Synchronizing internal ldap with JIRA

[Eva]

I have setup 2 users directories: one for client (using JIRA directory) and one for internal users via LDAP. For LDAP setting, I have set it to readonly with groups, b/c the admin here doesnt want peopel to change their password on JIRA and I have it setup to sync every hour.

The problemc comes when user X change their password in our internal system, that new password would nto be synchronize until a hour later. While I know I can change the synchronize time to 15-20 minutes, I am worry that it would deteriorate the performance and besides, people can get impatient and still expect JIRA to get the new password...then end up locking themselves after 3 tries.

Is there another option to synchronize the LDAP so JIRA can get the new user information faster and w/o performance deterioration?

thanks!

[JamieA]

Have you actually verified this is the case? Admitted I wasn't able to use full LDAP integration, for various reasons, but the delegated LDAP auth works by looking up the user's full DN then attempting a bind operation with the supplied password.

I suspect the other directory types work the same way. The alternative is to copy the encrypted password, then hash the supplied password using the correct algorithm, then compare bytes, which is much more complex.