LDAP - Users are intermittently unable to login
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Symptoms
This message is displayed in the web interface when thry try to login with their credentials:
1
Unable to find the user. The username <em>user_name_here</em> may be incorrect.
After restarting Bamboo, the above user "user_name_here
" may be able to login, but now other user(s) may not.
Cause
LDAP cache is disabled.
Resolution
Shut down the Bamboo instance
Edit
<Bamboo_Install_dir>/atlassian-users/WEB-INF/classes/ehcache.xml
and uncomment this section:1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39
<!-- <cache name="com.atlassian.user.impl.ldap.LDAPUserManagerReadOnly.myLdapRepository.users" maxElementsInMemory="500" eternal="false" timeToIdleSeconds="300" timeToLiveSeconds="300" /> <cache name="com.atlassian.user.impl.ldap.LDAPUserManagerReadOnly.myLdapRepository.users_ro" maxElementsInMemory="500" eternal="false" timeToIdleSeconds="300" timeToLiveSeconds="300" /> <cache name="com.atlassian.user.impl.ldap.LDAPUserManagerReadOnly.myLdapRepository.repository" maxElementsInMemory="500" eternal="false" timeToIdleSeconds="300" timeToLiveSeconds="300" /> <cache name="com.atlassian.user.impl.ldap.LDAPGroupManagerReadOnly.myLdapRepository.groups" maxElementsInMemory="500" eternal="false" timeToIdleSeconds="300" timeToLiveSeconds="300" /> <cache name="com.atlassian.user.impl.ldap.LDAPGroupManagerReadOnly.myLdapRepository.groups_hasMembership" maxElementsInMemory="500" eternal="false" timeToIdleSeconds="300" timeToLiveSeconds="300" /> <cache name="com.atlassian.user.impl.ldap.LDAPGroupManagerReadOnly.myLdapRepository.groups_getGroupsForUser" maxElementsInMemory="500" eternal="false" timeToIdleSeconds="300" timeToLiveSeconds="300" /> <cache name="com.atlassian.user.impl.ldap.LDAPGroupManagerReadOnly.myLdapRepository.repositories" maxElementsInMemory="500" eternal="false" timeToIdleSeconds="300" timeToLiveSeconds="300" /> -->
Info
Please replace the keyword myLdapRepository with the actual ldap key. The key can be obtained from the atlassian-user.xml file located in the <bamboo-home>/xml_data/configuration/* directory
Start the Bamboo instance
ℹ️Prior Bamboo v5.8, the LDAP cache mechanism used was "com.atlassian.cache.memory.MemoryCacheManager" and now replaced by "com.atlassian.cache.ehcache.EhCacheManager".
In case you are experiencing the issue, please refer to the following BAM-15360 - Ldap group membership not updated without a restart and the resolution would be to upgrade Bamboo to v5.8+
Was this helpful?