Unable to log into JIRA because the LDAP link to active directory was broken.

Question

None of our developers were able to log into JIRA because the LDAP link to active directory was broken.

Current Issue,

1. The LDAP connection is now restored, however developers are still not able to log in - get “You do not have a permission to log in” message.

2. In JIRA portal, AD users’ status is showing as ‘Not recorded’

3. Attempted to add user to group but get error message “Adding user to group 'jira-users' failed. Server message is: com.atlassian.crowd.exception.runtime.OperationFailedException: org.springframework.ldap.InvalidSearchFilterException: Unbalanced parenthesis; nested exception is javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis; remaining name 'dc=mychilddomain,dc=myparentdomain,dc=com'.

Mondrian IT · Answer

Someone please respond.

Mondrian IT · Answer

Hi Tiago,

Below is the User filter configured.

(&(objectCategory=Person)(sAMAccountName=*))

The users get imported into JIRA which tells me JIRA is talking with active directory(AD). The user list in JIRA tag users imported from AD as 'not recorded'.

Get the error message below,

Adding user 'user1' to group 'jira-users' failed. Server message is: com.atlassian.crowd.exception.runtime.OperationFailedException: org.springframework.ldap.InvalidSearchFilterException: Unbalanced parenthesis; nested exception is javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis; remaining name 'dc=mychilddomain,dc=myparentdomain,dc=com'.

Tiago Comasseto · Answer

Hi Fini,

Apparently one of your filters is not correct. This issue is described in this KB, please check the parenthesis of your filters and make sure they correct.

Cheers