How to import LDAP connection to Active Directory in Stash/Bitbucket server

[Ray Lee]

Hi Support

I know that my software license is for Bitbucket but I hope you can give me a hand to solve existing server issue in Stash. Our stash server facing a issue that it sometimes hanged at login prompt, from log, we suspect that it is time out from LDAP read operation, even the support from Stash is no longer available, but would you share some insights to me in Bitbucket in case similar issue happens in Bitbucket ?

Like define two LDAP server definition, when one failed in operation, then we can use another LDAP to do searching ? 

Many thanks in advance.

Ray

---------------------------------------------------------------

2020-05-08 16:34:16,238 WARN [http-bio-80-exec-7626] @3V0Y6Qx994x4642725x3 10.206.3.143 "GET /scm/es/escg.git/info/refs HTTP/1.1" c.a.s.i.s.s.PluginAuthenticationProvider Could not authenticate ASNPHDY; authentication by com.atlassian.stash.stash-authentication:crowdHttpAuthHandler failed
com.atlassian.stash.user.AuthenticationSystemException: The remote authentication server is not available. Please try again later.
at com.atlassian.stash.internal.crowd.RiotPolice.authenticate(RiotPolice.java:113) ~[stash-service-impl-3.2.2.jar:na]
at com.atlassian.stash.internal.user.DefaultUserService.authenticate(DefaultUserService.java:93) ~[stash-service-impl-3.2.2.jar:na]
at com.atlassian.stash.internal.auth.EmbeddedCrowdHttpAuthenticationHandler.authenticate(EmbeddedCrowdHttpAuthenticationHandler.java:40) ~[stash-service-impl-3.2.2.jar:na]

......

Caused by: org.springframework.ldap.PartialResultException: nested exception is javax.naming.PartialResultException [Root exception is javax.naming.NamingException: LDAP response read timed out, timeout used:10000ms.]
at org.springframework.ldap.support.LdapUtils.convertLdapException(LdapUtils.java:205) ~[spring-ldap-core-1.3.1.RELEASE.jar:1.3.1.RELEASE]
at org.springframework.ldap.core.LdapTemplate.search(LdapTemplate.java:315) ~[spring-ldap-core-1.3.1.RELEASE.jar:1.3.1.RELEASE]

---------------

=== Directories configured ===
Directory ID: 32769
Name: Stash Internal Directory
Active: true
Type: INTERNAL
Created date: 2014-08-19 17:02:05.65
Updated date: 2014-08-19 17:02:05.65
Allowed operations: [CREATE_GROUP, UPDATE_GROUP, CREATE_USER, DELETE_ROLE, UPDATE_GROUP_ATTRIBUTE, CREATE_ROLE, UPDATE_ROLE_ATTRIBUTE, UPDATE_USER, DELETE_USER, UPDATE_ROLE, DELETE_GROUP, UPDATE_USER_ATTRIBUTE]
Implementation class: com.atlassian.crowd.directory.InternalDirectory
Encryption type: atlassian-security
Attributes:
"user_encryption_method": "atlassian-security"

Directory ID: 22344444
Name: Active Directory server
Active: true
Type: CONNECTOR
Created date: 2014-08-19 17:11:00.73
Updated date: 2020-05-08 17:07:44.477
Allowed operations: [CREATE_GROUP, DELETE_GROUP, UPDATE_GROUP_ATTRIBUTE, UPDATE_USER_ATTRIBUTE, UPDATE_GROUP]
Implementation class: com.atlassian.crowd.directory.MicrosoftActiveDirectory
Encryption type: sha
Attributes:
"autoAddGroups": "stash-non-users"
"com.atlassian.crowd.directory.sync.currentstartsynctime": "1588928008954"
"com.atlassian.crowd.directory.sync.issynchronising": "true"
"com.atlassian.crowd.directory.sync.lastdurationms": "765712"
"com.atlassian.crowd.directory.sync.laststartsynctime": "1588924408956"
"crowd.sync.incremental.enabled": "true"
"directory.cache.synchronise.interval": "3600"
"ldap.basedn": "DC=ABC,DC=BIZ"
"ldap.connection.timeout": "10000"
"ldap.external.id": "objectGUID"
"ldap.group.description": "description"
"ldap.group.dn": ""
"ldap.group.filter": "(objectCategory=Group)"
"ldap.group.name": "cn"
"ldap.group.objectclass": "group"
"ldap.group.usernames": "member"
"ldap.local.groups": "true"
"ldap.nestedgroups.disabled": "true"
"ldap.pagedresults": "true"
"ldap.pagedresults.size": "1000"
"ldap.password": *****
"ldap.pool.timeout": "0"
"ldap.propogate.changes": "false"
"ldap.read.timeout": "120000"
"ldap.referral": "true"
"ldap.relaxed.dn.standardisation": "true"
"ldap.roles.disabled": "true"
"ldap.search.timelimit": "60000"
"ldap.secure": "false"
"ldap.url": "ldap://10.151.15.11:389"
"ldap.user.displayname": "displayName"
"ldap.user.dn": ""
"ldap.user.email": "mail"
"ldap.user.encryption": "sha"
"ldap.user.filter": "(&(objectCategory=Person)(sAMAccountName=*))"
"ldap.user.firstname": "givenName"
"ldap.user.group": "memberOf"
"ldap.user.lastname": "sn"
"ldap.user.objectclass": "user"
"ldap.user.password": "unicodePwd"
"ldap.user.username": "sAMAccountName"
"ldap.user.username.rdn": "cn"
"ldap.userdn": "xxx\hxxlt01"
"ldap.usermembership.use": "false"
"ldap.usermembership.use.for.groups": "false"
"localUserStatusEnabled": "false"