-
Bug
-
Resolution: Fixed
-
Medium
-
4.4.3, 5.1.6, 5.2.1, 6.0, 6.0.5, 6.1.2
-
4.04
-
Summary
We have our Jira instance setup to synchronize with Active Directory such that any users that are added to a particular AD group are supposed to automatically become Jira users. When we initially configured the user directory, the synchronization worked perfectly and all users were able to login to Jira. However, when a new user joined the AD group, it is not automatically created in JIRA.
Steps to Reproduce
The following LDAP User Filter is used on the User Directory:
"ldap.user.filter": "(&(objectCategory=Person)(memberOf=CN=newgrp,CN=Users,DC=company,DC=local))"
Expected Results
All the users that are members of the newgrp after the synchronization are automatically added to the jira-users group.
Actual Results
For the first time the directory is synchronized, everything works fine. However, if a user is added to the newgrp directory after the first synchronization, it is not automatically added to Jira, instead we can see this message in the atlassian-jira.log:
2011-12-06 10:05:41,016 QuartzWorker-1 WARN ServiceRunner [atlassian.crowd.directory.DbCachingRemoteChangeOperations] Could not add the following missing users to group [ newgrp ]: [johndoe]
Workaround
The workaround for this situation is to go into your Advanced Settings in your user Directory and uncheck "Enable Incremental Synchronization" as per Connecting to an LDAP Directory.
- has a derivative of
-
CWD-3940 AD Full Sync might leave the user map cache in a corrupted state if there is a failure when attempting to add a user to the internal directory
- Closed
-
CWD-3942 AD Incremental Synchronisation will leave the user map cache in an inconsistent state of a user is removed from AD
- Closed
-
CWD-3943 AD Incremental Synchronisation does not detect new users that should be added to the directory via a memberOf user filter
- Closed
- is caused by
-
CWD-3320 Incremental synch in MS Active Directory does not always work after intial synch
- Closed
- is related to
-
CWD-3955 AD Incremental Sync may remove wrong users from internal dir
- Closed
- mentioned in
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Wiki Page Loading...
-
Wiki Page Loading...
-
Wiki Page Loading...