Changing of "Additional Group DN"

Question

We created jira-developers, jira-users, jira-administrators groups in our Active Directory(AD). These three groups of users are placed in "Groups".

For user management Jira is connected to AD, and "Additional Group DN" is set to "Groups". My question is: Can we move safely jira-users, jira-developers, jira-administrators from "Groups" to  a new DN called "Distribution  list" and change "Additional Group DN" to point to "Distribution List" instead of "Groups"? Will we experience any negative impact from this movement during the next users/groups synchrnozation between Jira and AD?

Septa Cahyadiputra · Answer

Hi Sylvia,

In regards to your query, we don't think there should be any issue if you completely moved the whole groups base to another tree and the configuration on JIRA side reflect it correctly. You will also need to confirm that the group name does not change and the membership mapping configuration on your groups is the same and JIRA able to search it using the configure "USer Object Filter".

However just to be on the safe side, we highly recommend you to try the following steps to avoid any issue during this process

* Please backup your instance before proceed for a safety precaution 
* To avoid any issue on your production instance and to ensure you are able to test the new configuration first before doing it on your production instance, we highly recommend you to create a staging environment
* After successfully deployed the staging environment
* Ensure that you copy the group base and paste it into the new tree
* Do not move the user/group base as it would affect your production instance
* After copying the group base, configure staging JIRA to point the new tree

Hope it helps.

Cheers,

Septa Cahyadiputra

Colin Goudie · Answer

It should work fine. Test it on a staging instance first, but when the users/groups arrive in JIRA, where they were found in AD isn't of concern. It is the name of the user and groups that is used in JIRA. (although with membership data)