Integratation with LDAP

[amar singh]

Hi all,

I am trying to do integration with LDAP, so all the currents users get authenticated with LDAP. It is basically either read only with local groups or Delegated LDAP authentication. I want them to use their windows passwords. Also, I want to manage groups internally in JIRA. The groups should be copied from LDAP and then I would add those groups into my specific internal groups.

It works fine with entirly new user directory, like if I don't have any user in JIRA and then I integrate with LDAP, it copy all the users and add them to jira-users group. so they are able to log-in with LDAP credentials.

The problem occurs when I try to integrate with a already existing user directory in JIRA. When I do that, the external users are still not able to use their windows password, they had to use their JIRA password to log-in.

[Jeremy Largman · Accepted solution]

Make sure to check the order of your LDAP repositories. The one that appears on top will be the primary. Check Managing Multiple Directories.

[amar singh]

Well I had tried that too, but suppose the user exists in the JIRA user directory and also in LDAP, the system maybe is taking only his local password and not his windows one.

[Jeremy Largman]

If the user exists in LDAP and locally, then it will take the password of whichever directory is placed on top. Are you saying that LDAP is on top, and it's not working? If that's the case, then the LDAP configuration isn't scanning the right node in Active Directory, and is therefore progressing on to the next directory (the local one).