can be integrate specific LDAP users to Jira Core using "Users Directories

[Philip Arcilla]

Hi, Support

Please help me on how to add specific LDAP users to my jira server using "Users directories" Hope you can give me a guidlines or step by step procedure on how to filter LDAP users due to security issue. I dont know how to get some details on the picture below.

Thanks,

PhilipA

[Andy Heinzer · Accepted solution]

Looking at your screenshots, it looks like you're trying to add a Microsoft Active Directory LDAP site to Jira.  This can work.  Right now though, your settings appear to be pulling all the user object in that ou=Users.

If you want to limit which users will get pulled into Jira, you're going to need to modify the User Object Filter setting in use here.  More details about using LDAP with Jira in Connecting to an LDAP directory.  In that document, there is also a link to the KB How to write LDAP search filters.   I would recommend that KB as it can help provide some examples here.

It's not possible for me to tell you the exact setting you need here because I don't know anything about how those users objects can be filtered in your environment.  There is an example in that KB that pertains specifically to using Active Directory:

Important for Active Directory to have memberOf:1.2.840.113556.1.4.1941 if you want to find nested groups (do not replace the numeric string) inside CaptainPlanet group.

(&(objectCategory=Person)(sAMAccountName=*)(memberOf:1.2.840.113556.1.4.1941:=cn=CaptainPlanet,ou=users,dc=company,dc=com))

This is a common way when using Active Directory to only have Jira get user objects that are members of a particular group for example.

[Philip Arcilla]

Hi, Andrew

thanks for the information you'll provided. I will try your recommendation in my UAT environment. honestly i want to add specific users adding to my Jira from AD. But i think it is not possible to have so many base DN. In our setting, we have alots of OU in our AD server and different GPO's set per team.