How to move subset of users from LDAP directory to Internal directory?

[Todd Bennett]

We have a situation where we have sold part of our business and the users in that business have their own domain and new email addresses. 

They continue to need access to our Jira but we want to remove them from our Active Directory.

We have 2 directories configured. How can I move them from Jira’s LDAP directory (Active Directory) to the Internal directory while keeping all their history, group memberships etc?

Our Directory order is LDAP first.

I have tried the following sql command with a test user

update cwd_user set directory_id=<internal_directory_id>, email_address=concat(first_name,'.',last_name,'@<new_company_name>.com'),
lower_email_address=concat(lower_first_name,'.',lower_last_name,'@<new_company_name>.com') 
FROM cwd_user
where user_name in (‘<user_name’>)

this updated the cwd_user records successfully. I restarted Jira but on next LDAP sync a duplicate user was created in cwd_user table with the ldap directory id.

I probably should have removed the user from the Active Directory sync group first. I did that after the fact, then deleted the duplicate user directly from the cwd_user table.

However the duplicate user continues to reappear in the cwd_user table after ldap sync. If I go into Jira application my test user only shows once in user management and it is showing as using the LDAP Directory. I have not restarted Jira again.

What am I missing? If it matters we have a Confluence instance set up to use Jira to authenticate as well.