LDAP Server settings username

[Kevin Mote]

I am trying to configure the LDAP connection. In 'Administration' > 'Users' > 'User Directories' , under 'Server Settings' I need to supply a Username and pwd. I'm not familiar with Active Directory servers, and the documentation doesn't make it clear: Who's username do I need to supply here?

[Sorin Sbarnea (Citrix) · Accepted solution]

What you need to do is to request a service account. These are accounts used by applications/services, not people and their password does not expire.

They are always owned by one or two real people (primary and secondary) which can manage them, like changing passwords.

Usually the account name have a specific naming convention, the one I found in most companies was "svcacct_xxx" where xxx can be specified by you when you send the request to the IT department.

Do not forget to specify the reason why you request the account so they will just process the request faster.

You need two contains because someone else needs to be the owner if you leave the company.

[Carsten Beck-Astrup]

You need to make a request for a special account which is found in the AD aka. SER-JIRA or AD-JIRA-BIND. Remember to request that this special accounts password never expire.

The reason is that JIRA needs to "bind" to the AD with a user in order to make a lookup for the real user (even if the AD accepts anonymous access you need to bind - it is JIRA that requires it).

[David at David Simpson Apps]

The username of the user that you're connecting to AD with. You could test it out with your own username/credentials but people normally have a specific user created for this purpose.

[Kevin Mote]

so does that mean it needs to be someone with permission to access the AD server? (I don't. I am the JIRA admin but the AD admin is someone else. Does it need to be his username?)