How to setup Jira with Microsoft AD
Asked by Ahmed Ayoub:

Trying to add the AD to Confluence.. I was already very successful doing that with Jira Service Desk.. but I have hit a kind of a snag when doing so for Confluence.. as soon as i add all my users, I get the following page:

Oops - an error has occurred {#toc-hId-1847967196}
--------------------------------------------------

[![logo](http://svr-jsddev1.opecfund.org:8090/images/logo/confluence_48_white.png "Confluence")](http://svr-jsddev1.opecfund.org:8090/)System Error {#toc-hId--704189765}
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------

A system error has occurred --- our apologies!

For immediate troubleshooting, consult our **[knowledge base](http://confluence.atlassian.com/display/CONFKB/Confluence+Knowledge+Base+Home)** for a solution.

If you would like to receive support from Atlassian's support team, ask your **[Confluence administrator](http://svr-jsddev1.opecfund.org:8090/contactadministrators.action)** to create a support issue on [Atlassian's support system](http://support.atlassian.com/) with the following information:

1. a description of your problem and what you were doing at the time it occurred
2. a copy of the error and system information found below
3. a copy of the application logs (if possible).

Your Confluence administrator can use the **[support request form](http://svr-jsddev1.opecfund.org:8090/admin/raisesupportrequest.action)** to create a support ticket which will include this information.

We will respond as promptly as possible.  
Thank you!

[**Return to site homepage...**](http://svr-jsddev1.opecfund.org:8090/)

### Cause {#toc-hId-842107065}

#### Stack Trace:\[hide\] {#toc-hId--1906563401}

i dont even know what to do, or which logs to look into. i am very new to this, please help :)


Answers:
author: Ahmed Ayoub
body: Here's an image of how my settings are. ![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/37334i1A2C997E9F7165E1/image-size/large?v=v2&px=999 "image.png")

comments: author: JP _AC Bielefeld Leader_
body: Could you post your Jira AD configuration? Is it exactly the same? I suggest, adding User \& Group DN to filter on them. How many users are in the AD?


author: Ahmed Ayoub
body: Sorry Jan, this went to my Junk Mail and I gave up on it as it was not a priority...   
But let me post you my AD configuration...:

=== Current user ===  
Directory ID: 98305  
Username: admin  
Display name: admin  
Email address: administrator@XXXX.org

=== Directories configured ===  
Directory ID: 98305  
Name: Confluence Internal Directory  
Active: true  
Type: INTERNAL  
Created date: 2018-11-07 16:02:21.0  
Updated date: 2018-11-07 16:02:21.0  
Allowed operations: \[DELETE_ROLE, CREATE_USER, UPDATE_GROUP, CREATE_ROLE, UPDATE_USER_ATTRIBUTE, UPDATE_GROUP_ATTRIBUTE, CREATE_GROUP, UPDATE_ROLE, DELETE_USER, DELETE_GROUP, UPDATE_USER, UPDATE_ROLE_ATTRIBUTE\]  
Implementation class: com.atlassian.crowd.directory.InternalDirectory  
Encryption type: atlassian-security  
Attributes:  
"user_encryption_method": "atlassian-security"

Directory ID: 1015809  
Name: Active Directory  
Active: true  
Type: CONNECTOR  
Created date: 2018-11-09 13:49:22.0  
Updated date: Thu Dec 06 10:04:49 CET 2018  
Allowed operations: \[UPDATE_GROUP_ATTRIBUTE, UPDATE_USER_ATTRIBUTE\]  
Implementation class: com.atlassian.crowd.directory.MicrosoftActiveDirectory  
Encryption type: sha  
Attributes:  
"com.atlassian.crowd.directory.sync.issynchronising": "false"  
"com.atlassian.crowd.directory.sync.lastdurationms": "16"  
"com.atlassian.crowd.directory.sync.laststartsynctime": "1544087089277"  
"crowd.sync.group.membership.after.successful.user.auth.enabled": "only_when_first_created"  
"crowd.sync.incremental.enabled": "true"  
"directory.cache.synchronise.interval": "3600"  
"ldap.basedn": "DC=XXXXfund,DC=org"  
"ldap.connection.timeout": "10000"  
"ldap.external.id": "objectGUID"  
"ldap.filter.expiredUsers": "true"  
"ldap.group.description": "description"  
"ldap.group.filter": "(objectCategory=Group)"  
"ldap.group.name": "cn"  
"ldap.group.objectclass": "group"  
"ldap.group.usernames": "member"  
"ldap.local.groups": "false"  
"ldap.nestedgroups.disabled": "true"  
"ldap.pagedresults": "true"  
"ldap.pagedresults.size": "1000"  
"ldap.pool.timeout": "0"  
"ldap.propogate.changes": "false"  
"ldap.read.timeout": "120000"  
"ldap.referral": "true"  
"ldap.relaxed.dn.standardisation": "true"  
"ldap.roles.disabled": "true"  
"ldap.search.timelimit": "60000"  
"ldap.secure": "false"  
"ldap.url": "ldap://XXXXfund.org:389"  
"ldap.user.displayname": "displayName"  
"ldap.user.email": "mail"  
"ldap.user.encryption": "sha"  
"ldap.user.filter": "(\&(objectCategory=Person)(sAMAccountName=\*))"  
"ldap.user.firstname": "givenName"  
"ldap.user.group": "memberOf"  
"ldap.user.lastname": "sn"  
"ldap.user.objectclass": "user"  
"ldap.user.password": "unicodePwd"  
"ldap.user.username": "sAMAccountName"  
"ldap.user.username.rdn": "cn"  
"ldap.usermembership.use": "false"  
"ldap.usermembership.use.for.groups": "false"  
"localUserStatusEnabled": "false"

what i dont understand is that i did the same thing i did in Jira Service Desk.. there it did not create any issues for me..

Thanks again for looking into this..


author: Ahmed Ayoub
body: I suggest, adding User \& Group DN to filter on them.

i did do that, same problem.

How many users are in the AD?

569 Users


author: Ahmed Ayoub
body: Oh, i only bought the starter license - if that has any effect ...


Tags: active-directory

confluence-server

server