<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hi,</div><div><br data-mce-bogus="1"></div><div>here are our working configurations. Might be useful.</div><div>We use compat tree for auth.</div><div>We use user in group matching.</div><div>We use group filter for login authorization.</div><div>We use FedoraDS as ldap connector on JIRA's side.</div><div>We don't use pw change or user create in IPA from JIRA side.</div><div>Watch out not to have matching local users/groups or you will suffer bigtime.</div><div>Initially it was setup not to use ldap groups, but was changed afterwards by </div><div>creating all new groups in ldap for this purpose and readding the users.</div><div>We use ldap service user for binding - https://www.freeipa.org/page/Zimbra_Collaboration_Server_7.2_Authentication_and_GAL_lookups_against_FreeIPA.</div><div><br data-mce-bogus="1"></div><div>Attributes: <br> "autoAddGroups": ""<br> "com.atlassian.crowd.directory.sync.currentstartsynctime": "null"<br> "com.atlassian.crowd.directory.sync.issynchronising": "false"<br> "com.atlassian.crowd.directory.sync.lastdurationms": "373"<br> "com.atlassian.crowd.directory.sync.laststartsynctime": "1433920165776"<br> "crowd.sync.incremental.enabled": "false"<br> "directory.cache.synchronise.interval": "3600"<br> "ldap.basedn": "dc=<OURDOMAIN>"<br> "ldap.connection.timeout": "0"<br> "ldap.external.id": ""<br> "ldap.group.description": "description"<br> "ldap.group.dn": "cn=groups,cn=compat"<br> "ldap.group.filter": "(&(objectClass=posixgroup)(|(cn=<COMPANYGROUP>)(cn=<TEAMGROUPS>)(cn=<JIRAGROUP>)))"<br> "ldap.group.name": "cn"<br> "ldap.group.objectclass": "groupOfUniqueNames"<br> "ldap.group.usernames": "memberUid"<br> "ldap.local.groups": "false"<br> "ldap.nestedgroups.disabled": "true"<br> "ldap.pagedresults": "false"<br> "ldap.pagedresults.size": "1000"<br> "ldap.password": ********<br> "ldap.pool.initsize": "null"<br> "ldap.pool.maxsize": "null"<br> "ldap.pool.prefsize": "null"<br> "ldap.pool.timeout": "0"<br> "ldap.propogate.changes": "false"<br> "ldap.read.timeout": "120000"<br> "ldap.referral": "false"<br> "ldap.relaxed.dn.standardisation": "true"<br> "ldap.roles.disabled": "true"<br> "ldap.search.timelimit": "60000"<br> "ldap.secure": "false"<br> "ldap.url": "ldap://<IPAURL>"<br> "ldap.user.displayname": "cn"<br> "ldap.user.dn": "cn=users,cn=accounts"<br> "ldap.user.email": "mail"<br> "ldap.user.encryption": "sha"<br> "ldap.user.filter": "(&(objectclass=posixAccount)(memberOf=cn=<JIRAGROUP>,cn=groups,cn=accounts,dc=<OURDOMAIN>))"<br> "ldap.user.firstname": "givenName"<br> "ldap.user.group": "memberOf"<br> "ldap.user.lastname": "sn"<br> "ldap.user.objectclass": "person"<br> "ldap.user.password": "userPassword"<br> "ldap.user.username": "uid"<br> "ldap.user.username.rdn": ""<br> "ldap.userdn": "uid=<OURSERVICEUSER>,cn=sysaccounts,cn=etc,dc=<OURDOMAIN>"<br> "ldap.usermembership.use": "false"<br> "ldap.usermembership.use.for.groups": "false"<br> "localUserStatusEnabled": "false"</div><div><br></div><div data-marker="__SIG_PRE__"><div><small style="font-size: 10pt; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 10pt; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span color="#077179" face="Verdana" style="font-size: 10pt; color: #077179; font-family: Verdana;" data-mce-style="font-size: 10pt; color: #077179; font-family: Verdana;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><b style="font-size: 10pt;" data-mce-style="font-size: 10pt;">Sándor Juhász</b></small></span></small><br style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span face="Verdana" style="font-size: 10pt; font-family: Verdana;" data-mce-style="font-size: 10pt; font-family: Verdana;"><span color="#666666" style="font-size: 10pt; color: #666666;" data-mce-style="font-size: 10pt; color: #666666;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;">System Administrator</small></span><br style="font-size: 10pt;" data-mce-style="font-size: 10pt;"></span><span color="#fca311" style="font-size: 10pt; color: #fca311;" data-mce-style="font-size: 10pt; color: #fca311;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span face="Verdana" style="font-size: 10pt; font-family: Verdana;" data-mce-style="font-size: 10pt; font-family: Verdana;"><b style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><big style="font-size: 10pt;" data-mce-style="font-size: 10pt;">ChemAxon</big></b></span></small></small></span><span face="Verdana" style="font-size: 10pt; font-family: Verdana;" data-mce-style="font-size: 10pt; font-family: Verdana;"><span color="#fca311" style="font-size: 10pt; color: #fca311;" data-mce-style="font-size: 10pt; color: #fca311;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> <b style="font-size: 10pt;" data-mce-style="font-size: 10pt;">Ltd</b>.</small></span><br style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span color="#666666" style="font-size: 10pt; color: #666666;" data-mce-style="font-size: 10pt; color: #666666;"></span></small></span></small></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span style="color: #666666; font-size: 10pt; font-family: Verdana;" data-mce-style="color: #666666; font-size: 10pt; font-family: Verdana;">Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031</span></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span style="color: #666666; font-size: 10pt; font-family: Verdana;" data-mce-style="color: #666666; font-size: 10pt; font-family: Verdana;"><span style="color: #666666; font-family: Verdana; font-size: 13px; background-color: #fdfdfd;" data-mce-style="color: #666666; font-family: Verdana; font-size: 13px; background-color: #fdfdfd;">Cell: +36704258964</span></span></div></div><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"Martin Kosek" <mkosek@redhat.com><br><b>To: </b>"Christopher Lamb" <christopher.lamb@ch.ibm.com>, freeipa-users@redhat.com<br><b>Sent: </b>Wednesday, June 10, 2015 9:22:03 AM<br><b>Subject: </b>Re: [Freeipa-users] LDAP authentication for JIRA using FreeIPA<br></div><br><div data-marker="__QUOTED_TEXT__">On 06/08/2015 06:44 PM, Christopher Lamb wrote:<br>> <br>> Hi All<br>> <br>> we are interested to know if anybody has succeeded (or for that matter<br>> failed) in using FreeIPA to provide user authentication for Atlassian<br>> products such as JIRA or Confluence?<br>> <br>> Somewhere in an Atlassian ticket I saw that FreeIPA is not officially<br>> supported, so I guess that should set our expectations .....<br>> <br>> If anyone has succeeded, then of course any tips on how best to do so would<br>> be fantastic!<br><br>I saw reply in the threads, so it should be covered.<br><br>BTW, please add +1s to respective Jira tickets to add proper FreeIPA support.<br>It would be really cool if Jira would know FreeIPA out of the box and could<br>connect to it natively!<br><br>-- <br>Manage your subscription for the Freeipa-users mailing list:<br>https://www.redhat.com/mailman/listinfo/freeipa-users<br>Go to http://freeipa.org for more info on the project<br></div></div></body></html>