Received the following error when authenticating to active directory -'Active Directory server' is not functional during authentication of 'thomas'. Skipped.

[Evan Fareed]

I receive the following error when authenticating to Active Directory using Jira 4.4 - 'Active Directory server' is not functional during authentication of 'thomas'. Skipped. This is in the catalina.out log. Sometimes the authentication works and sometimes their are authentication timeouts.

2011-08-12 22:03:52,379 http-8080-10 ERROR anonymous 1319x733x2 - 192.168.192.152 /rest/gadget/1.0/login [crowd.manager.application.ApplicationServiceGeneric] Directory 'Active Directory server' is not functional during authentication of 'thomas'. Skipped.

2011-08-12 22:03:52,380 http-8080-10 ERROR anonymous 1319x733x2 - 192.168.192.152 /rest/gadget/1.0/login [jira.security.login.JiraSeraphAuthenticator] Error occurred while trying to authenticate user 'thomas'.

com.atlassian.crowd.exception.runtime.OperationFailedException

Further down in the logs the following error occurs:

Caused by: org.springframework.ldap.PartialResultException: nested exception is javax.naming.PartialResultException [Root exception is javax.naming.NamingException: LDAP response read timed out, timeout used:120000ms.; remaining name '']

Caused by: com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.PartialResultException: nested exception is javax.naming.PartialResultException [Root exception is javax.naming.NamingException: LDAP response read timed out, timeout used:120000ms. [Root exception is com.sun.jndi.ldap.LdapReferralException: Continuation Reference; remaining name 'dc=domain,dc=com']; remaining name '']

[Ivar]

Hi!

I had a similar problem earlier. Sometimes the authentication worked like a charm, sometimes not. It turned out that the AD servers where load balanced and that Atlassian products have difficulties connecting to a load balanced AD setup. Everything works smoothly when I connect directly to one of the serveris internal IP (instead of the ad.domain.com).