<style>
/* Changing the layout to use less space for mobiles */
@media screen and (max-device-width: 480px), screen and (-webkit-min-device-pixel-ratio: 2) {
#email-body { min-width: 30em !important; }
#email-page { padding: 8px !important; }
#email-banner { padding: 8px 8px 0 8px !important; }
#email-avatar { margin: 1px 8px 8px 0 !important; padding: 0 !important; }
#email-fields { padding: 0 8px 8px 8px !important; }
#email-gutter { width: 0 !important; }
}
</style>
<div id="email-body">
<table id="email-wrap" align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#f0f0f0;color:#000000;width:100%;">
<tr valign="top">
<td id="email-page" style="padding:16px !important;">
<table align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffff;border:1px solid #bbbbbb;color:#000000;width:100%;">
<tr valign="top">
<td bgcolor="#ffffff" style="background-color:#ffffff;color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;line-height:1;"><img src="https://shibboleth.net/images/shib_240x83.png" alt="" style="vertical-align:top;" /></td>
</tr><tr valign="top">
<td id="email-banner" style="padding:32px 32px 0 32px;">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="width:100%;">
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;padding:0;">
<div id="email-action" style="padding: 0 0 8px 0;font-size:12px;line-height:18px;">
<a class="user-hover" rel="zccx04fxbfekk/ldylvfqohcyf4=@https://aai-logon.switch.ch/idp/shibboleth" id="email_zccx04fxbfekk/ldylvfqohcyf4=@https://aai-logon.switch.ch/idp/shibboleth" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=zccx04fxbfekk%2Fldylvfqohcyf4%3D%40https%3A%2F%2Faai-logon.switch.ch%2Fidp%2Fshibboleth" style="color:#326ca6;">Kaspar Brand</a>
edited a comment on <img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/improvement.png" height="16" width="16" border="0" align="absmiddle" alt="Improvement"> <a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/IDP-441'>IDP-441</a>
</div>
<div id="email-summary" style="font-size:16px;line-height:20px;padding:2px 0 16px 0;">
<a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/IDP-441'><strong>Also support bindDn and bindCredential with the authn/LDAP login flow</strong></a>
</div>
</td>
</tr>
</table>
</td>
</tr>
<tr valign="top">
<td id="email-fields" style="padding:0 32px 32px 32px;">
<table border="0" cellpadding="0" cellspacing="0" style="padding:0;text-align:left;width:100%;" width="100%">
<tr valign="top">
<td id="email-gutter" style="width:64px;white-space:nowrap;"></td>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td colspan="2" style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 16px 0;width:100%;">
<div class="comment-block" style="background-color:#edf5ff;border:1px solid #dddddd;color:#000000;padding:12px;"><p>The configuration change is fairly minimal:</p>
<div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent">
<pre>--- conf.orig/authn/ldap-authn-config.xml 2014-07-28 21:33:18.000000000 +0200
+++ conf/authn/ldap-authn-config.xml 2014-07-29 19:32:46.000000000 +0200
@@ -14,13 +14,13 @@
<!-- LDAP configuration. -->
<!-- Choose an import based on how you resolve DNs in your LDAP -->
- <import resource="ldap-authn-anon-search-config.xml" />
- <!-- <import resource="ldap-authn-bind-search-config.xml" /> -->
+ <!-- <import resource="ldap-authn-anon-search-config.xml" /> -->
+ <import resource="ldap-authn-bind-search-config.xml" />
<!-- <import resource="ldap-authn-direct-config.xml" /> -->
<!-- <import resource="ldap-authn-ad-config.xml" /> -->
<!-- Common LDAP authn configuration -->
- <bean id="shibboleth.authn.LDAP.ldapUrl" class="java.lang.String" c:_0="ldap://localhost:10389" />
+ <bean id="shibboleth.authn.LDAP.ldapUrl" class="java.lang.String" c:_0="ldap://localhost" />
<util:constant id="shibboleth.authn.LDAP.useStartTLS" static-field="java.lang.Boolean.FALSE"/>
<util:constant id="shibboleth.authn.LDAP.useSSL" static-field="java.lang.Boolean.FALSE"/>
<bean id="shibboleth.authn.LDAP.baseDn" class="java.lang.String" c:_0="ou=people,dc=example,dc=org" />
@@ -29,8 +29,8 @@
<bean id="shibboleth.authn.LDAP.connectTimeout" class="java.lang.Integer" c:_0="3000" />
<!-- Required for ldap-authn-bind-config -->
- <bean id="shibboleth.authn.LDAP.bindDN" class="java.lang.String" c:_0="cn=manager" />
- <bean id="shibboleth.authn.LDAP.bindCredential" class="java.lang.String" c:_0="password" />
+ <bean id="shibboleth.authn.LDAP.bindDN" class="java.lang.String" c:_0="cn=idp,dc=example,dc=org" />
+ <bean id="shibboleth.authn.LDAP.bindCredential" class="java.lang.String" c:_0="<suppressed>" />
<!-- Required for ldap-authn-direct-config and ldap-authn-ad-config; use %s@domain.com for AD -->
<bean id="shibboleth.authn.LDAP.dn-format" class="java.lang.String" c:_0="uid=%s,ou=people,dc=example,dc=org" />
</pre>
</div></div>
<p>Looking at the IdP log, this is what I see for the DN search:</p>
<div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent">
<pre>2014-07-30 11:09:39,963 - TRACE [org.ldaptive.ConnectionConfig:84] - setting ldapUrl: ldap://localhost
2014-07-30 11:09:39,970 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:70] - setting operationExceptionResultCodes: [PROTOCOL_ERROR, SERVER_DOWN]
2014-07-30 11:09:39,971 - TRACE [org.ldaptive.provider.jndi.JndiProviderConfig:144] - setting controlProcessor: org.ldaptive.provider.ControlProcessor@e97bf7
2014-07-30 11:09:39,972 - TRACE [org.ldaptive.auth.SearchDnResolver:79] - setting baseDn: ou=people,dc=example,dc=org
2014-07-30 11:09:39,973 - TRACE [org.ldaptive.auth.SearchDnResolver:177] - setting subtreeSearch: false
2014-07-30 11:09:39,974 - TRACE [org.ldaptive.auth.SearchDnResolver:102] - setting userFilter: (uid={user})
2014-07-30 11:09:39,995 - DEBUG [org.ldaptive.auth.SearchDnResolver:244] - resolve user=student2
2014-07-30 11:09:39,996 - DEBUG [org.ldaptive.auth.SearchDnResolver:310] - searching for DN using userFilter
2014-07-30 11:09:39,997 - TRACE [org.ldaptive.provider.jndi.JndiConnectionFactory:92] - [[ldapUrl=ldap://localhost, count=0]] Attempting connection to ldap://localhost for strategy org.ldaptive.provider.ConnectionStrategies$DefaultConnectionStrategy@13bf5df
2014-07-30 11:09:39,998 - DEBUG [org.ldaptive.SearchOperation:138] - execute request=[org.ldaptive.SearchRequest@-1592733432::baseDn=ou=people,dc=example,dc=org, searchFilter=[org.ldaptive.SearchFilter@-1487843200::filter=(uid={user}), parameters={user=student2}], returnAttributes=[1.1], searchScope=ONELEVEL, timeLimit=0, sizeLimit=0, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@13594140::config=[org.ldaptive.ConnectionConfig@9518015::ldapUrl=ldap://localhost, connectTimeout=-1, responseTimeout=-1, sslConfig=null, useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@4589375::metadata=[ldapUrl=ldap://localhost, count=1], environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@25554317::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$DefaultConnectionStrategy@13bf5df, controlProcessor=org.ldaptive.provider.ControlProcessor@e97bf7, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@1af0563]
2014-07-30 11:09:40,014 - TRACE [org.ldaptive.provider.jndi.JndiConnection:1082] - reading search result: cn=Test2 Student: null:null:No attributes
2014-07-30 11:09:40,014 - TRACE [org.ldaptive.provider.jndi.JndiConnection:1218] - formatting relative dn 'cn=Test2 Student' with baseDn 'ou=people,dc=example,dc=org'
2014-07-30 11:09:40,015 - TRACE [org.ldaptive.provider.jndi.JndiConnection:1243] - formatted dn 'cn=Test2 Student' as 'cn=Test2 Student,ou=people,dc=example,dc=org'
2014-07-30 11:09:40,017 - TRACE [org.ldaptive.SearchOperation:155] - Received search item=[org.ldaptive.provider.SearchItem@2425201::searchEntry=[dn=cn=Test2 Student,ou=people,dc=example,dc=org[], responseControls=null, messageId=-1]]
2014-07-30 11:09:40,018 - DEBUG [org.ldaptive.SearchOperation:168] - execute response=[org.ldaptive.Response@30185483::result=[org.ldaptive.SearchResult@-221684808::entries=[[dn=cn=Test2 Student,ou=people,dc=example,dc=org[], responseControls=null, messageId=-1]], references=[]], resultCode=SUCCESS, message=null, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1] for request=[org.ldaptive.SearchRequest@-1592733432::baseDn=ou=people,dc=example,dc=org, searchFilter=[org.ldaptive.SearchFilter@-1487843200::filter=(uid={user}), parameters={user=student2}], returnAttributes=[1.1], searchScope=ONELEVEL, timeLimit=0, sizeLimit=0, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=null, searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@13594140::config=[org.ldaptive.ConnectionConfig@9518015::ldapUrl=ldap://localhost, connectTimeout=-1, responseTimeout=-1, sslConfig=null, useSSL=false, useStartTLS=false, connectionInitializer=null], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@4589375::metadata=[ldapUrl=ldap://localhost, count=1], environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@25554317::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$DefaultConnectionStrategy@13bf5df, controlProcessor=org.ldaptive.provider.ControlProcessor@e97bf7, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@1af0563]
2014-07-30 11:09:40,020 - DEBUG [org.ldaptive.auth.SearchDnResolver:279] - resolved dn=cn=Test2 Student,ou=people,dc=example,dc=org for user=student2
</pre>
</div></div>
<p>And on the LDAP side, I have</p>
<div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent">
<pre>Jul 30 11:09:39 blupblup slapd[27523]: conn=1011 fd=20 ACCEPT from IP=127.0.0.1:58595 (IP=127.0.0.1:389)
Jul 30 11:09:40 blupblup slapd[27523]: conn=1011 op=0 SRCH base="ou=people,dc=example,dc=org" scope=1 deref=0 filter="(uid=student2)"
Jul 30 11:09:40 blupblup slapd[27523]: conn=1011 op=0 SRCH attr=1.1
Jul 30 11:09:40 blupblup slapd[27523]: conn=1011 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jul 30 11:09:40 blupblup slapd[27523]: conn=1011 fd=20 closed (connection lost)
</pre>
</div></div>
<p>(note that I'm currently allowing LDAP lookups via IP-based access to localhost, to make the DN search succeed)</p>
<p>Comparing this to the attribute resolution case - where configuring the bind credentials through <tt>principal</tt> and <tt>principalCredential</tt> is working fine -, I notice that in that case, the connection begins with a <tt>BindOperation</tt> and is then followed by a <tt>SearchOperation</tt>:</p>
<div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent">
<pre>2014-07-30 11:09:40,311 - TRACE [org.ldaptive.provider.jndi.JndiConnectionFactory:92] - [[ldapUrl=ldap://localhost, count=0]] Attempting connection to ldap://localhost for strategy org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@678c79
2014-07-30 11:09:40,313 - DEBUG [org.ldaptive.BindOperation:138] - execute request=[org.ldaptive.BindRequest@23112521::bindDn=cn=idp,dc=example,dc=org, saslConfig=null, controls=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@26038947::config=[org.ldaptive.ConnectionConfig@11833057::ldapUrl=ldap://localhost, connectTimeout=-1, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@24159471::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@1318ddc, trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=[org.ldaptive.BindConnectionInitializer@6061047::bindDn=cn=idp,dc=example,dc=org, bindSaslConfig=null, bindControls=null]], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@19683440::metadata=[ldapUrl=ldap://localhost, count=1], environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@21592398::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@678c79, controlProcessor=org.ldaptive.provider.ControlProcessor@537b8, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@6227d1]
2014-07-30 11:09:40,317 - DEBUG [org.ldaptive.BindOperation:168] - execute response=[org.ldaptive.Response@417908::result=null, resultCode=SUCCESS, message=null, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1] for request=[org.ldaptive.BindRequest@23112521::bindDn=cn=idp,dc=example,dc=org, saslConfig=null, controls=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@26038947::config=[org.ldaptive.ConnectionConfig@11833057::ldapUrl=ldap://localhost, connectTimeout=-1, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@24159471::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@1318ddc, trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=[org.ldaptive.BindConnectionInitializer@6061047::bindDn=cn=idp,dc=example,dc=org, bindSaslConfig=null, bindControls=null]], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@19683440::metadata=[ldapUrl=ldap://localhost, count=1], environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@21592398::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@678c79, controlProcessor=org.ldaptive.provider.ControlProcessor@537b8, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@6227d1]
2014-07-30 11:09:40,318 - DEBUG [org.ldaptive.SearchOperation:138] - execute request=[org.ldaptive.SearchRequest@-1839879349::baseDn=ou=People,dc=example,dc=org, searchFilter=[org.ldaptive.SearchFilter@1429044804::filter=(uid=student2), parameters={}], returnAttributes=[], searchScope=SUBTREE, timeLimit=3000, sizeLimit=1, derefAliases=null, typesOnly=false, binaryAttributes=null, sortBehavior=UNORDERED, searchEntryHandlers=[], searchReferenceHandlers=null, controls=null, followReferrals=false, intermediateResponseHandlers=null] with connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@26038947::config=[org.ldaptive.ConnectionConfig@11833057::ldapUrl=ldap://localhost, connectTimeout=-1, responseTimeout=-1, sslConfig=[org.ldaptive.ssl.SslConfig@24159471::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2@1318ddc, trustManagers=null, enabledCipherSuites=null, enabledProtocols=null, handshakeCompletedListeners=null], useSSL=false, useStartTLS=false, connectionInitializer=[org.ldaptive.BindConnectionInitializer@6061047::bindDn=cn=idp,dc=example,dc=org, bindSaslConfig=null, bindControls=null]], providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@19683440::metadata=[ldapUrl=ldap://localhost, count=1], environment={java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3}, providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@21592398::operationExceptionResultCodes=[PROTOCOL_ERROR, SERVER_DOWN], properties={}, connectionStrategy=org.ldaptive.provider.ConnectionStrategies$ActivePassiveConnectionStrategy@678c79, controlProcessor=org.ldaptive.provider.ControlProcessor@537b8, environment=null, tracePackets=null, removeDnUrls=true, searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED, PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]], providerConnection=org.ldaptive.provider.jndi.JndiConnection@6227d1]
2014-07-30 11:09:40,321 - TRACE [org.ldaptive.provider.jndi.JndiConnection:1082] - reading search result: cn=Test2 Student: null:null:{givenname=givenName: Test2, sn=sn: Student, mail=mail: test2.student@example.org, edupersonaffiliation=eduPersonAffiliation: student, objectclass=objectClass: eduPerson, swissEduPerson, uid=uid: student2, swissedupersonhomeorganizationtype=swissEduPersonHomeOrganizationType: others, cn=cn: Test2 Student, swissedupersonhomeorganization=swissEduPersonHomeOrganization: example.org, swissedupersonuniqueid=swissEduPersonUniqueID: 8548997@example.org}
2014-07-30 11:09:40,324 - TRACE [org.ldaptive.provider.jndi.JndiConnection:1218] - formatting relative dn 'cn=Test2 Student' with baseDn 'ou=People,dc=example,dc=org'
2014-07-30 11:09:40,324 - TRACE [org.ldaptive.provider.jndi.JndiConnection:1243] - formatted dn 'cn=Test2 Student' as 'cn=Test2 Student,ou=People,dc=example,dc=org'
2014-07-30 11:09:40,325 - TRACE [org.ldaptive.SearchOperation:155] - Received search item=[org.ldaptive.provider.SearchItem@3253688::searchEntry=[dn=cn=Test2 Student,ou=People,dc=example,dc=org[[swissEduPersonHomeOrganizationType[others]], [uid[student2]], [mail[test2.student@example.org]], [sn[Student]], [swissEduPersonUniqueID[8548997@example.org]], [cn[Test2 Student]], [givenName[Test2]], [eduPersonAffiliation[student]], [objectClass[swissEduPerson, eduPerson]], [swissEduPersonHomeOrganization[example.org]]], responseControls=null, messageId=-1]]
</pre>
</div></div>
<p><span class="error">[sorry, wrong log extract submitted in the previous comment - now edited/corrected]</span></p>
<p>Similarly, the LDAP log shows BIND followed by SRCH:</p>
<div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent">
<pre>Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 fd=20 ACCEPT from IP=127.0.0.1:58597 (IP=127.0.0.1:389)
Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 op=0 BIND dn="cn=idp,dc=example,dc=org" method=128
Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 op=0 BIND dn="cn=idp,dc=example,dc=org" mech=SIMPLE ssf=0
Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 op=0 RESULT tag=97 err=0 text=
Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 op=1 SRCH base="ou=People,dc=example,dc=org" scope=2 deref=0 filter="(uid=student2)"
Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 op=2 UNBIND
Jul 30 11:09:40 blupblup slapd[27523]: conn=1013 fd=20 closed
</pre>
</div></div></div>
<div style="color:#505050;padding:4px 0 0 0;"> </div>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td><!-- End #email-page -->
</tr>
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:10px;line-height:14px;padding: 0 16px 16px 16px;text-align:center;">
This message is automatically generated by JIRA.<br />
If you think it was sent incorrectly, please contact your JIRA administrators<br />
For more information on JIRA, see: <a style='color:#326ca6;' href='http://www.atlassian.com/software/jira'>http://www.atlassian.com/software/jira</a>
</td>
</tr>
</table><!-- End #email-wrap -->
</div><!-- End #email-body -->