JIRA LDAP authentication - what are the frequent queries being run against LDAP

[Gerin Abraham]

Hello All,

We are looking to authenticate JIRA with our corporate LDAP. We need to provide information on what are the frequent LDAP queries performed against LDAP.

Thanks

Gerin

[Andy Nguyen · Accepted solution]

Hi Gerin,

Usually JIRA will query LDAP for updates on users and groups. Here're the sample logs of an LDAP Connector with "Read Only, with Local Groups" permission:

2014-01-31 21:26:39,028 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteDirectory] synchronisation for directory [ 10300 ] starting
2014-01-31 21:26:39,113 QuartzScheduler_Worker-3 INFO ServiceRunner     [directory.ldap.cache.RemoteDirectoryCacheRefresher] found [ 1 ] remote users in [ 85ms ]
2014-01-31 21:26:39,115 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteChangeOperations] scanned and compared [ 1 ] users for delete in DB cache in [ 2ms ]
2014-01-31 21:26:39,115 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteChangeOperations] scanned for deleted users in [ 2ms ]
2014-01-31 21:26:39,117 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteChangeOperations] scanning [ 1 ] users to add or update
2014-01-31 21:26:39,117 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DirectoryCacheImplUsingChangeOperations] scanned and compared [ 1 ] users for update in DB cache in [ 1ms ]
2014-01-31 21:26:39,117 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DirectoryCacheImplUsingChangeOperations] synchronised [ 1 ] users in [ 1ms ]
2014-01-31 21:26:39,126 QuartzScheduler_Worker-3 INFO ServiceRunner     [directory.ldap.cache.RemoteDirectoryCacheRefresher] found [ 3 ] remote groups in [ 8ms ]
2014-01-31 21:26:39,127 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DirectoryCacheImplUsingChangeOperations] scanning [ 3 ] groups to add or update
2014-01-31 21:26:39,130 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteChangeOperations] scanned and compared [ 3 ] groups for update in DB cache in [ 3ms ]
2014-01-31 21:26:39,130 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DirectoryCacheImplUsingChangeOperations] synchronized [ 3 ] groups in [ 3ms ]
2014-01-31 21:26:39,132 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteChangeOperations] scanned and compared [ 3 ] groups for delete in DB cache in [ 2ms ]
2014-01-31 21:26:39,132 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteChangeOperations] removing [ 1 ] groups
2014-01-31 21:26:39,155 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteChangeOperations] removed [ 1 ] groups in [ 23ms ]
2014-01-31 21:26:39,177 QuartzScheduler_Worker-3 INFO ServiceRunner     [atlassian.crowd.directory.DbCachingRemoteDirectory] FULL synchronisation complete for directory [ 10300 ] in [ 149ms ]

Cheers,

Andy

[Gerin Abraham]

Thank You Andy