I am currently managing two different instances. Both on 7.2.7. Both are connected to the same LDAP directory with, as far as I can tell, the exact same settings. SPECIFICALLY both have this option enabled:
Update User attributes on Login
Users' attributes are updated from your LDAP server into JIRA when they authenticate. Selecting this means users can no longer be modified in JIRA.
Selecting this means users can no longer be modified in JIRA.
Except on one of the instances users can be modified. I can deactivate them, change their username, full name, and email. Though any changes I make are overwritten with the LDAP data the next time they log in. On the other instance I can't edit them. It's not even an option (which I believe is the intended behavior).
Anywhere else I should be looking? A flag in some config file perhaps?