Best Practice Active Directory Integration

[Scout IT]

Hello all,

I have inherited an Atlassian setup that includes Jira, Confluence (Wiki), Crowd, Fisheye, and Bamboo.  I would like users to be able to change their Active Directory password using any one of these applications.  I have read through a ton of Attlassian Knowledge Base articles but none seem to get me to my endpoint.  I think it is a combination of me not knowing Atlassian products and the fact that our on premise setup was not done correctly.

Is there a clear writeup on how to make this happen or how this is typically done?  Should we be having all applications using Crowd and then Crowd talks to AD?

Thanks!

[Justin Justin]

Andrew - 

>  Should we be having all applications using Crowd and then Crowd talks to AD?

Since you have Crowd, yes.

Here's a good and primer: https://confluence.atlassian.com/display/CROWD/Crowd+101 

Here's the links you want at least (without being able to see what you have done so far). If you did not understand per your above question, maybe try to reinstall Crowd so it is fresh and clean, since will be with you a long time, so make sure it is right.

https://confluence.atlassian.com/display/CROWD/Installing+Crowd

https://confluence.atlassian.com/display/CROWD/About+the+Crowd+Administration+Console

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+JIRA

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+Confluence 

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+FishEye 

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+Bamboo

https://confluence.atlassian.com/display/CROWD/Configuring+an+LDAP+Directory+Connector 

Hope that helps. 

Justin

[Scout IT]

This is the part I am having an issue with: If you want to use Crowd to add users or change passwords in Microsoft Active Directory, you will need to install an SSL certificated generated by your Active Directory server and then install the certificate into your JVM keystore. Please read the instructions: Configuring an SSL Certificate for Microsoft Active Directory. Here is the error I see on Crowd when attempting to use SSL: There was a problem communicating with the LDAP server: simple bind failed: DC01-Server:636; nested exception is javax.naming.CommunicationException: simple bind failed: DC01-Server:636 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching DC-Server found.] Why is it looking for a Subject Alternative Name? Note: DC01-Server is a stand in name for purposes of this conversation. :)

[Scout IT]

Thanks Joseph, I didn't realize that there was a Pencil icon to the right of the Topics.

[Joe Clark]

Hi @Scout IT - you can click 'Edit' to go back to your question and change the topics. I've added the crowd and LDAP topics for you :)

[Scout IT]

I didn't realize there were more Topics. Can LDAP and maybe Crowd be added? I don't see a way under the edit to add more topics.