I need to integrate the Microsoft Active directory where all of our company's users are stored into a new installation of Jira 5.1.6 on a Linux RHEL6 machine. I have questions in regards to the configuration of this procedure. I set up everything to the best of my knowledge and tested my connection afterwards, it fails on step 2. Here is the issue that comes up. The user I used is my very own, so I'm assuming it's another setting somewhere. Thanks.
Test retrieve user : Failed
org.springframework.ldap.LimitExceededException: Referral limit exceeded; nested exception is javax.naming.LimitExceededException: Referral limit exceeded Root exception is com.sun.jndi.ldap.LdapReferralException: LDAP: error code 10 - 0000202B: RefErr: DSID-031007EF, data 0, 1 access points ref 1: 'us.saic.com' ; remaining name '' ; remaining name ''
For more information regarding LDAP error codes see Troubleshooting LDAP Error Codes.
Hi Frank,
I believe you are experiencing a problem similar to the one described here.
Please try disabling Follow Referrals on your User Directory configuration.
You could also try using a BaseDN more restricted if you are not using all users referred on that.
Hope this helps,
Marcus Silveira
Hi Marcus,
Thanks for the reply. I went ahead and disabled "Follow Referrals" and it now just says incorrect username or password. Before it would just time out. How could I restrict the BaseDN some more?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I kindly suggest you to check the log to find out the error message, but I guess it could be an incorrect password.
Would be possible to clarify your last question?
Actually the BaseDN is important and useful for finding out and configuring the the LDAP structure of your server.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
The user I am using under the "Server Settings" sectio when adding a new user directory must have admin rights to the active directory server. Is this correct?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.