Bitbucket Server: Cannot create a local group and get an Internal Server Error (500)
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Problem
Bitbucket Server is connected to AD/LDAP with the "Read Only, with Local Groups" option enabled and when creating a local group (in internal directory) it fails with Internal Server Error (500)
Diagnosis
You will see an error in atlassian-bitbucket.log related to connecting other user directories to AD/LDAP. Following are example scenarios. Please note errors are not limited to below.
[LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A8, comment: AcceptSecurityContext error, data 532, v1db1]; nested exception is javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A8, comment: AcceptSecurityContext error, data 532, v1db1] FILL IN LOG
or
com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of:
'OU=Some Users,DC=mycomp,DC=co,DC=au'
Resolution
Fix the connection issues in other user directory configurations. Refer here for troubleshooting common LDAP related issues.