Crowd Connector to AD

Hi

i'm trying to connect my Crowd server to the company AD, i'm always getting 'authorization fail'.

Does the user I've entered in the connector must be an Admin on the AD container (OU)? (or READ permissions are enough?)

Also, the AD guys told me that the connection to the AD must be with Kerberos Ntlm protocol, Does Crowd supports that? (or there is no way i'm connecting it to our organization AD)

 

Thanks.

3 answers

1 votes
Bruno Vincent Community Champion Aug 10, 2016

The user that you set while configuring the connector does not have to be an admin. Any standard user with read rights is enough.

The AD connector in Crowd uses standard username/password authentication for LDAP (or LDAPS). Though it is not supported by Crowd, LDAP requests to Active Directory can also be authenticated with Kerberos but I would be very surprised that your organisation forbids standard username/password LDAP (or LDAPS) authentication.  

Hi

Thanks for the quick answer, can you please explain what i need to do to authenticated with Kerberos while defining my connector?

(do i need to change my url from "ldap://...." to something else?)

 

Thanks!

Bruno Vincent Community Champion Aug 11, 2016

Hi @lilach feit,

You can't do that as it is not supported by Crowd. As of today the LDAP connector in Crowd only allows you "bind" to AD with a username/password, not with a Kerberos ticket.

Can you explain the requirement again? The connection between crowd needs to be Kerberos/NTLM?

Hi Steve, 

It needs to be KERBEROS protocol 
NTLN is blocked in our network. 

Does Crowd supports KERBEROS protocol ? 
If so, please let me know what is the configuration required ?


Thanks. 

Suggest an answer

Log in or Join to answer
Community showcase
Teodora [Botron]
Published Thursday in Marketplace Apps

Jira Inferno: The Nine Circles of Jira Administration Hell

If you spend enough time as a Jira admin - whether you are managing a single, mid-sized instance, a large enterprise one or juggling multiple instances at once - you will eventually find yourself in ...

775 views 5 17
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot