MS Active Directory groups integration

[Alexey I_ Kiyashko]

Hello, dear support.

I'm running JIRA 5.0.3 and I have successfully integrated my JIRA user directory with MS AD. But users are picked only from Organisational Units. For example, like this:

OU=Jira,OU=Service,OU=Groups,OU=<company>,DC=<domain>,DC=com

But my company uses a highly branched AD tree, so that i need to pick users not only from OU's but from groups too.

For that purpose i used these settings:

CN=<group_name>,OU=Jira,OU=Service,OU=Groups,OU=<company>,DC=<domain>,DC=com

The connection test runs green, but when i try to test retrieve users from that group i recieve error message

Test retrieve user : Failed

User <username> does not exist

User and group schemas are taken as recommended in this article: https://confluence.atlassian.com/display/JIRA/Connecting+to+an+LDAP+Directory

Please, tell me what i have done wrong?

[Tiago Comasseto · Accepted solution]

Hi Alexey,

I believe the best option for your case is set your Base DN to OU=<company>,DC=<domain>,DC=com and use a filter to restrict the results.

For example, use a filter like this at the User Object Filter field to synchronize only the users that belong to the groups JIRA-Administrators and JIRA-Users:

(&(objectCategory=Person)(sAMAccountName=*)(&(memberOf=CN=JIRA-Administrators,OU=groups,dc=test,dc=local)|(memberOf=CN=JIRA-Users,OU=groups,dc=test,dc=local)))

You can see more details about search filter in this documentation.

I hope this information has helped.

Cheers

[Alexey I_ Kiyashko]

Just got an answer from Atlassian Support Team and it worked:

I should set Base DN to OU=<company>,DC=<domain>,DC=com

Additional User DN: OU=<user OU> (for example, in my case Additional User DN:

OU=<users_OU>, OU=Users)

Additional Group DN: CN=<group CN>,OU=<group OU> (for example, in my case Additional Group DN: CN=<group_name>,OU=Jira,OU=Groups)