I need to only allow known emails in active directory to create users (authenticated) users. now any one who sends from gmail or hotmail any unkown senders jira allowes to create a user account. In need to stop this behaviuor.
Any advice please..
This is because you left the createusers flag set on the create issue or comment handler - there are 2 ways JIRA can deal with unknown users, it can either create new ones, as you've found out, or it can use the default reporter you set up. To configure services , you need to follow the guide at http://confluence.atlassian.com/display/JIRA044/Creating+Issues+and+Comments+from+Email#CreatingIssuesandCommentsfromEmail-IssueCommentCreation but essentially you need to remove the createusers attribute and add a reporterusername="some valid user" attribute
This is an area of JIRA that is difficult to configure, and we've simplified it loads in JIRA 5.0
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.