Multiple user directories - remove duplicate if same user in 2 OUs

[Dragan Vucanovic]

I have following AD structure:

company.local
  |
  Company               OU=company,DC=company,dc=local                             
  |   |-Groups          OU=groups,OU=company,DC=company,dc=local
  |     |-Admins        OU=admins,OU=groups,OU=company,DC=company,dc=local
  |        |- Service   OU=Service,OU=admins,OU=groups,OU=company,DC=company,dc=local            
  |       
  |    
  disabled              OU=disabled,dc=company,dc=local
  |
  |
  |
  jira                 OU=jira,dc=company,dc=local
     |-Jira OU1
     |-Jira OU2
     |-......
     |-Groups
          |-programs OU=programs,OU=Groups,ou=jira,dc=company,dc=local

First LDAP directory covers OU=jira,dc=company,dc=local

Base DC: company,DC=local

Additional User DN: OU=jira

User Object filter: (&(objectCategory=Person)(sAMAccountName=*)(!(cn=*{*}*)))

Second LDAP directory scans OU=disabled,dc=company,dc=local

Base DC: OU=Disabled,DC=company,DC=local

Additional User DN: empty

User Object filter: (&(objectCategory=Person)(sAMAccountName=*)(!(cn=*{*}*)))

The problem is if user with same displayname and cn (canonical name) exists in both OU=jira,dc=company,dc=local and OU=disabled,dc=company,dc=local

it's shown as duplicate under JIRA users

Someone had same issue here

But i don't know how to write filter to remove duplicate users.

[Kristin Lyons · Accepted solution]

Atlassian has some documentation on merging the duplicate accounts here - https://confluence.atlassian.com/jirakb/how-to-merge-two-users-content-ownership-and-permissions-in-jira-968659640.html but I might recommend cleaning up the duplicate accounts via AD instead.

Atlassian also has some documentation on writing filters for LDAP here - https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html?