nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Delegating authentication to Microsoft AD does not work

Tech User 29

1. Installed Bitbucket trial version for enterprise admin as admin user id.

2. Followed the instruction provided in the following link to configure delegation:

https://confluence.atlassian.com/bitbucketserver065/delegating-bitbucket-server-authentication-to-an-ldap-directory-976162973.html

Inputs provided by running ldp.exe on the system:

Hostname: dnsHostName from LDP

UserName: Company domain ID used for logging into my system

BASE DN: serviceName from LDP

Checked Copy Users on Login

Test connection successful.

3. Logged out and logged back in using my company ID.

Throws an error: Invalid user name or password.

Not sure what I am doing wrong. Looks like I am missing something.

Accepted answers

Mikael Sandberg

Hi @Tech User 29,

Welcome to the Atlassian Community.

Did you add your AD account as a member of the bitbucket-user group after you did the initial sync with your new user directory?

All comments

Mikael Sandberg

Hi @Tech User 29,

Welcome to the Atlassian Community.

Did you add your AD account as a member of the bitbucket-user group after you did the initial sync with your new user directory?

Tech User 29

Thanks Mikael for the reply.

Yes, the user is part of stash-users group that has Bitbucket User checkbox selected in global permissions. I thought the user should get created automatically if I select create users on logon option and provide stash-users as default group but it didn't work. I then created user manually and added it to the stash-users group. Everytime it throws the same error: Invalid username or password.

Checked the logs: No info except audit log has authentication error: AuthenticationFailureEvent | AD user name | 1576186223814

Does the user name input (the distinguished name of user that app will use when connecting to directory server) need any additional privileges? Currently I have set it to my AD user name.

Mikael Sandberg

The user that is being used to connect to the AD in the user directory just needs read access.

Did the user exist in the Bitbucket internal directory before you added the delegated directory? Which directory is first in your list, the internal or the delegated one?

I have not used the delegated option for a user directory, I use AD directories with local groups instead, that way if a user gets updated in the AD it will be reflected in Bitbucket on the next sync.

Tech User 29

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

bitbucket

bitbucket-server