Locked out of JIRA

Kevin Decker

Hi All, 

 

Looking for some help here, we were in the process of configuring our Active Directory setup and I moved Active Directory up above the internal user directory. Once I clicked to another screen I was locked out of the system and have been ever since. 

somethingblue

Hi Kevin,

There is a knowlege base article titled Administrator Cannot Login After Reordering User Directories. 

Cause:

There is a duplicating user with the same username in the directory in higher position. Currently, JIRA does not support 'shadowed' users. This is a known limitation tracked in JRA-23861 - An admin can lock themselves out of JIRA by changing the order of the User Directories.

The resolution is as follows:

 

1. Ask for assistance another administrator and ask them to revert the ordering modification.
2. Temporally disable the directory in the higher position with help of SQL.
   • Ensure that you have valid backup of your data that could be used for the restore, if something goes wrong.

3. List all currently defined directories:

   • select id, directory_name, active from cwd_directory;
     ID    DIRECTORY_NAME          ACTIVE 
     ----- ----------------------- ------     
     10102 AD win2k8               1 
     1     JIRA Internal Directory 1     
     10106 Active Directory server 1
     3 row(s) in 0 ms

4. Disable the conflicting directory. In our example we will disable directory with ID 10102:

   • update cwd_directory set active=0 where id=10102

5. Restart Tomcat in order to apply the change.

Hopefully that helps.

Cheers,

Branden