Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Group Schema Settings - How to associate users that are in nested groups

Scott Boisvert
Contributor
August 16, 2018

I have LDAP connected to my Jira instance. I have successfully filtered the users that are pulled in by only pulling users assigned to one particular group, i.e. Jira_Users.

I've created a filter under the Group Schema Settings to pull the Jira_Users group and Test Engineering group into Jira.

Group Object Filter: (&(objectClass=group)(|(cn=Test Engineering)(cn=Jira_Users)))

When I look at the Groups page in the Administration I see both groups. My Jira_Users group shows all 29 users (this is my dev instance). My Test Engineering group, which includes a subset of those users shows 0.  Here's the kicker though and where I think the problem is, The Test Engineering group is made up of nested groups, there are no direct users in this group. When I added another group that does have direct users and users that exist in the Jira_Dev group, the new group showed the 7 users that were in both the new group and the Jira_Dev group.

Example:

  • Jira_Users (Jira shows 29 users)
    • 29 Users
  • Test Engineering (Jira shows 0 users)
    • CL Test Engineering
      • 20 Users (2 are in Jira_Users)
    • BI Test Engineering
      • 15 Users (1 in Jira_Users)
    • PL Test Engineering
      • 35 Users (5 in Jira_Users)
  • New Group (Jira shows 7 users)
    • 30 Users (7 in Jira_Users)

So my question is, how do I get Jira to associate the users in the nested groups? By the way I do have nested groups enabled already and that didn't help. I'd rather not update the filter to include the nested groups as that would be a maintenance nightmare as groups are added and removed.

Additional Note: if I add one of the nested groups (i.e. CL Test Engineering)
(&(objectClass=group)(|(cn=CL Test Engineering)(cn=Test Engineering)(cn=Jira_Users)))
, then it shows the 2 users in both CL Test Engineering and Test Engineering. Again this is not really the route I want to go though due to the maintenance that would be involved.

  •  Jira_Users (Jira shows 29 users)
    • 29 Users
  • Test Engineering (Jira shows 2 users)
    • CL Test Engineering (Jira shows 2 users)
      • 20 Users (2 are in Jira_Users)
    • BI Test Engineering
      • 15 Users (1 in Jira_Users)
    • PL Test Engineering
      • 35 Users (5 in Jira_Users)

0 answers

Suggest an answer

Log in or Sign up to answer