nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

LDAP pulling all users, I only want them to pull if they are a memeber of the group jira-users

Michelle Larson

This question is in reference to Atlassian Documentation: Administering JIRA Software

I am am setting up a new instance of JIRA we would like to add AD (LDAP) directory as well as the internal. I have it working however it is pulling everyone from our AD I only want it to pull users that are int he group jira-users.

Base DN:

DC=WINDOM, DC=OUTREACH,DC=PSU, DC=EDU

The Security Group called jira-users is in the following location

CN=jira-users,OU=JIRA,OU=OTS Servies,DC=WINDOM,DC=OUTREACH,DC=PSU,DC=EDU

I put the following under User Schema Settings

User Object Filter

(memberOf=CN=jira-users,OU=JIRA,OU=OTS Servies,DC=WINDOM,DC=OUTREACH,DC=PSU,DC=EDU)

Accepted answers

Michelle Larson

If I put the user group in the base DN then it works.

All comments

Chris Dunne

I think this may be what you need to do

https://confluence.atlassian.com/display/CROWD/Restricting+LDAP+Scope+for+User+and+Group+Search

Chris

Michelle Larson

I looked at that and made changes to my

User Object Filter

(&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=jira-users,OU=JIRA,OU=OTS Servies,DC=WINDOM,DC=OUTREACH,DC=PSU,DC=EDU)))

Now I get an error:

Test retrieve user : Failed

org.springframework.ldap.InvalidSearchFilterException: Unbalanced parenthesis; nested exception is javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis; remaining name 'DC=WINDOM, DC=OUTREACH,DC=PSU, DC=EDU'