Is it possible to move to other LDAP but keep current groups?

Flavio Beck

My current AD server  will be off in next months. New AD is currently available but it does not have the same groups I have currently.

I performed some tests but not found an easy solution.

 

Current Situation:

- Jira Internal Directory

     -- Users from other offices (group: jira-users)

     -- admin (group: jira-administrators)

- Local AD (local office)

     -- Users from local office (group: jira-users, team-A, team-B, team-C....   around 80 groups)

 

Test Scenario (when local add is disabled and added new AD): [UPDATED]

 

- Corp AD (global)

   -- Users from other offices (group: XYZ-0987663-BLABLA....  + many other groups)

   -- Users from local office (group:  ABC-2454565-BLABLA... + many other groups)

- Jira internal Directory

     -- Users from other offices (groups: REPLACED BY ABOVE AD) 

     -- admin (group: jira-administrators)

 

Note: users from new AD have same username (ID) and same email address

 

I need to sync all users from the new AD, but manage groups locally and apply them to groups with same name as it is current AD

 

Flavio Beck

I have resolved using script runner:

 

 

import com.atlassian.jira.component.ComponentAccessor
import org.ofbiz.core.entity.ConnectionFactory
import org.ofbiz.core.entity.DelegatorInterface
import java.sql.Connection
import groovy.sql.Sql
import com.atlassian.jira.user.ApplicationUser
import com.atlassian.crowd.embedded.api.Group

log.warn ("--------START TO COPY GROUPS -----------")
def delegator = (DelegatorInterface) ComponentAccessor.getComponent(DelegatorInterface)
String helperName = delegator.getGroupHelperName("default")

// GET USERS AND GROUPS FROM OLD DIRECTORY (EVEN IT IS NOT THE ACTIVE DIRECTORY) 
Connection conn = ConnectionFactory.getConnection(helperName)
Sql sql = new Sql(conn)

def sqlUsers = """
 SELECT cu.lower_user_name, cg.lower_group_name
 FROM cwd_user cu
 JOIN cwd_membership cm
 ON cu.id=cm.child_id
 JOIN cwd_group cg
 ON cm.parent_id=cg.id
 WHERE cu.directory_id=10200 AND cg.directory_id=10200 //change to the source directory
 ORDER BY cu.lower_user_name
 """

def groupsByUser = [:]

try {
 def rows = sql.rows(sqlUsers)
 // MAP THE SQL RESULT TO A VARIABLE (TO CLOSE TO CONNECTION BEFORE TIMEOUT)
 groupsByUser = rows.collectEntries {
 [it.lower_user_name, it.lower_group_name]
 }

} finally {
sql.close()
}

// ADD GRUPS FOR EACH USER IN NEW DIRECTORY
groupsByUser.each{
 def user = it.key
 def group = it.value

 def userManager = ComponentAccessor.getUserManager()
 def appUser = userManager.getUserByKey(user)
 def groupManager = ComponentAccessor.getGroupManager()
 Group groupObj = groupManager.getGroup(group)
 ApplicationUser aUser = (ApplicationUser) appUser
 Long dir = aUser.getDirectoryId()

//check if user is really present in the destination directory
if (dir == 10304){ 
 log.warn ("Adding user: " +user + " -> to group: " +group)
 groupManager.addUserToGroup(aUser, groupObj)
 } else {
 log.warn ("user not in NEW AD: " +user)
 }
}