nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Unable to authenticate to LDAP. How can I get into products to reconfigure?

Trevor Wood_l35mim

This is not only in Crowd but in our other Atlassian products, too. I can't authenticate via our LDAP; getting very vague errors. Is there a way to restore a local administrator account or otherwise get into crowd through a back door, so I can test or fix the configuration? I have full access to the server and the database.

Accepted answers

Reneesh Kottakkalathil

Hello @Trevor Wood

Maybe problem with your user directory configuration. Here is an example for configuring user directories in Jira https://confluence.atlassian.com/adminjiraserver/configuring-user-directories-938847049.html

Were you able to authenticate before? If so, check for all the recent changes in the environment.

All comments

Reneesh Kottakkalathil

Hello @Trevor Wood

Were you able to authenticate before? If so, check for all the recent changes in the environment.

Trevor Wood_l35mim

Thank you for the reply!

Yes, this configuration was working. The only thing we know changed is the previous cert on the server expired, but we thought it was replaced properly. The web-facing side of things does show the updated cert.

Reneesh Kottakkalathil

Under User Directory setting, there is a test option. Have you tried the test to see if that works? Can you paste the logs if you see any error? On which Atlassian product did the previous cert got expired and you renewed it?

Trevor Wood_l35mim

Unfortunately, I can't get that far, since the User Directories page is behind authentication and I can't authenticate. We have a CentOS server which has crowd, bamboo, confluence, jira, and bitbucket running on it. The db is on another server running MySQL. The LDAP I'm trying to authenticate from is Active Directory.

Crowd log excerpt:

2022-02-08 14:44:04,690 http-nio-8095-exec-6 ERROR [jdbc.batch.internal.BatchingBatch] HHH000315: Exception executing batch [java.sql.BatchUpdateException: Duplicate entry '[redacted]' for key 'uk_token_id_hash'], SQL: insert into cwd_token (directory_id, entity_name, random_number, identifier_hash, random_hash, created_date, last_accessed_date, last_accessed_time, duration, id) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)

2022-02-08 14:44:04,691 http-nio-8095-exec-6 ERROR [engine.jdbc.spi.SqlExceptionHelper] Duplicate entry '[redacted]' for key 'uk_token_id_hash'

2022-02-08 14:44:05,597 http-nio-8095-exec-7 ERROR [crowd.manager.application.ApplicationServiceGeneric] Directory '[redacted]' is not functional during authentication of '[redacted]'. Skipped.

Here's a line from the jira log:

atlassian-jira.log:2022-02-08 14:44:05,687-0500 http-nio-8080-exec-1 ERROR anonymous 883x26x1 69m0nt 172.17.0.21,127.0.0.1 /rest/gadget/1.0/login [c.a.j.security.login.JiraSeraphAuthenticator] Error occurred while trying to authenticate user...