Unable to assign users to Jira SD - Internal server error

[Syed]

Hello. I have a new Jira SD on-prem installed. I was able to get it configured on MySQL and connect with my AD as well. I have three IT staff members that I am trying to give log-ins to.

I went into User management | Users | Select user | Application access: JIRA Service Desk (unchecked) and tried to checkmark it.

I received the following message:

We couldn't change application access

Internal server error

I can see users and groups from AD that appeared to have synchronized successfully. Ideas/suggestions/thoughts?

[Ed Letifov _TechTime - New Zealand_]

RE: internal server error – take a look into your server logs i.e. JIRA_HOME/log/atlassian-jira.log

[Syed Haider]

Looks like this might be an LDAP write error issue. Can I create the AD group manually?

2020-07-29 13:59:22,925-0500 http-nio-8080-exec-25 ERROR jiraadmin 839x32517x1 ggzssl 10.24.4.240 /rest/internal/2/viewuser/application/jira-servicedesk [c.a.p.r.c.error.jersey.ThrowableExceptionMapper] Uncaught exception thrown by REST service: Group <Unable to create group jira-servicedesk-users in directory 10000 in order to add membership of user iphone Sucks (group jira-servicedesk-users found in directory 10000)> does not exist
com.atlassian.crowd.exception.runtime.GroupNotFoundException: Group <Unable to create group jira-servicedesk-users in directory 10000 in order to add membership of user iphone Sucks (group jira-servicedesk-users found in directory 10000)> does not exist
at com.atlassian.crowd.embedded.core.CrowdServiceImpl.addUserToGroup(CrowdServiceImpl.java:554)
at com.atlassian.jira.user.util.UserUtilImpl.doAddUserToGroup(UserUtilImpl.java:359)
at com.atlassian.jira.user.util.UserUtilImpl.addUserToGroups(UserUtilImpl.java:373)
at com.atlassian.jira.bc.user.DefaultUserService.addUserToApplication(DefaultUserService.java:608)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
... 2 filtered
at java.lang.reflect.Method.invoke(Method.java:498)
at com.atlassian.plugin.util.ContextClassLoaderSettingInvocationHandler.invoke(ContextClassLoaderSettingInvocationHandler.java:26)
at com.sun.proxy.$Proxy277.addUserToApplication(Unknown Source)
... 3 filtered
at java.lang.reflect.Method.invoke(Method.java:498)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)
at org.eclipse.gemini.blueprint.service.importer.support.internal.aop.ServiceInvoker.doInvoke(ServiceInvoker.java:56)
at org.eclipse.gemini.blueprint.service.importer.support.internal.aop.ServiceInvoker.invoke(ServiceInvoker.java:60)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)

[Ed Letifov _TechTime - New Zealand_]

This is a *REALLY* strange value for the group name:

"Unable to create group jira-servicedesk-users in directory 10000 in order to add membership of user iphone Sucks (group jira-servicedesk-users found in directory 10000)"

Can you check what you have configured in Administration/Applications/Application Access?