Bamboo login fails with the message "Invalid credentials for user {USER} in directory {DIRECTORY}
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
Bamboo login fails with an authentication error when using Crowd as user directory.
Environment
Bamboo (any supported version).
Crowd configured to be used as user directory.
In Crowd, for the Bamboo Application configured, more than one directory is present.
Diagnosis
When looking in the server logs, we will see the following message:
1
2021-01-13 10:09:32,936 INFO [http-nio-8085-exec-10] [ApplicationServiceGeneric] Invalid credentials for user myUser in directory myDirectory (12345678), abortingeven though the user myUser is using the right credentials.
Cause
In order to properly understand the issue, it's important to understand the real origin of the user myUser, since it might exist in more than one directory. If myUser exists in more than one place, then Bamboo and Crowd will choose the first occurrence, even though that's not what the user is expecting.
Solution
In Bamboo, the order of user directories is important. More information can be found here: Integrating Bamboo with Crowd
If directories are in the correct order in Bamboo, it might be that the Crowd directories aren't.
In Crowd:
Open the application defined to be used by Bamboo, and open the tab "Authentication Test". Test the credentials here.
If they fail, open the tab "Directories and Groups" and check the order of the directories present. Place the right directory at the top of the list. More information here: Managing Directories
After re-ordering the directories, visit "Authentication Test" to test the credentials, which should now work.
Finally, to make this change visible in Bamboo, directory synchronization must be done from Bamboo's UI for the changes to take effect.
Was this helpful?