how to integrate jira with NTLM.

Deepinder Singh January 28, 2013

I have added my AD settings in the user directory in jira's admin console. But Still I am getting the form base authentication, not windows prompt and more over I don't want this prompt to come and I want user should directly login to application.

3 answers

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

Post a new question

1 vote
MatthewC
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
January 29, 2013

That plugin hasn't been updated in *years* It's long dead.

We used to use it for Jira 3.13.* but it stopped working. We ended up using Kerberos (from @AppFusions).

Also be aware that NTLM v1 will not work beyond windows xp. The plugin worked by basically doing a man-in-the-middle attack and replaying your credentials to the AD server. Windows 7 doesn't have NTLM v1 and v2 hasn't got an Open solution.

if you still want to go with a windows SSO using NTLM, someone is advertising their supported NTLM plugin

http://turningright.co.nz/display/TurningRight/NTLM+Authenticator

But consider going with Kerberos as it's more future proof.

0 votes
Ed Letifov _TechTime - New Zealand_
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
January 29, 2013

Merely adding AD as a User Directory in Jira will not get you "auto-login" via NTLM.
To achive this you need a NTLM authenticator.

We offer our NTLMv2 authenticator for Jira for NZ$150 + fees payable to the vendor of IOPlex Jespa - the library that does the NTLM magic underneath. This works both with remote Crowd and without.

You can download a trial version and the corresponding instructions from here:

http://turningright.co.nz/display/TurningRight/NTLM+Authenticator

Jespa is available as a trial from here:

http://www.ioplex.com/downloads.php

We sell both as a bundle:

http://turningright.co.nz/display/TurningRight/NTLM+Authenticator+Bundles

0 votes
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
January 28, 2013

How have you configured this? What documentation have you followed?

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
January 28, 2013

Which NTLM plugin - where are the docs for it? And how have you configured it differently from what the doc says?

(Sorry, I've got a vague memory that all the NTLM stuff I've seen needs more than "add jar and put stuff in admin in Jira". But I'm not sure, hence the questions)

Deepinder Singh January 28, 2013

Thanks for the reply.Firstly I added our AD settings in Jira's admin console, then install NTLM plugin on same server, then add the reqired jar files in the web-inf. But still I am getting the same form athentication not windows authentication. Can you help me out in this.

Deepinder Singh January 28, 2013

The doc. I followed is http://wiki.customware.net/repository/pages/viewpage.action?pageId=35389491. From this doc, I am not using crowd, rest all the things I followed(as crowed is for the sync between jira and AD).

Please share the steps with me if you have successfully configure your Jira with NTLM.

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
January 29, 2013

Um, that's the problem then. To get this to work, you need three things:

Windows -> Jira login handler. This is what the NTLM plugin does

An Active directory setup. Sounds like you have that working fine

A way to synchronise Jira with AD. This is what Crowd does.

Deepinder Singh January 29, 2013

Ok. You mean I have to setup the crowd also. Let me try with crowd integration, Then I will give you update on this.

Deepinder Singh January 29, 2013

But , I am able to login into jira with windows credential in form authentication of jira. It means my AD is integrated with my Jira application. If still you want me to integrate crowd also then let me know, I will follow that also.

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

Post a new question

TAGS
AUG Leaders

Atlassian Community Events