AD sync server based

Question

I have been having Issues trying to get my MS AD LDAP to sync with JIRA server based.  I am getting a Failed sync. Below is what I am getting

Jira AD.JPGThe configuration setup i have is below. Please let me know if there is a walk through that I may follow to fix this issue. Thank you

ad.JPGad 4.JPG

Husain Basir · Answer

Hello, When I try to login with a testuser that is in the Jira_user security group in AD I get this error. {{""You do not have a permission to log in. If you think this is incorrect, please contact your JIRA administrators.""}} This is the same user i used to using the JIRA test when adding AD. I believe it maybe the issue that I am importing my backup from the Cloud based JIRA to my server based JIRA. Jira has its internal directory, my users have the same login in JIRA as they do in AD. Also when I do the sync with AD will my users lose the data that is attached to the JIRA internal directory account if i am using MS AD for my directory. Below is the Log file the last sync. I after resetting back to defaults the Jira server did sync with AD. successfully. After adding the filter for just a security group for JIRA users. After using the built in test, that test passed. Now I am still getting the sync failure. {{2015-04-28 08:13:00,006 atlassian-scheduler-quartz1.clustered_Worker-3 DEBUG [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/0ms : NaN% 2015-04-28 08:13:00,008 atlassian-scheduler-quartz1.local_Worker-3 DEBUG ServiceRunner Mail Queue Service [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/0ms : NaN% 2015-04-28 08:13:00,008 atlassian-scheduler-quartz1.local_Worker-3 DEBUG ServiceRunner [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/0ms : NaN% 2015-04-28 08:13:02,937 atlassian-scheduler-quartz1.clustered_Worker-4 DEBUG [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/0ms : NaN% 2015-04-28 08:13:09,819 atlassian-scheduler-quartz1.clustered_Worker-1 DEBUG [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/0ms : NaN% 2015-04-28 08:13:24,147 http-bio-80-exec-2 DEBUG sysadmin 493x3127x1 xfnlws 10.12.129.215 /plugins/servlet/embedded-crowd/directories/list [atlassian.util.profiling.UtilTimerStack] [132ms] - /plugins/servlet/embedded-crowd/directories/list [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasProjects() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() 2015-04-28 08:13:24,147 http-bio-80-exec-2 DEBUG sysadmin 493x3127x1 xfnlws 10.12.129.215 /plugins/servlet/embedded-crowd/directories/list [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/132ms : 0.0% 2015-04-28 08:13:43,104 atlassian-scheduler-quartz1.clustered_Worker-4 DEBUG [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/0ms : NaN% 2015-04-28 08:13:43,544 http-bio-80-exec-2 DEBUG sysadmin 493x3132x1 xfnlws 10.12.129.215 /plugins/servlet/embedded-crowd/directories/sync [atlassian.util.profiling.UtilTimerStack] [6ms] - /plugins/servlet/embedded-crowd/directories/sync [0ms] - PermissionManager.hasPermission() 2015-04-28 08:13:43,544 http-bio-80-exec-2 DEBUG sysadmin 493x3132x1 xfnlws 10.12.129.215 /plugins/servlet/embedded-crowd/directories/sync [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/6ms : 0.0% 2015-04-28 08:13:43,702 http-bio-80-exec-2 DEBUG sysadmin 493x3133x1 xfnlws 10.12.129.215 /plugins/servlet/embedded-crowd/directories/list [atlassian.util.profiling.UtilTimerStack] [114ms] - /plugins/servlet/embedded-crowd/directories/list [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasProjects() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [1ms] - PermissionManager.hasProjects() [0ms] - PermissionManager.hasPermission() [0ms] - PermissionManager.hasPermission() [1ms] - PermissionManager.hasPermission() 2015-04-28 08:13:43,703 http-bio-80-exec-2 DEBUG sysadmin 493x3133x1 xfnlws 10.12.129.215 /plugins/servlet/embedded-crowd/directories/list [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/116ms : 0.0% 2015-04-28 08:13:43,788 atlassian-scheduler-quartz1.clustered_Worker-1 ERROR [com.atlassian.scheduler.JobRunnerResponse] Unable to synchronise directory com.atlassian.crowd.exception.OperationFailedException: java.util.concurrent.ExecutionException: com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.CommunicationException: Request: 2 cancelled; nested exception is javax.naming.CommunicationException: Request: 2 cancelled; remaining name 'dc=consilink,dc=com' at com.atlassian.crowd.directory.ldap.cache.UsnChangedCacheRefresher.synchroniseAllGroups(UsnChangedCacheRefresher.java:237) at com.atlassian.crowd.directory.ldap.cache.AbstractCacheRefresher.synchroniseAll(AbstractCacheRefresher.java:91) at com.atlassian.crowd.directory.ldap.cache.UsnChangedCacheRefresher.synchroniseAll(UsnChangedCacheRefresher.java:168) at com.atlassian.crowd.directory.DbCachingRemoteDirectory.synchroniseCache(DbCachingRemoteDirectory.java:1122) at com.atlassian.crowd.manager.directory.DirectorySynchroniserImpl.synchronise(DirectorySynchroniserImpl.java:76) at com.atlassian.jira.crowd.embedded.JiraDirectorySynchroniser.synchronizeDirectory(JiraDirectorySynchroniser.java:96) at com.atlassian.jira.crowd.embedded.JiraDirectorySynchroniser.runJob(JiraDirectorySynchroniser.java:60) at com.atlassian.scheduler.core.JobLauncher.runJob(JobLauncher.java:136) at com.atlassian.scheduler.core.JobLauncher.launchAndBuildResponse(JobLauncher.java:101) at com.atlassian.scheduler.core.JobLauncher.launch(JobLauncher.java:80) at com.atlassian.scheduler.quartz1.Quartz1Job.execute(Quartz1Job.java:32) at org.quartz.core.JobRunShell.run(JobRunShell.java:223) at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:549) Caused by: java.util.concurrent.ExecutionException: com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.CommunicationException: Request: 2 cancelled; nested exception is javax.naming.CommunicationException: Request: 2 cancelled; remaining name 'dc=consilink,dc=com' at java.util.concurrent.FutureTask.report(Unknown Source) at java.util.concurrent.FutureTask.get(Unknown Source) at com.atlassian.crowd.directory.ldap.cache.UsnChangedCacheRefresher.synchroniseAllGroups(UsnChangedCacheRefresher.java:218) ... 12 more Caused by: com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.CommunicationException: Request: 2 cancelled; nested exception is javax.naming.CommunicationException: Request: 2 cancelled; remaining name 'dc=consilink,dc=com' at com.atlassian.crowd.directory.SpringLDAPConnector.searchEntitiesWithRequestControls(SpringLDAPConnector.java:476) at com.atlassian.crowd.directory.SpringLDAPConnector.searchEntities(SpringLDAPConnector.java:459) at com.atlassian.crowd.directory.SpringLDAPConnector.searchGroupObjectsOfSpecifiedGroupType(SpringLDAPConnector.java:1236) at com.atlassian.crowd.directory.SpringLDAPConnector.searchGroupObjects(SpringLDAPConnector.java:1272) at com.atlassian.crowd.directory.SpringLDAPConnector.searchGroups(SpringLDAPConnector.java:1304) at com.atlassian.crowd.directory.ldap.cache.UsnChangedCacheRefresher$3.call(UsnChangedCacheRefresher.java:157) at com.atlassian.crowd.directory.ldap.cache.UsnChangedCacheRefresher$3.call(UsnChangedCacheRefresher.java:152) at java.util.concurrent.FutureTask.run(Unknown Source) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) Caused by: org.springframework.ldap.CommunicationException: Request: 2 cancelled; nested exception is javax.naming.CommunicationException: Request: 2 cancelled; remaining name 'dc=consilink,dc=com' at org.springframework.ldap.support.LdapUtils.convertLdapException(LdapUtils.java:108) at org.springframework.ldap.core.LdapTemplate.search(LdapTemplate.java:397) at org.springframework.ldap.core.LdapTemplate.search(LdapTemplate.java:309) at com.atlassian.crowd.directory.ldap.SpringLdapTemplateWrapper$4.timedCall(SpringLdapTemplateWrapper.java:196) at com.atlassian.crowd.directory.ldap.SpringLdapTemplateWrapper$4.timedCall(SpringLdapTemplateWrapper.java:193) at com.atlassian.crowd.directory.ldap.SpringLdapTemplateWrapper.invokeWithContextClassLoader(SpringLdapTemplateWrapper.java:87) at com.atlassian.crowd.directory.ldap.SpringLdapTemplateWrapper.search(SpringLdapTemplateWrapper.java:193) at com.atlassian.crowd.directory.SpringLDAPConnector.pageSearchResults(SpringLDAPConnector.java:405) ... 11 more Caused by: javax.naming.CommunicationException: Request: 2 cancelled; remaining name 'dc=consilink,dc=com' at com.sun.jndi.ldap.LdapRequest.getReplyBer(Unknown Source) at com.sun.jndi.ldap.Connection.readReply(Unknown Source) at com.sun.jndi.ldap.LdapClient.getSearchReply(Unknown Source) at com.sun.jndi.ldap.LdapClient.search(Unknown Source) at com.sun.jndi.ldap.LdapCtx.doSearch(Unknown Source) at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source) at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source) at javax.naming.directory.InitialDirContext.search(Unknown Source) <+2> at java.lang.reflect.Method.invoke(Unknown Source) at org.springframework.ldap.transaction.compensating.manager.TransactionAwareDirContextInvocationHandler.invoke(TransactionAwareDirContextInvocationHandler.java:90) at com.sun.proxy.$Proxy4060.search(Unknown Source) at org.springframework.ldap.core.LdapTemplate$3.executeSearch(LdapTemplate.java:303) at org.springframework.ldap.core.LdapTemplate.search(LdapTemplate.java:363) ... 18 more 2015-04-28 08:13:43,793 atlassian-scheduler-quartz1.clustered_Worker-1 DEBUG [jira.web.filters.ThreadLocalQueryProfiler] PROFILED : 0 keys (0 unique) took 0ms/244ms : 0.0% }}

Pedro Souza · Answer

Try to synchronise, and check the updated lines in the bottom of the file.
Have you tried to use the cn, and remove the filters as I suggested?

Husain Basir · Answer

I have found the Path: C:\Program Files\Atlassian\Application Data\JIRA\log

What am I looking for in this file it has a lot of information in it