nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

All my registered agents are now having users

gabriel_nt5tej

Dear jira,

I have an issue, I was trying AD sync and so happen that the users in my Jira Helpdesk also exisit with the same name in my AD and thus all the agents are being overwritten as Users from agents. No one is able to access the control panel, is there a way to reset the authentication thing without logging in ?

Thanks,

Gabriel

Accepted answers

All comments

Alexey Matveev

Hello,

I guess, the problem is that you have the same users in the Jira internal directory and AD. And the first user directory in the list of user directories is the Jira internal directory. You can make the AD user directory first in the list. In this case all users will connect through AD. Or you can delete duplicate users from the Jira internal directory.

Bastian Stehmann

Hi @gabriel,

if you locked yourself out of jira administration, please check, if you the admin account, that you created while installation is maybe still able to log-in.

If even that does not work, you can refer to this KB article to deactivate the AD user directory

https://confluence.atlassian.com/jirakb/disabling-a-directory-via-the-jira-database-338366836.html

But please make sure you have a up-to-date backup, as you will have to manipulate the database directly.

As hint for AD connection, you should always have at least one admin user, that does not exist in the AD, so that you will always be able to log-in and go to administration, even if the AD-connection fails for some reason.

And you can sync groups within your AD connection settings or set default groups, so that you can manage the groups within the AD and give users admin permission there without having to be able to log in to Jira administration.

gabriel_nt5tej

Yes, this is the case but I do not know how to replace my primary as confluence and my secondary as AD now.

gabriel_nt5tej

It doesnt disable, my account role is now still under "users" and not "jira-administrator" I wonder if its possible to add the role to my user account.

Alexey Matveev

Kindly read this KB:

https://confluence.atlassian.com/jirakb/administrator-cannot-login-after-reordering-user-directories-235669137.html

Bastian Stehmann

As you need administrator permissions to edit the groups, I don't think there is a way except doing this in the database.

If you want to do that more than disabling the user directory, refer to this KB article.

https://confluence.atlassian.com/jira/retrieving-the-jira-administrator-192836.html

gabriel_nt5tej

Strange way is that the Microsoft AD is not in that list. Quite Funny

gabriel_nt5tej

Thank you all, the issue is being fixed by removing the AD sync and restarting the server totally. Once the AD sync is off, we could login using our normal accounts.