Multiple user directories - remove duplicate if same user in 2 OUs

Dragan Vucanovic_ctgk89

I have following AD structure:

 

company.local
  |
  Company               OU=company,DC=company,dc=local                             
  |   |-Groups          OU=groups,OU=company,DC=company,dc=local
  |     |-Admins        OU=admins,OU=groups,OU=company,DC=company,dc=local
  |        |- Service   OU=Service,OU=admins,OU=groups,OU=company,DC=company,dc=local            
  |       
  |    
  disabled              OU=disabled,dc=company,dc=local
  |
  |
  |
  jira                 OU=jira,dc=company,dc=local
     |-Jira OU1
     |-Jira OU2
     |-......
     |-Groups
          |-programs OU=programs,OU=Groups,ou=jira,dc=company,dc=local

 

First LDAP directory covers OU=jira,dc=company,dc=local

Base DC: company,DC=local

Additional User DN: OU=jira

User Object filter: (&(objectCategory=Person)(sAMAccountName=*)(!(cn=*{*}*)))

 

Second LDAP directory scans OU=disabled,dc=company,dc=local

Base DC: OU=Disabled,DC=company,DC=local

Additional User DN: empty

User Object filter: (&(objectCategory=Person)(sAMAccountName=*)(!(cn=*{*}*)))

 

The problem is if user with same displayname and cn (canonical name) exists in both OU=jira,dc=company,dc=local and OU=disabled,dc=company,dc=local

it's shown as duplicate under JIRA users

 

Someone had same issue <a href="https://community.atlassian.com/t5/Confluence-questions/How-to-add-2-branches-to-LDAP-Base-DN/qaq-p/1445187" target="_blank">here</a>

But i don't know how to write filter to remove duplicate users.

 

 

Kristin Lyons

Atlassian has some documentation on merging the duplicate accounts here - https://confluence.atlassian.com/jirakb/how-to-merge-two-users-content-ownership-and-permissions-in-jira-968659640.html but I might recommend cleaning up the duplicate accounts via AD instead.

 

Atlassian also has some documentation on writing filters for LDAP here - https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html?