How to set Jira and Confluence users to special groups automatically use LDAP server?

[Raw Main]

Set user directories in Jira Software Data Center, this path:

User management > User Directories > Directory Type: LDAP >
Configure LDAP User Directory > Directory Type: OpenLDAP > LDAP Permissions > Default Group Memberships: jira-software-users

After sync the users from LDAP server, they aren't been set into 'jira-software-users' group, so they can't be used.
Why and how to config it correctly?

[Hernan Halabi - Elite IT Consulting Group]

Hello @Raw Main did the user try to login? As the text of the image shows, the group isn't assigned until the user logs in and this might be the case here.

[Raw Main]

Yes, I tried login. But got this error:

com.atlassian.crowd.exception.runtime.UserNotFoundException: User <test.user> does not exist

com.atlassian.crowd.exception.runtime.UserNotFoundException: User <test.user> does not exist

[Hernan Halabi - Elite IT Consulting Group]

That looks like the user can't be found at ldap rather than Jira.  I suppose the user does exists there but maybe you are not bringing the whole directory. Just a subset of users in a group there?

[Raw Main]

Maybe the reason is that:

> The user 'test.user' exists in multiple user directories, and only this specific instance of the username will be removed.

Do you know how to remove a user from a directory? Such as remove it from 'Jira Internal Directory'.

[Raw Main]

I tried again. The user is in the 'LDAP server' directory now. 

But tried to login again, got:

> You do not have a permission to log in. If you think this is incorrect, please contact your Jira administrators.

[Hernan Halabi - Elite IT Consulting Group]

Hello @Raw Main removing a user isn't simple, pretty much nothing must be associated to it. You could deactivate it instead.

Could you please tell the user directory order? That defines where Jira is going to look for the user first

[Raw Main]

Hi @Hernan Halabi - Elite IT Consulting Group I have remove other directories and keep LDAP server only, so the user can login!

The reason was there ware multiple directories before. Thank you for your help!