User login issue

[Sujata]

In our JIRA application user authentication is happening through LDAP.But for two users we are facing login issues.These user ids   were created earlier but from last one month they didn't logged in to system.Now when they are trying to login to JIRA it fails .

 As a first level approach we have checked user details in LDAP, everything seems ok. At JIRA end they have to use their LDAP credentials to login userid and pwd.  I have checked both ids (LDAP and JIRA) are same.

Both users tried with reset password option in JIRA as they were not knowing abt this LDAP. In DB i can see some string{SHA} appended in  credentail column in cw_user table.

Not able to understand what is going wrong.

[Michael Kelly [Praecipio]]

Assuming their workstation uses the same credentials from ldap, I would suspect that the issue is with Jira and not the user directory. I would start by searching their username in the catalina.out and atlassian-jira.log log files.

grep ERROR /path/to/catalina.out | grep username | less

 Use the error message, if found, to find the root cause.

[Sujata]

Hi Michale,

  Thanks. I have checked not found any issue at JIRA end.

  Actually these users were there earlier in Active Directory and accordingly we have created them in JIRA. They have created issues in JIRA. But suddenly they were unable to access JIRA .

We checked with AD team and get to know that these users does not exist in Active Directory. Not sure with the exact reason. Now they have recreated the same users in AD.

In JIRA i can see those users are active users. It is failing at authentication level.

Any other view will he helpful

Thanks,

Sujata

[Moses Thomas]

@SujataYou  should reset password in  LDAP  and then  try to  login  to  JIRA.

Under the condition that  your LDAP setting with  Jira  is Ok.  it should work.

[Sujata]

Will check.

Actually rest of the users are able to access JIRA. Issues is with these two users.

These ID were recreated in AD.

[Moses Thomas]

@SujataIf  they are recreated with same user_names,  just  reset  password in  AD and log in  to  Jira

[Sujata]

I have reset user password but its still not working.

Error log:

'XXXXXX tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.
The user 'XXXXX' has FAILED authentication.

[Moses Thomas]

@SujataUser(s) must have groups that allow  them  to  access  Jira,  please verify  this.

[Sujata]

Groups in Active Directory , right?

[Moses Thomas]

@SujataThere should be a group in  AD which is  the same in  Jira  and it has been  configured in the application  access in Jira.  so verify  that  users  are in the  group  in  AD   but  check  your  application  access in  JIRA  configuration  for the group  that  give users  access to  JIRA.

[Sujata]

Yes.In JIRA users are mapped with respective group.Will check in AD.