目的

Some users prefer using OpenDJ as their directory server. However, this LDAP server is not officially supported by JIRA as mentioned in the Supported platforms. 

This guide will help JIRA administrators configure the user directory specifically for the OpenDJ directory server.

LDIF

• Examples of standard LDIF from OpenDJ looks something like this: 

  • ユーザー

    version: 1
    
    dn: uid=abarnes,ou=People,dc=example,dc=com
    objectClass: organizationalPerson
    objectClass: inetOrgPerson
    objectClass: person
    objectClass: top
    objectClass: posixAccount
    cn: Anne-Louise Barnes
    gidNumber: 1000
    homeDirectory: /home/abarnes
    sn: Barnes
    uid: abarnes
    uidNumber: 1119
    departmentNumber: 1000
    facsimileTelephoneNumber: +1 408 555 4661
    givenName: Anne-Louise
    l: Lysaker
    mail: abarnes@example.com
    manager: uid=scarter, ou=People, dc=example,dc=com
    ou: Payroll
    ou: People
    preferredLanguage: no
    roomNumber: 2290
    street: Lysaker Torg 2
    telephoneNumber: +1 408 555 9445
    userPassword:: e1NTSEF9azBteVcxaXhoR3NxVk5GOUpOdlUrcTFqL3pkZ2JYVDYzMHpHbEE9P
     Q==

  • グループ

    version: 1
    
    dn: cn=jira-users,ou=Groups,dc=example,dc=com
    objectClass: groupOfUniqueNames
    cn: jira-users
    ou: test
    uniqueMember: uid=abarnes,ou=People,dc=example,dc=com
    uniqueMember: uid=abergin,ou=People,dc=example,dc=com

ソリューション

Use the Implementation class: com.atlassian.crowd.directory.GenericLDAP:

1. Go to the User Directory page
2. Click Add Directory > Select LDAP
3. Fill in the settings as below: 
   1. Name - Optional
   2. Directory Type - Generic Directory Server 
   3. Port - 1389
   4. Username - <username>
   5. Password - <password>
4. Every other configuration can be left as default except the User Schema Setting:
   1. User Object Class - inetorgperson
   2. User Object Filter - (objectclass=inetorgperson)
   3. User Name Attribute - uid
   4. User Name RDN Attribute - uid
   5. User Lirst Name Attribute - givenName
   6. User Last Name Attribute - sn
   7. User Display Name Attribute - displayName
   8. User Email Attribute - mail
   9. User Password Attribute - userPassword
   10. User Password Encruption  - <any preferred option>
   11. Use Unique ID Attribute - entryUUID
5. Save and Test

 It is imporatant to take note that :

1. Implementation class: com.atlassian.crowd.directory.GenericLDAP must be used. 

2. User Name Attribute must be changed from CN to uid 

3. User Name RDN Attribute must be changed from  CN to uid