Merging AD users with JIRA users and local groups

[nick.rozhdestvensky]

We are currently using JIRA Internal Directory authentication. We plan to move to Microsoft AD authentication with local groups.

I have a local user called "test.ad" in local groups "jira-users" and "test-users", and an AD user with the same login name (i.e. "test.ad").

I configured a new AD user directory with LDAP permissions "Read Only, with Local Groups" and default group membership "jira-users".

After moving to AD auth I got "test.ad" user in group "jira-users" only.

Where is my local group "test-users"?  i don't need to rewrite local group membership.

Thanks.

[Thomas Deiler]

Dear @nick.rozhdestvensky,

if AD is the first user directory, user directories afterwards get ignored if they keep the same username.

This is the natural overlay effect. Your internal is not gone. If you move Jiras internal DB on top position, the AD account get's hidden.

So long

Thomas

[nick.rozhdestvensky]

I expected the result like in Confluence - local groups are merged with AD. Is it possible in JIRA?

[Thomas Deiler]

Not that I know. And be aware - even if the usernames are equal, for Jira they are different (internal ID). Otherwise, this would be a security breach.

[nick.rozhdestvensky]

 Thanks for this note.