Best Practice Active Directory Integration

Question

Hello all,

I have inherited an Atlassian setup that includes Jira, Confluence (Wiki), Crowd, Fisheye, and Bamboo.  I would like users to be able to change their Active Directory password using any one of these applications.  I have read through a ton of Attlassian Knowledge Base articles but none seem to get me to my endpoint.  I think it is a combination of me not knowing Atlassian products and the fact that our on premise setup was not done correctly.

Is there a clear writeup on how to make this happen or how this is typically done?  Should we be having all applications using Crowd and then Crowd talks to AD?

Thanks!

Scout IT · Answer

This is the part I am having an issue with:

If you want to use Crowd to add users or change passwords in Microsoft Active Directory, you will need to install an SSL certificated generated by your Active Directory server and then install the certificate into your JVM keystore. Please read the instructions: Configuring an SSL Certificate for Microsoft Active Directory.

Here is the error I see on Crowd when attempting to use SSL:
There was a problem communicating with the LDAP server: simple bind failed: DC01-Server:636; nested exception is javax.naming.CommunicationException: simple bind failed: DC01-Server:636 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching DC-Server found.]

Why is it looking for a Subject Alternative Name?

Note: DC01-Server is a stand in name for purposes of this conversation. :)

Justin Justin7 · Answer

Andrew -

>  Should we be having all applications using Crowd and then Crowd talks to AD?

Since you have Crowd, yes.

Here's a good and primer: https://confluence.atlassian.com/display/CROWD/Crowd+101

Here's the links you want at least (without being able to see what you have done so far). If you did not understand per your above question, maybe try to reinstall Crowd so it is fresh and clean, since will be with you a long time, so make sure it is right.

https://confluence.atlassian.com/display/CROWD/Installing+Crowd

https://confluence.atlassian.com/display/CROWD/About+the+Crowd+Administration+Console

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+JIRA

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+Confluence

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+FishEye

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+Bamboo

https://confluence.atlassian.com/display/CROWD/Configuring+an+LDAP+Directory+Connector

Hope that helps.

Justin

Scout IT · Answer

Thanks Joseph, I didn't realize that there was a Pencil icon to the right of the Topics.