How do I remove an internal user with a duplicate username from an AD server?

[Curtis Stewart]

In the User Management console of Bamboo, I'm currently unable to remove the local user (no delete link for either AD or local user).

[Daniel R]

Deleting using the UI is straightforward and since there is also no confirmation dialog the process is fast although admittedly, it requires a lot of clicking in the same place!

1. Stop Bamboo.
2. Comment out or remove the LDAP configuration from atlassian-user.xml.
3. Start Bamboo.
4. Log in as the system administrator. It is best practice to retain user #1 as the system administrator user just as long as there is no duplicate user in LDAP with the same username. The details of this user can be found by querying the database

   SELECT * FROM users WHERE id=1

   If you cannot remember the password for this user you can update it directly in the database by providing a known hash using these instructions: https://confluence.atlassian.com/bamboo/restoring-passwords-to-recover-admin-users-289277354.html

5. Navigate to Administration > Security settings
6. If the option "Read-only external user management?" is selected:
   1. Edit the settings.
   2. Deselect the option.
   3. Save the settings.
7. Navigate to Administration > Users
8. Click Delete in the Operations column next to each user that you want to delete. Note that you cannot delete the logged in user.

To re-add the LDAP configuration:

1. Stop Bamboo..
2. Edit the atlassian-user.xml configuration file.
3. Start Bamboo.

Thanks,

[rsperafico]

Hello Curtis,

Thank you for your question.

In "<bamboo-home>/xml-data/configuration/atlassian-user.xml" you should have the following configuration:

<atlassian-user>
    <repositories>
        <!-- LDAP repository -->
        <ldap key="ldapRepository" name="Active Directory LDAP Repository" cache="true">
            <!-- your LDAP configuration -->
        </ldap>
         
        <!-- Default bamboo user repository -->
        <hibernate name="Hibernate Repository" key="hibernateRepository" description="Hibernate Repository" cache="true"/>
    </repositories>
</atlassian-user>

Based on the above configuration, you are able to log in to Bamboo using LDAP users and Bamboo Internal Directory users. In case you are not using Bamboo Internal Directory users to log in to Bamboo, you could go to the same "atlassian-user.xml" configuration file and comment out <hibernate/>. As a result, you should have:

<atlassian-user>
    <repositories>
        <!-- LDAP repository -->
        <ldap key="ldapRepository" name="Active Directory LDAP Repository" cache="true">
            <!-- your LDAP configuration -->
        </ldap>
         
        <!-- Default bamboo user repository -->
		<!-- 
        <hibernate name="Hibernate Repository" key="hibernateRepository" description="Hibernate Repository" cache="true"/>
		-->
    </repositories>
</atlassian-user>

Once the change is made, please stop and start Bamboo.

If you find this answer useful, I would kindly ask you to accept it so the same will be visible to others who might be facing the same issue you have inquired.

Thank you for your understanding.

—

Kind regards,
Rafael P. Sperafico
Atlassian Support

[Daniel R]

Do not remove the internal directory under any circumstance as this will cause unexpected behavior in Bamboo.