switching from standard login to ldap login

Question

We have a standard installation of Jira on one of our servers. I would like to switch the login to LDAP login, so users are able to log in with their AD Username and password.

What happens with the user data and access rights when the user is login in with LDAP?

What I need to do, so the old user (no LDAP) and new user are getting merged and you have the same rights and access to data with the new LDAP login?

Vero Rivas · Accepted Answer

Hi @Philipp Schmidt

Look at this posts, maybe can help you

https://confluence.atlassian.com/adminjiraserver085/connecting-to-an-internal-directory-with-ldap-authentication-981154835.html

https://community.atlassian.com/t5/Jira-Software-questions/switching-from-standard-login-to-ldap-login/qaq-p/1679493

https://confluence.atlassian.com/conf75/connecting-to-an-internal-directory-with-ldap-authentication-1004947393.html

Cheers

Thomas Deiler_db00h3 · Accepted Answer

Dear @Philipp Schmidt ,

welcome to the community!

how can I make sure that I don't lose any data when users log in with LDAP in the future?

You won't lose any data adding another user directory. The different user directory are overlaying each other. But the do not overwrite.

Let's assume, that you have a user with username local-user1 (internal) and a ldap-user2 (ldap). Both would coexist and won't harm each other.

Now you got another ldap user called local-user1 (ldap). The order of the user directories is

* internal
* ldap

In this case when login with local-user1, the interal credentials are verified. When you change the order to

* ldap
* internal

then the createntials of ldap will be taken. Removing ldap user directory would fall back to internal. Nothing will be deleted.

Jira will always take the first hit when searching in its user directories. Even when you have the same username in multiple user directories.

So long

Thomas