How to disable encoded password for LDAP

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Summary

The content on this page relates to platforms which are not supported. Consequently, Atlassian Support cannot guarantee providing any support for it. Please be aware that this material is provided for your information only and using it is done so at your own risk.

Always back up your data before making any database modifications. If possible, test any alter, insert, update, or delete SQL commands on a staging server first.

Solution

Steps to change LDAP encryption password from SHA to plaintext:

  1. Disable all modules except plaintext for Crowd System Password Encoders system add-on via Manage Add-ons > System.

  2. Update the selected directory with the SQL query below:

    1 update cwd_directory_attribute set attribute_value = 'plaintext' where attribute_name = 'ldap.user.encryption' and directory_id = <directory_id>;

    ℹ️<directory_id> is for the desired ldap directory.

  3. Restart JIRA.

Updated on April 8, 2025

Still need help?

The Atlassian Community is here for you.