[repi]

Hi,  @Bahman Sharzad   you only have two options. The offered selection options in the confluence to try out yourself whether one fits and enter your values and see if it works.
The second option is to ask the community a new question with the content of whether someone is running confluence with a freeipa and how to configure it.

[Bahman Sharzad]

ok it directory server i need to select. first test is ok but when i want to save just test basic connection is ok all other is says not performed.

and can't accept my user from ldap (error message says user does not exist. 

[Bahman Sharzad]

I add confluence to freeipa. here is what i did if other want to use

Configure LDAP User Directory

Server Settings

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

LDAP Schema

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

LDAP Permissions

Select ReadOnly

Advanced Settings: Default

User Schema Settings

-User Object Class: inetorgperson

-User Object Filter: &(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

Group Schema Settings

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

Membership Schema Settings

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password