Problem integrating Jira and LDAP

[Mezzanotte]

Hello everyone,

I've setup Jira to use LDAP (Open LDAP, read-only). When I synchronized, the groups and users are correctly found. But the association between users and groups was not found.

The Group Schema Settings is configured as a PosixGroup. I guess I'm not setting the correct values for the Membership Schema Settings:

My Group Schema Settings:

<label style="float: left; display: block; left: -240px; line-height: 1; margin-right: -230px; padding-top: 4px; position: relative; width: 230px; text-align: right; word-wrap: break-word;" for="configure-ldap-form-ldapGroupObjectclass">Group Object Class:required</label><input id="configure-ldap-form-ldapGroupObjectclass" class="text " style="margin-top: 0px; margin-right: 5px; margin-bottom: 0px; margin-left: 0px; width: 250px; color: #000000; padding: 2px;" type="text" name="ldapGroupObjectclass" value="posixGroup"/>

LDAP attribute objectClass value to search for when loading groups.

<label style="float: left; display: block; left: -240px; line-height: 1; margin-right: -230px; padding-top: 4px; position: relative; width: 230px; text-align: right; word-wrap: break-word;" for="configure-ldap-form-ldapGroupFilter">Group Object Filter:required</label><input id="configure-ldap-form-ldapGroupFilter" class="text " style="margin-top: 0px; margin-right: 5px; margin-bottom: 0px; margin-left: 0px; width: 250px; color: #000000; padding: 2px;" type="text" name="ldapGroupFilter" value="(objectclass=posixGroup)"/>

The filter to use when searching group objects.

<label style="float: left; display: block; left: -240px; line-height: 1; margin-right: -230px; padding-top: 4px; position: relative; width: 230px; text-align: right; word-wrap: break-word;" for="configure-ldap-form-ldapGroupName">Group Name Attribute:required</label><input id="configure-ldap-form-ldapGroupName" class="text " style="margin-top: 0px; margin-right: 5px; margin-bottom: 0px; margin-left: 0px; width: 250px; color: #000000; padding: 2px;" type="text" name="ldapGroupName" value="cn"/>

The attribute field to use when loading the group name.

<label style="float: left; display: block; left: -240px; line-height: 1; margin-right: -230px; padding-top: 4px; position: relative; width: 230px; text-align: right; word-wrap: break-word;" for="configure-ldap-form-ldapGroupDescription">Group Description Attribute:required</label><input id="configure-ldap-form-ldapGroupDescription" class="text " style="margin-top: 0px; margin-right: 5px; margin-bottom: 0px; margin-left: 0px; width: 250px; color: #000000; padding: 2px;" type="text" name="ldapGroupDescription" value="description"/>

My Membership Schema Setting:

<label style="float: left; display: block; left: -240px; line-height: 1; margin-right: -230px; padding-top: 4px; position: relative; width: 230px; text-align: right; word-wrap: break-word;" for="configure-ldap-form-ldapGroupUsernames">Group Members Attribute:required</label><input id="configure-ldap-form-ldapGroupUsernames" class="text " style="margin-top: 0px; margin-right: 5px; margin-bottom: 0px; margin-left: 0px; width: 250px; color: #000000; padding: 2px;" type="text" name="ldapGroupUsernames" value="memberUid"/>

The attribute field to use when loading the group members from the group.

<label style="float: left; display: block; left: -240px; line-height: 1; margin-right: -230px; padding-top: 4px; position: relative; width: 230px; text-align: right; word-wrap: break-word;" for="configure-ldap-form-ldapUserGroup">User Membership Attribute:required</label><input id="configure-ldap-form-ldapUserGroup" class="text " style="margin-top: 0px; margin-right: 5px; margin-bottom: 0px; margin-left: 0px; width: 250px; color: #000000; padding: 2px;" type="text" name="ldapUserGroup" value="memberOf"/>

The attribute field to use when loading a user's groups.

<fieldset class="group " style="border-style: initial; border-color: initial; border-width: initial; position: relative; clear: both; min-height: 1.6em; color: #333333; font-family: arial, tahoma, verdana, sans-serif; font-size: 13px; line-height: 18px; padding: 0px; margin: 0px;"><legend>Use the User Membership Attribute:</legend>

<input id="configure-ldap-form-ldapUsermembershipUse" class="checkbox " style="margin-top: 0px; margin-right: 2px; margin-bottom: 0px; margin-left: 0px; border-width: initial; border-color: initial; float: none; width: 15px; height: auto; vertical-align: middle; position: static; border-style: none; padding: 0px;" type="checkbox" name="ldapUsermembershipUse" value="true"/> <label style="float: none; display: inline; left: 0px; line-height: 1; padding-top: 4px; position: static; width: 230px; text-align: right; word-wrap: break-word; margin: 0px;" for="configure-ldap-form-ldapUsermembershipUse">When finding the user's group membership</label>

</fieldset>

For the Group Member Attribute I tried with uniqueMember and member without success.

Am I doing something wrong?

Thx,

Mezza

<label style="float: left; display: block; left: -240px; line-height: 1; margin-right: -230px; padding-top: 4px; position: relative; width: 230px; text-align: right; word-wrap: break-word;" for="configure-ldap-form-ldapGroupObjectclass">
</label>

[Mezzanotte · Accepted solution]

I solved my problem.

It was just a matter of configuration. It worked with this attributes:

directory type: Open LDAP (Read-only Posix Schema)

username attribute: uid

user membership attribute: uid

[Michael Schneider]

After you have made these changes you just pressed the synchronize link? Unfortunately your solution is not working at our installation :(

[Mezzanotte]

Yes After the changes, I synchronized and it worked. How are your settings?

[Leo Diaz _ DEISER]

Hi Mezza!

I don't know the JIRA roadmap, I ran this query in the 4.4.3 version.

I recommend you to check it previously (test env.). Then, if all works fine, you can go on with it the production env!!

[Leo Diaz _ DEISER]

Hi!

I had the same problem, check the following link, which explains how to associate groups and user directories with a SQL script.

https://jira.atlassian.com/browse/JRA-24161?focusedCommentId=249354&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-249354

[Mezzanotte]

Hi Leo,

I'm using Jira 4,4. Is this the only way to fix this?!