How to migrate users with group membership from delegated LDAP into LDAP Connector?

[Anand Dandikar]

Hi All,

We are currently using Delegated LDAP authentication on our Jira Software Server 8.8.0. We have following User Directories available on Jira in that order:

1) Delegated LDAP Server - uses delegated auth and connects to aaa.local
2) DEV LDAP Server - is an LDAP Connector and connects to bbb.corp
3) Jira Internal Directory - Jira's Internal directory

We now want to change it over from Delegated LDAP Server to DEV LDAP Server, since we want to manage our Jira Software licenses from LDAP. This bit works fine, as we are able to add/remove users from LDAP and can see license count in Jira Software increase/decrease.

As an example, user john.smith is a member of "group1" and "jira-users" group within Delegated LDAP Server, whereas he is member of only "SG_jira-software-users" group within the LDAP Connector we have setup. Jira license count increases or decreases when we enable or disable the user on the LDAP domain controller.

As we change from Delegated LDAP to the LDAP Connector, how do we make sure user john.smith retains his group membership such that he is a member of "group1", "jira-users" as well as "SG_jira-software-users" groups on the DEV LDAP Server which is an LDAP Connector?

NB. For the LDAP Connector, we are using "Read-only with local groups" option.

Thanks,

Anand