This KB refers only to common issues regarding the upgrade from JIRA version 4.2.x and lower to 4.3.x or higher.
As of 4.3 of JIRA is bundled with Embedded Crowd, which was previously only available through our Crowd application. This allows a full LDAP integration, making it possible to manage users and groups directly in LDAP. However, several issues can appear when upgrading from older versions. and this guide is to help troubleshooting these issues.
Upgrade process fails when there are more than on LDAP provider defined in file osuser.xml
Previously, JIRA did not accept more than one provider specified in the
osuser.xml file. As this feature was available in other versions, there may be problems with the upgrade. Usually the following message is displayed during the upgrade:
This was fixed in JIRA 4.4.4 as tracked in
osuser.xml migration fails if multiple ldap repositories defined
, additionally our JIRA Upgrade Fails due to osuser.xml configuration KB has further information on this.
The upgrade worked but LDAP users cannot login due to "You do not have a permission to log in. If you think this is incorrect, please contact the administrators"
The LDAP user is not a member of the group that has the JIRA Users Global Permission (as per Managing Global Permissions). By default, this group is the
jira-users group. The JIRA administrator needs to ensure that all of the users are members of this group and can check the Jira Users Global Permissions in Administration -> Global Settings -> Global Permissions.
The upgrade failed and an Unprocessed Continuation Reference(s) exception is logged
This is one of the more common errors during migration and will display the below Stack Trace during the upgrade:
This error occurs because there's an upgrade task that fails to correctly respect the java.naming.referral entries when creating the database entries for the LDAP directory. This issue is tracked in the following bug reports:
"Internal with LDAP Authentication" directory needs to be able to follow referrals
BaseDN without an OU does not work when setting up a directory in JIRA
There are some workarounds that have been known to fix the issue:
For a more detailed approach, please check this Knowledge Base article: User Lookups Fail With PartialResultExceptions
The process fails due to some commented lines in osuser.xml
In a few cases some commented lines inside
osuser.xml were known to cause problems. Whilst this solution has not been exhaustively tested, please make a copy of the
osuser.xml and remove the commented lines from the original
osuser.xml. Then try to upgrade again as this could fix the problem - maybe the magic will happen!
Upgrade process fails if one of the three default providers was removed from osuser.xml
osuser.xml file had three default system providers specificied:
In versions prior to 4.3 the instance will still work after removing these providers. However, these parameters are required when upgrading to 4.3.x. Please add back these providers to the
osuser.xml file before performing the application upgrade.
Missing $JIRA_INSTALL/atlassian-jira/WEB-INF/classes/osuser.xml on the upgrade creates all users in Jira internal directory and users are no able to login with ldap credentials
Using a backup of the previous JIRA instance that was created before the upgrade, perform the upgrade again with the
osuser.xml file in-place.
Please see our Troubleshooting LDAP User Management documentation for further assistance with diagnosing LDAP problems.