add confluence to ldap
Asked by Bahman Sharzad:

How to add confluece to freeipa ldap?


Answers:
author: Bahman Sharzad
body: I add confluence to freeipa. I write what i did, to use from other

Select user Directory under General configuration and select ldap

Configure LDAP User Directory {#toc-hId--1327533518}
----------------------------------------------------

### Server Settings {#toc-hId--636972044}

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

### LDAP Schema {#toc-hId-1850540789}

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

### LDAP Permissions {#toc-hId-43086326}

Select ReadOnly

### Advanced Settings: Default {#toc-hId--1764368137}

### User Schema Settings {#toc-hId-723144696}

-User Object Class: inetorgperson

-User Object Filter: \&(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

### Group Schema Settings {#toc-hId--1084309767}

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

### Membership Schema Settings {#toc-hId-1403203066}

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password


author: repi
body: [@Bahman Sharzad](/t5/user/viewprofilepage/user-id/1524631)

<https://confluence.atlassian.com/doc/connecting-to-an-ldap-directory-229838241.html>

<https://confluence.atlassian.com/doc/connecting-to-an-internal-directory-with-ldap-authentication-229838462.html>

comments: author: Bahman Sharzad
body: It's error for all type of ldap

error is :

\[LDAP: error code 49 - Invalid Credentials\]; nested exception is javax.naming.AuthenticationException: \[LDAP: error code 49 - Invalid Credentials\]


author: repi
body: Error code 49 says that there is something wrong with the login to the ldap server.

<https://confluence.atlassian.com/stashkb/ldap-error-code-49-317195698.html>

|----|--------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| 49 | LDAP_INVALID_CREDENTIALS | Indicates that during a bind operation one of the following occurred: The client passed either an incorrect DN or password, or the password is incorrect because it has expired, intruder detection has locked the account, or another similar reason. See the data code for more information. |

<https://docs.servicenow.com/bundle/orlando-platform-administration/page/administer/reference-pages/reference/r_LDAPErrorCodes.html>


author: Bahman Sharzad
body: My problem is i have ldap in freeipa and i don't know which type i select. There are

Microsoft and openldap..... , not something to close to freeipa ldap.


author: repi
body: Hi, [@Bahman Sharzad](/t5/user/viewprofilepage/user-id/1524631) you only have two options. The offered selection options in the confluence to try out yourself whether one fits and enter your values and see if it works.  
The second option is to ask the community a new question with the content of whether someone is running confluence with a freeipa and how to configure it.


author: Bahman Sharzad
body: ok it directory server i need to select. first test is ok but when i want to save just test basic connection is ok all other is says not performed.

and can't accept my user from ldap (error message says user does not exist.


author: Bahman Sharzad
body: I add confluence to freeipa. here is what i did if other want to use

Configure LDAP User Directory {#toc-hId--1327565047}
----------------------------------------------------

### Server Settings {#toc-hId--637003573}

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

### LDAP Schema {#toc-hId-1850509260}

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

### LDAP Permissions {#toc-hId-43054797}

Select ReadOnly

### Advanced Settings: Default {#toc-hId--1764399666}

### User Schema Settings {#toc-hId-723113167}

-User Object Class: inetorgperson

-User Object Filter: \&(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

### Group Schema Settings {#toc-hId--1084341296}

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

### Membership Schema Settings {#toc-hId-1403171537}

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password