Don't update email address from LDAP

John Schols

We use an old LDAP for authenticating users. But the email addresses stored in this LDAP will be out of use in a few weeks. Because we are migrating to a cloud hosting of Jira, we will continue the use of this old LDAP till the migration. So we want the accounts to use a new email address. But at every login, this field is changed to the LDAP-value.

Is it possible to stop the update of the email address from LDAP every time a users logins?

Tom Lister_fo1j4e

Hi @John Schols 

I'm not aware of a setting that prevents the syncing of user data, there is a setting to not pick up user groups.

Not sure of other workarounds. Things I would try in a test system:

1) look at removing the setting for User Email Attribute if possible. This may stop the email sync.

2) You could try setting up an 

• Internal Directory with LDAP Authentication.

and moving the LDAP users to the internal directory. That can be scripted. There may be import options.

See https://confluence.atlassian.com/adminjiraserver/migrating-users-between-user-directories-938847059.html

If you are able to access a new LDAP for the new email domain, this may be useful. https://community.atlassian.com/t5/Atlassian-Migration-Program/Jira-LDAP-Migration-using-SQL/ba-p/942752
It's a while since I used/wrote this so it may need reviewing.

You can, in theory, move all users to the new LDAP and turn off the old. There may be username issues in your environment.

 

Tom