Unable to log into JIRA because the LDAP link to active directory was broken.

Mondrian IT January 21, 2014

None of our developers were able to log into JIRA because the LDAP link to active directory was broken.

Current Issue,

1. The LDAP connection is now restored, however developers are still not able to log in - get “You do not have a permission to log in” message.

2. In JIRA portal, AD users’ status is showing as ‘Not recorded’

3. Attempted to add user to group but get error message “Adding user to group 'jira-users' failed. Server message is: com.atlassian.crowd.exception.runtime.OperationFailedException: org.springframework.ldap.InvalidSearchFilterException: Unbalanced parenthesis; nested exception is javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis; remaining name 'dc=mychilddomain,dc=myparentdomain,dc=com'.

1 answer

0 votes
Tiago Comasseto
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
January 21, 2014

Hi Fini,

Apparently one of your filters is not correct. This issue is described in this KB, please check the parenthesis of your filters and make sure they correct.


Cheers

Mondrian IT January 22, 2014

Hi Tiago,

Below is the User filter configured.

(&(objectCategory=Person)(sAMAccountName=*))

The users get imported into JIRA which tells me JIRA is talking with active directory(AD). The user list in JIRA tag users imported from AD as 'not recorded'.

Get the error message below,

Adding user 'user1' to group 'jira-users' failed. Server message is: com.atlassian.crowd.exception.runtime.OperationFailedException: org.springframework.ldap.InvalidSearchFilterException: Unbalanced parenthesis; nested exception is javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis; remaining name 'dc=mychilddomain,dc=myparentdomain,dc=com'.

Mondrian IT February 2, 2014

Someone please respond.

Suggest an answer

Log in or Sign up to answer