Crowd Connector to AD

Hi

i'm trying to connect my Crowd server to the company AD, i'm always getting 'authorization fail'.

Does the user I've entered in the connector must be an Admin on the AD container (OU)? (or READ permissions are enough?)

Also, the AD guys told me that the connection to the AD must be with Kerberos Ntlm protocol, Does Crowd supports that? (or there is no way i'm connecting it to our organization AD)

 

Thanks.

3 answers

1 vote
Bruno Vincent Community Champion Aug 10, 2016

The user that you set while configuring the connector does not have to be an admin. Any standard user with read rights is enough.

The AD connector in Crowd uses standard username/password authentication for LDAP (or LDAPS). Though it is not supported by Crowd, LDAP requests to Active Directory can also be authenticated with Kerberos but I would be very surprised that your organisation forbids standard username/password LDAP (or LDAPS) authentication.  

Hi

Thanks for the quick answer, can you please explain what i need to do to authenticated with Kerberos while defining my connector?

(do i need to change my url from "ldap://...." to something else?)

 

Thanks!

Bruno Vincent Community Champion Aug 11, 2016

Hi @lilach feit,

You can't do that as it is not supported by Crowd. As of today the LDAP connector in Crowd only allows you "bind" to AD with a username/password, not with a Kerberos ticket.

Can you explain the requirement again? The connection between crowd needs to be Kerberos/NTLM?

Hi Steve, 

It needs to be KERBEROS protocol 
NTLN is blocked in our network. 

Does Crowd supports KERBEROS protocol ? 
If so, please let me know what is the configuration required ?


Thanks. 

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Published Feb 27, 2018 in Crowd

The Crowd team is looking for feedback on Server & Data Center customers' identity strategies!

Do you own more than one Server or Data Center product? Do you have challenges provisioning users across your Atlassian products? Are you spending a lot of time integrating each Atlassian product wit...

1,062 views 6 14
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you