LDAP displayName attribute - Modify logic if it has a value

[Brian Billman]

Using LDAP user directory, with Copy User on Login enabled.

Our LDAP schema has a value for displayName only if the user has a "nickname" set, and if it is set, it only has the nickname (which excludes lastname, example: William -> Will). But most users don't have that set at all, and it appears that JIRA is then creating a displayName based on firstName + lastName. If it possible to change this behavior (via a plugin?) so that if displayName is not empty, to always concatenate the lastName to it, and if it is empty, to leave the default behavior?

I realize the "best" fix would be to add a new LDAP attribute that had "(nickName Or firstName) lastName", but that may not be possible, so I'm seeing if there's another option.

Thanks!

[Brian Billman · Accepted solution]

I don't see any option other than creating a plugin to handle it. I tried modifying the DB directly (via a trigger), but the application doesn't reread the value (and it ends up getting overwritten the next time the user logs in).

[Brian Billman]

I don't see any option other than creating a plugin to handle it. I tried modifying the DB directly (via a trigger), but the application doesn't reread the value (and it ends up getting overwritten the next time the user logs in).

[marceloraveli]

You can resolve this problem altering the displayName attribute on LDAP.

First you need create a .ldif file with this sequence of commands:

dn: uid=Willian,ou=People,dc=your_company,dc=com
changetype: modify
delete: displayName

after, you need execute the following command as admin ldap:

ldapmodify -D "cn=root,dc=your_company,dc=com" -h localhost -f file.ldif -W -x

now you need modify the .ldif file this way:

dn: uid=marcelo,ou=People,dc=duxus,dc=com
changetype: modify
add: displayName
displayName: William Walker

after modify, you need execute the following command as admin ldap again:

ldapmodify -D "cn=root,dc=your_company,dc=com" -h localhost -f file.ldif -W -x

Done this, you should resolve your problem.

[Brian Billman]

Modifying LDAP is not an option, which is why I am asking for other options (but I agree, it would be the best and easiest way to fix). I started looking into creating a plugin that will tie JIRA into our SSO system (it seems likely the displayname would be updated there), but haven't had much time to work on it (and the documentation isn't super clear, a full example would help tremendously).