Non-LDAP user can't authenticate - LDAP configuration problem

Question

Hi people,

I'm having a problem configuring LDAP authentication in my Jira instance I would like to share with you.

I have 2 directories configured:

- JIRA Delegated Authentication Directory
- JIRA Internal DirectoryInternal

I would expect that, if I create a user in Jira, as it doesn't exist in LDAP it would try to authenticate against the 'Jira Internal Directory' searching for the password I set during user creation. But this is not happening as newly created users are not able to log in.

Any hint, help here will be really appreciated!

Regards,

Ripka

Septa Cahyadiputra · Answer

Hi Ripka,

May I know which version are you currently on? If you are currently running on older than 4.3.3, looking at your current configuration, it is actually an expected result. Since the "Delegated" directory is at the top order, whenever you create a new user, it would be registered as the user of the top directory which is in your case "Delegated Authentication Directory".

This result to JIRA always try to find the user on your LDAP server and ignore the saved credential.

As mentioned here: https://jira.atlassian.com/browse/JRA-23933

JIRA 4.3.3 have the option to choose directory when you create it. If you are on 4.3.3 and above, this should not be the case as JIRA should continue and try to authenticate the user against your internal directory when it can't found the user at your LDAP server.

Hope it helps.

Cheers,
Septa Cahyadiputra

Eva8 · Answer

Have you check the JIRA logs to see what it is failing?  Is it b/c it cant find the users or authentication fails?

Also, can you check if you add that user in jira-users group?