JIRA end user unable to authenticate against Active Directory

[Steven Lam]

End user previously able to log in is now unable to.

No changes have been made to this users account prior to incident.

Tried solutions:

- Active Directory password reset (tested account)

- JIRA internal password reset

- JIRA forgot password feature

- Re-indexed JIRA

- Created dummy account on JIRA, authenticates via Active Directory successfully.

[Steven Lam · Accepted solution]

It seems to be some sort of AD sync / auth issue.

To resolve this I had to go into the database and modify 3 tables

cwd_user, cwd_membership, cwd_user_attributes

and change directory_id from 10000 (LDAP/AD authentication) to 1 (JIRA internal auth) referencing user ID

restart then change it back from 1 to 10000 and restart and this would resolve the issue.

Out of the hundreds of users we have, this has occured 3 times.

[Andy Brook [Plugin People]]

Do you have an internal directory? perhaps there is a duplicate ID, perhaps thats failing an auth check. Also, check your filters, are they 'exotic' or simplistic. Validate assumptions for lookup etc with ldap browsers like jXplorer or my favorite apache directory studio.