Users from Active Directory get synced into Jira without group memberships

Kenneth Juul Wannebo September 19, 2018

I've set up an User directory importing users and groups from Active Directory.

Both users and groups are synchronized successfully, but users are not assigned to the groups.

Ad users have the memberOf attribute and ad groups have the member attribute set.

Jira Server 6.4.12

2 answers

1 accepted

1 vote
Answer accepted
Shankar Asam {Appfire}
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 19, 2018

Hi Kenneth,

Do you mean the AD users are not assigned to the AD groups? Do you see any errors from atlassian log file? You can also turn on debugging mode to see more logs.

Can you also provide and verify "User Object Filter" and "Group Object Filter" with your AD settings? Please see this article might helpful.

-Shankar

Kenneth Juul Wannebo September 24, 2018

Hi Shakar,

After reading your post, I wrote a more narrow "Group Object Filter", excluding some groups. Users are now being added correctly to the correct groups.

I'm guessing some of the AD-groups was causing trouble.

1 vote
Pete Singleton
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 19, 2018

Make sure you've set the LDAP Permissions section to "Read Only, with Local Groups".

Suggest an answer

Log in or Sign up to answer