The authentication LDAP was recently changed. As a result, we could no longer log on to Jira.
So, as a workaround, we decided to use local accounts instead. Which works fine except that we run out of license and we need to delete some of the old user accounts. When we tried, this is what we got:
We couldn't change application access
com.atlassian.crowd.exception.runtime.OperationFailedException: org.springframework.transaction.CannotCreateTransactionException: Could not create DirContext instance for transaction; nested exception is org.springframework.ldap.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090400, comment: AcceptSecurityContext error, data 52e, v1db1�]; nested exception is javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090400, comment: AcceptSecurityContext error, data 52e, v1db1�]
Any idea or suggestion?
Hi Richard,
I understand that you appear to be running into a licensing limit after switching your user accounts to use a different directory type.
While deleting the user accounts might be one way to solve this, I don't recommend deleting users in Jira as the best way to solve this. That is because these user accounts are used in a historical data context that can cause some bad data loss to delete their accounts from Jira entirely.
The better solution would be to disable this entire user directory within Jira. You can do this by going to Cog Icon -> User Management -> User Directory (see also configuring user directories). Next to this LDAP directory there will be a 'Disable' link you can click to disable the directory. All the user accounts in that directory will not be counted against Jira licensing limits.
Please let me know if you have any problems trying these steps.
On a side note, the error you see of 'LDAP: error code 49 data 52e' is something we offer troubleshooting steps for in the KB Users are unable to log in to JIRA (LDAP: error code 49, data 52e).
Cheers,
Andy
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.