Active Directory user can't log in to JIRA Service Desk

Question

Hi,

I've just installed an instance of JIRA Service Desk and added a user from our internal AD. However, when he tries to log on he receives the following error:

The password could not be changed by the credentials provider.

com.atlassian.crowd.exception.OperationNotPermittedException:

com.atlassian.crowd.exception:ApplicationPermissionException: Not allowed to update user 'xxx-xxx' in directory 'Active Directory server'.

Really need a fix for this as all users will be AD users.

Andy Heinzer · Answer

I'd recommend checking out the KB Unable to login to JIRA applications

It explains some additional logging levels that you might need to tune up in Jira itself in order to be able to better diagnose the cause here.

The fact this user can login to the customer portal but no Jira's main login window is telling.   The customer portal does not require a user license to login to. But Jira's main login page does.  As such, that user would need to be a member of a group that grants application access in Jira.  Perhaps that is part of the problem here, there might be a group membership Jira is trying to assign to the user.

With what we know right now, I can't say for sure, but the steps in that Kb should at least help us progress this issue and better understand why this is happening.

Alexey Matveev · Answer

I am not sure what can be wrong. I never met such problems

stewart rodgers · Answer

Thanks Alexey for the quick response.

The directory is functional, and passes all tests. (See attachment). There is no duplicate directory. Since all AD users are added automatically as customers, we have tried logging into the customer portal. This works fine - the issue only seems to appear when an agent tries to access the application.