How can I migrate Users from one Jira Server Internal Directory to another? Initial situation: Jira Server A JIRA Internal Directory (of A) * (admin) * Max * Andrew LDAP * Kate * Anne User Directory of Jira B (set up like this -- read/write permission) * Dieter Jira Server B Jira Internal Directory (of B) * Dieter ----------------------- Desired situation: Jira Server A (JIRA Internal Directory (of A)) * (admin) LDAP * Kate * Anne User Directory of Jira B (set up like this -- read/write permission) * Dieter * Max * Andrew Jira Server B Jira Internal Directory (of B) * Dieter * Max * Andrew

I've found a solution myself: * Exporting user information with ScriptRunner / SQL by performingselect * from cwd_user where directory_id = 1 ('1' is the number of the internal Jira User Directory) * optional Filtering the list of users * Bulk importing the users with a ScriptRunner script Note that I've only migrated user names and email addresses and added them to a group. No login credentials or other information where migrated.

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Migrate users from one Jira (Server) Internal Directory to another Jira (Server) Internal Directory

Martin Böhme

How can I migrate Users from one Jira Server Internal Directory to another?

Initial situation:

Jira Server A

JIRA Internal Directory (of A)

(admin)
Max
Andrew

LDAP

Kate
Anne

User Directory of Jira B (set up like this -- read/write permission)

Dieter

Jira Server B

Jira Internal Directory (of

Dieter

-----------------------

Desired situation:

Jira Server A

(JIRA Internal Directory (of A))

(admin)

LDAP

Kate
Anne

User Directory of Jira B (set up like this -- read/write permission)

Dieter
Max
Andrew

Jira Server B

Jira Internal Directory (of

Dieter
Max
Andrew

Accepted answers

Martin Böhme

I've found a solution myself:

Exporting user information with ScriptRunner / SQL by performing
```
select * from cwd_user where directory_id = 1
```
('1' is the number of the internal Jira User Directory)
optional Filtering the list of users
Bulk importing the users with a ScriptRunner script

Note that I've only migrated user names and email addresses and added them to a group. No login credentials or other information where migrated.

All comments

Andy Heinzer

We have a document on this topic. Please see Migrating users between user directories. The thing about doing this is first to understand that this migration is limited in the scope

This functionality allows for the following scenarios:

Migrate all users from JIRA Internal to Delegated LDAP

Migrate all users from Delegated LDAP to JIRA Internal

Migrate all users from Delegated LDAP to Delegated LDAP

As such you can't just migrate users from one Jira Internal user directory to a different Jira Internal user directory. But you could migrate these users to a delegated LDAP instance and then use that same LDAP instance in both Jira's.

I think that would actually be the better way to do this.

Martin Böhme

I've found a solution myself:

Exporting user information with ScriptRunner / SQL by performing
```
select * from cwd_user where directory_id = 1
```
('1' is the number of the internal Jira User Directory)
optional Filtering the list of users
Bulk importing the users with a ScriptRunner script

Note that I've only migrated user names and email addresses and added them to a group. No login credentials or other information where migrated.

Thorsten Letschert _Decadis AG_

Are the scripts you're referring to available somewhere?

Martin Böhme

Groovy script for ScriptRunner that creates users:

import com.atlassian.jira.component.ComponentAccessor
import com.atlassian.jira.event.user.UserEventType
import com.atlassian.jira.exception.CreateException
import com.atlassian.jira.user.ApplicationUser
import com.atlassian.jira.user.UserDetails

def uu = ComponentAccessor.userUtil


// START config
def directoryId = 1L
def password = "dummy-password-for-all-users"
def usernamesWithMail = [ // "username": "mail-address"
 "john.doe" : "john.doe@example.com",
 "max.mustermann": "mm@example.com"
]
// END config


// START code
def successCount = 0
def failCount = 0
log.warn("creating ${usernamesWithMail.size()} users...")
usernamesWithMail.each { username, mail ->
 try {
 def userDetails = new UserDetails(username, username)
 .withDirectory(directoryId)
 .withPassword(password)
 .withEmail(mail)
 def user = uu.createUser(userDetails, false, UserEventType.USER_CREATED, [] as Set)
 successCount++
 log.warn("created user $user.name with mail $user.emailAddress")
 } catch (CreateException e) {
 log.warn("could not create user $username with mail $mail: $e.message")
 failCount++
 } catch (e) {
 log.error("error creating user $username with mail $mail", e)
 failCount++
 }
}

def res = "created $successCount users, $failCount failed"
log.warn("$res")
"$res. see Logs tab"

Vishnu Rajan

How can i move users from LDAP directory to Jira internal directory?

Fabian Graevenitz

"We have a document on this topic" - Yes you have. But it doesn't work.

"This functionality allows for the following scenarios:

Migrate all users from JIRA Internal to Delegated LDAP" - That's exactly what I want to do.

Choose Additional Configuration & Troubleshooting (section) > Migrate users from one directory to another.
This option will not appear if there are no valid directories to migrate from/to." - Well, this option DOES NOT appear although my scenario is previously mentioned to be valid. So your document is not complete. And yes, my LDAP directory is read/write.

Andy Heinzer

Hi @Fabian Graevenitz

There is no Read/Write option listed within a delegated LDAP directory, but there is for other non-delegated LDAP directories. I suspect that you have setup Jira to use that LDAP directory in this non-delegated method, which in turn would make it invalid to migrate users to or from.

Please see this screenshot for more information:

Screen Shot 2020-10-29 at 4.55.39 PM.png

In my example it defaulted to the 'delegated ldap auth' name, but the type also shows just OpenLDAP, not the OpenLDAP Read or Read/Write that happens in non-delegated user directories. You can see how that is different than the screenshot in https://confluence.atlassian.com/adminjiraserver/configuring-user-directories-938847049.html which shows it as a directory type of 'OpenLDAP (Read-Write)'.

You will probably need to add this LDAP directory to Jira once more, but this time choose the option called 'Internal with LDAP Authentication'.

Screen Shot 2020-10-29 at 4.59.02 PM.png

This should then let you migrate those users between directories.

Andy

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira

migration

user

user-management