• 5
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      Atlassian Update - 22 April 2015

      Hi everyone,

      This issue has been open for 12 years, and as of April 2015 we still have no plans to support NTLM authentication natively in JIRA. We do plan to continue investing in improving support for external directory configurations in JIRA, however we want to focus on improving our support for the current set of configurations.

      Regards,
      Dave Meyer
      dmeyer@atlassian.com
      Product Manager, JIRA Platform

      Original request description:

      Support NTLM authentication instead of password login when appropriate. This is attractive, even more as Mozilla 1.4 supports it.

      Workaround:

      Customers have reported in past comments like this one or this one that they were successful once they installed Cntlm Authentication Proxy locally to their JIRA server, configured and tested it to make sure "Cntlm" works with their corporate NTLM and then used the parameters documented in How to Configure an Outbound HTTP and HTTPS Proxy for JIRA to point to the "Cntlm" proxy instead - and that one will do the job to talk to NTLM.

      More detailed steps can be found on How to Configure an Outbound HTTP and HTTPS Proxy for JIRA.

        1. ntlm4jira.diff
          3 kB
        2. ntlmauth-0.2.tar.bz2
          32 kB
        3. ntlmauth4jira-0.3.tar.bz2
          33 kB
        4. ntlmauth4jira-0.4.tar.bz2
          281 kB
        5. ntlmauth4jira-0.5.tar.bz2
          286 kB
        6. project.properties
          0.1 kB
        7. project.xml
          2 kB

            [JRASERVER-2398] Support NTLM authentication

            Dave Meyer added a comment -

            Hi everyone,

            This issue has been open for 12 years, and as of April 2015 we still have no plans to support NTLM authentication natively in JIRA. We do plan to continue investing in improving support for external directory configurations in JIRA, however we want to focus on improving our support for the current set of configurations.

            Regards,
            Dave Meyer
            dmeyer@atlassian.com
            Product Manager, JIRA Platform

            Dave Meyer added a comment - Hi everyone, This issue has been open for 12 years, and as of April 2015 we still have no plans to support NTLM authentication natively in JIRA. We do plan to continue investing in improving support for external directory configurations in JIRA, however we want to focus on improving our support for the current set of configurations. Regards, Dave Meyer dmeyer@atlassian.com Product Manager, JIRA Platform

            Robert Stoffers added a comment - - edited

            The easiest way to achieve NTLM authentication is to use CNTLM which is available for both Windows and Linux. You then configure the CNTLM service/daemon to connect to your NTLM proxy and you configure Jira to connect to your new CNTLM service/daemon. CNTLM proxies your requests including the appropriate NTLM authentication that allows Jira to communicate with the outside world. No extra plugins like has been suggested above are required and I have this working for several applications including Jira.

            You can grab CNTLM from http://cntlm.sourceforge.net/ or if you are on Linux you might already have a package for it you can install from your repository.

            Robert Stoffers added a comment - - edited The easiest way to achieve NTLM authentication is to use CNTLM which is available for both Windows and Linux. You then configure the CNTLM service/daemon to connect to your NTLM proxy and you configure Jira to connect to your new CNTLM service/daemon. CNTLM proxies your requests including the appropriate NTLM authentication that allows Jira to communicate with the outside world. No extra plugins like has been suggested above are required and I have this working for several applications including Jira. You can grab CNTLM from http://cntlm.sourceforge.net/ or if you are on Linux you might already have a package for it you can install from your repository.

            JIRA customers interested in NTLM integration might find value from the NTLM Authenticator for JIRA, which is a plugin that is developed by an Atlassian Expert from New Zealand.

            They state on their website: "We have customers successfully using this plugin in New Zealand, Australia, Europe and North America both in NTLMv1 and NTLMv2 environments with Confluence 3.x and 4.x, Jira 3.x, 4.x and 5.x", which suggests this would make a reliable solution for customers who want an SSO solution that logs them into JIRA directly from their Desktop logins.

            John Inder [Atlassian] (Inactive) added a comment - JIRA customers interested in NTLM integration might find value from the NTLM Authenticator for JIRA , which is a plugin that is developed by an Atlassian Expert from New Zealand. They state on their website: " We have customers successfully using this plugin in New Zealand, Australia, Europe and North America both in NTLMv1 and NTLMv2 environments with Confluence 3.x and 4.x, Jira 3.x, 4.x and 5.x ", which suggests this would make a reliable solution for customers who want an SSO solution that logs them into JIRA directly from their Desktop logins.

            Based on the sources ntmlauth4jira-0.5.2, this is a patch which makes the plugin work under JIRA 4.3.2 (for our site).

            Please note: There might be greater whitespace differences in reference to the sources of 0.5.2

            Thomas Leineweber added a comment - Based on the sources ntmlauth4jira-0.5.2, this is a patch which makes the plugin work under JIRA 4.3.2 (for our site). Please note: There might be greater whitespace differences in reference to the sources of 0.5.2

            Currently, the NTLM integration can be only achieved with help of a third-party plugin NTLM Authentication. Since the plugin was written by a third party developers, Atlassian does not provide any support to this extension.

            http://confluence.atlassian.com/display/Support/How+to+Get+Legendary+Support+from+Atlassian

            You may wish to post your question in the community supported forums.atlassian.com as someone might know a workaround the compatibility problem.

            Regards,
            Bogdan

            Bogdan Dziedzic [Atlassian] added a comment - - edited Currently, the NTLM integration can be only achieved with help of a third-party plugin NTLM Authentication . Since the plugin was written by a third party developers, Atlassian does not provide any support to this extension. http://confluence.atlassian.com/display/Support/How+to+Get+Legendary+Support+from+Atlassian You may wish to post your question in the community supported forums.atlassian.com as someone might know a workaround the compatibility problem. Regards, Bogdan

            Bruno Steininger added a comment - - edited

            Hello,

            we have been successfully using ntlmauth4jira on JIRA 3.10.2 for quite some time now. Upgrading to Jira 4.0 or 4.0.1 is not a very attractive option at the moment - our attempts to get this plugin running on 4.0.1 failed miserably.

            Please give us a status regarding this topic. Is ntlmauth4jira indeed abandonware as the previous speaker assumes?

            Are there any other options? SSO via NTLM is crucial.

            Best regards,
            Bruno

            Bruno Steininger added a comment - - edited Hello, we have been successfully using ntlmauth4jira on JIRA 3.10.2 for quite some time now. Upgrading to Jira 4.0 or 4.0.1 is not a very attractive option at the moment - our attempts to get this plugin running on 4.0.1 failed miserably. Please give us a status regarding this topic. Is ntlmauth4jira indeed abandonware as the previous speaker assumes? Are there any other options? SSO via NTLM is crucial. Best regards, Bruno

            MatthewC added a comment -

            Hello,

            The ntlmauth4jira plugin hasn't had any updates for quite some time now & is starting to look like abandonware. Is there any new view from Atlassian if they will support NTLM authentication?

            Is it a "no & we never will", "maybe", or something else?

            Trying to fix a couple of bugs but we're having some trouble

            MatthewC added a comment - Hello, The ntlmauth4jira plugin hasn't had any updates for quite some time now & is starting to look like abandonware. Is there any new view from Atlassian if they will support NTLM authentication? Is it a "no & we never will", "maybe", or something else? Trying to fix a couple of bugs but we're having some trouble

            Dom,

            I've replied on the Confluence page.

            Jeff Turner added a comment - Dom, I've replied on the Confluence page.

            I just added this to http://confluence.atlassian.com/display/JIRAEXT/NTLM+Authentication.. I'm not sure which site is active so I'm posting this here as well. I hope someone can help.

            Hello... I have a major problem. We are using both AD accounts and local jira accounts. The local jira accounts authenticate fine but when we go to add comments using a local account we get a system error: com.atlassian.jira.exception.IssueNotFoundException: Issue with id 'null' or key 'null' could not be found in the system

            this is repeatable with all issues across all projects, not just one in particular. This only happens using IE 6. Firefox works fine.

            I've done some research and it seems to be a session timeout or not logged in error, but I know I'm logged in and there is no way the session timed out that quickly.

            we're running jira 3.7.4 standalone enterprise on windows 2k3 using java 1.5.0_08 and ntlmauth 0.5.2

            Please help.

            Thanks!

            -Dom

            Dom D'Alessandro added a comment - I just added this to http://confluence.atlassian.com/display/JIRAEXT/NTLM+Authentication .. I'm not sure which site is active so I'm posting this here as well. I hope someone can help. Hello... I have a major problem. We are using both AD accounts and local jira accounts. The local jira accounts authenticate fine but when we go to add comments using a local account we get a system error: com.atlassian.jira.exception.IssueNotFoundException: Issue with id 'null' or key 'null' could not be found in the system this is repeatable with all issues across all projects, not just one in particular. This only happens using IE 6. Firefox works fine. I've done some research and it seems to be a session timeout or not logged in error, but I know I'm logged in and there is no way the session timed out that quickly. we're running jira 3.7.4 standalone enterprise on windows 2k3 using java 1.5.0_08 and ntlmauth 0.5.2 Please help. Thanks! -Dom

            Thanks for the advice. I actually got more information about the missing class:
            java.lang.NoClassDefFoundError: com/atlassian/seraph/filter/LoginFilter

            This class is part of the seraph jar file located in the WEB-INF/lib. The requested file is in this directory. So it's just like WebSphere could not find it. I tried to put the jar file in the lib directory of WebSphere and I did get the same error: another opensymphony class could not be found. This is another classpath problem in WebSphere but I just cannot figure out the reason why it disappears as soon as I disable the NTLM filter in web.xml...

            Any idea ?

            Bruno

            Deleted Account (Inactive) added a comment - Thanks for the advice. I actually got more information about the missing class: java.lang.NoClassDefFoundError: com/atlassian/seraph/filter/LoginFilter This class is part of the seraph jar file located in the WEB-INF/lib. The requested file is in this directory. So it's just like WebSphere could not find it. I tried to put the jar file in the lib directory of WebSphere and I did get the same error: another opensymphony class could not be found. This is another classpath problem in WebSphere but I just cannot figure out the reason why it disappears as soon as I disable the NTLM filter in web.xml... Any idea ? Bruno

              Unassigned Unassigned
              ea5661cac51b Jonas Bergvall
              Votes:
              87 Vote for this issue
              Watchers:
              58 Start watching this issue

                Created:
                Updated:
                Resolved: