add confluence to ldap
Asked by Bahman Sharzad:

i have a freeipa ldap. i try to add confluence to freeipa ldap.

in addldap there is no freeipa option. i try ms and openldap.

it's not working.


Answers:
author: Bahman Sharzad
body: I add confluence to freeipa. I write what i did, to use from other

Select user Directory under General configuration and select ldap

Configure LDAP User Directory {#toc-hId--1327533520}
----------------------------------------------------

### Server Settings {#toc-hId--636972046}

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

### LDAP Schema {#toc-hId-1850540787}

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

### LDAP Permissions {#toc-hId-43086324}

Select ReadOnly

### Advanced Settings: Default {#toc-hId--1764368139}

### User Schema Settings {#toc-hId-723144694}

-User Object Class: inetorgperson

-User Object Filter: \&(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

### Group Schema Settings {#toc-hId--1084309769}

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

### Membership Schema Settings {#toc-hId-1403203064}

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password


author: Bahman Sharzad
body: I add confluence to freeipa. I write what i did, to use from other

Select user Directory under General configuration and select ldap

Configure LDAP User Directory {#toc-hId--1327565103}
----------------------------------------------------

### Server Settings {#toc-hId--637003629}

-Name: " write one"

-Directory Type: OpenLdap # select

-Port: 389 # ssl not easy for use need to add Freeipa CA to jdk and enable ....

-Username: uid=admin,cn=users,cn=accounts,dc="you-domain",dc=local #i have in local

if using other user for admin, user must have ldap running in server.

-Password: "write admin password"

### LDAP Schema {#toc-hId-1850509204}

-Base DN: dc="yourdomain",dc=local

-Additional User DN: cn=users,cn=accounts

-Additional Group DN:cn=groups,cn=accounts

### LDAP Permissions {#toc-hId-43054741}

Select ReadOnly

### Advanced Settings: Default {#toc-hId--1764399722}

### User Schema Settings {#toc-hId-723113111}

-User Object Class: inetorgperson

-User Object Filter: \&(objectclass=inetorgperson)(memberOf=cn=confluence-users,cn=groups,cn=accounts,dc="youdomain",dc=local))

-User Name Attribute:uid

-User Name RDN Attribute: uid

-User First Name Attribute:giveName

-User Last Name Attribute: sn

-User Display Name Attribute: displayName

-User Email Attribute:mail

-User Password Attribute: userPassword

-User Password Encryption: SHA

-User Unique ID Attribute:uid

### Group Schema Settings {#toc-hId--1084341352}

-Group Object Class: groupofnames # all lowercase

-Group Object Filter: (objectclass=groupofnames) # all lowercase

-Group Name Attribute: cn

Group Description Attribute: description

### Membership Schema Settings {#toc-hId-1403171481}

-Group Members Attribute: member #lowercase

-User Membership Attribute:memberOf

Then save and test write som user and password


author: Bahman Sharzad
body: :-) now it's ok.

username should be like this:

uid=admin,cn=users,cn=compat,dc=domain-name,dc=local

but now, when i save there are one test basis connection ok and all other is yellow (not ok)

test af retrieve user, test get user's memberships with 1 groups retrieved,

test ret.. group ... . Not Succeded


author: Bahman Sharzad
body: Dosen't matter which type i use. error message is:

Test af forbindelse mislykkedes. Svar fra serveren:  
\[LDAP: error code 49 - Invalid Credentials\]; nested exception is javax.naming.AuthenticationException: \[LDAP: error code 49 - Invalid Credentials\]

And this is not correct i adding jenkins and graylog to my freeipa ldap. invalid credentials is not correct error message.


author: Monique Khairuliana[ServiceRocket]
body: Try to use Generic Directory Server instead.  
If it doesn't help, how is it not working? Do you see any error messages?


Tags: confluence-server

server