add confluence to ldap

[Bahman Sharzad]

i have a freeipa ldap. i try to add confluence to freeipa ldap.

in addldap there is no freeipa option. i try ms and openldap. 

it's not working. 

[Bahman Sharzad]

I add confluence to freeipa. I write what i did, to use from other

Select user Directory under General configuration and select ldap

Configure LDAP User Directory

Server Settings

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

LDAP Schema

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

LDAP Permissions

Select ReadOnly

Advanced Settings: Default

User Schema Settings

-User Object Class: inetorgperson

-User Object Filter: &(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

Group Schema Settings

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

Membership Schema Settings

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password

[Bahman Sharzad]

I add confluence to freeipa. I write what i did, to use from other

Select user Directory under General configuration and select ldap

Configure LDAP User Directory

Server Settings

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

LDAP Schema

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

LDAP Permissions

Select ReadOnly

Advanced Settings: Default

User Schema Settings

-User Object Class: inetorgperson

-User Object Filter: &(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

Group Schema Settings

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

Membership Schema Settings

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password

[Bahman Sharzad]

:-) now it's ok.

username should be like this:

uid=admin,cn=users,cn=compat,dc=domain-name,dc=local

but now, when i save there are one test basis connection ok and all other is yellow (not ok)

test af retrieve user, test get user's memberships with 1 groups retrieved,

test ret.. group ... .  Not Succeded

[Bahman Sharzad]

Dosen't matter which type i use. error message is:

Test af forbindelse mislykkedes. Svar fra serveren:
[LDAP: error code 49 - Invalid Credentials]; nested exception is javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

And this is not correct i adding jenkins and graylog to my freeipa ldap. invalid credentials is not correct error message.

[Monique Khairuliana[ServiceRocket]]

Try to use Generic Directory Server instead.
If it doesn't help, how is it not working? Do you see any error messages?