Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Where are users use LDAP (Microsoft AD) stored

Hi,

I've setup JIRA server so that we would invite users in order to create them. Once the user accepts the invite, the user would be created. It is configured to use the LDAP (Microsoft active directory) instead of the internal directory.

I was wondering when the user is created, does it still save into teh JIRA database? (e.g.  to the "cwd_users" table?). 

Sincerely,

Jason

 

1 answer

0 votes
Payne Community Leader Jun 15, 2021

Yes, the cwd_user table does hold some information about users that are managed in AD.

@Payne ,

thanks for your response. I'm current running into the following issue. I ran a SQL query to check the cwd_users table for a couple of users: itsupport and tushar. It currently returns 1 record (for itsupport).

cwd_user sql.JPG

 

When I go to the Users Directory section and set the "Jira Internal Directory" ahead of LDAP (Microsoft Active Directory) and then search for "jiraadmin" as the user name, I get itsupport. (expected result):

1_internal directory.JPG

However when I make LDAP (Microsoft Active Directory) ahead of "Jira Internal Directory" and then search for "jiraadmin", I get the email for tushar:

2_ldap.JPG

I'm trying to set the LDAP to be the top one, but it seems to be picking an email that is not stored in the cwd_users table. I was wondering if this information is stored elsewhere besides the cwd_users table? Would it be cached somewhere?

Jason

Payne Community Leader Jun 16, 2021

I see that you have 2 users with a username of jiraadmin - one in the internal directory and one in your defined LDAP directory; I guess that explains the difference in which one is returned via the interface depending upon the order of the directories. Though, I would expect them both to be returned.

Your SQL looks fine, and I would expect it to return 2 rows. Perhaps the "tushar" address has a leading or trailing space? Maybe try a where clause of where email_address like '%tushar@binarystream.com%' You could also try where user_name='jiraadmin' 

@Payne ,

I expected 2 rows as well, as I thought it stores records in cwd_user, even if it uses LDAP. I'm starting to think it caches the results somewhere.

I tried to check email_address like '%tushar%', but no records are turned. When I checked user_name = 'jiraadmin', only 1 record appears, which is the one in the original screenshot.

Jason

Payne Community Leader Jun 17, 2021

Hmm, I'm at a loss, then. In our installation, our AD users are all in the cwd_user table.

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Jira

⏰ Day in the life of a Jira Admin!

Hello Community! We thoroughly enjoyed this just-for-fun conversation in the Jira Admin Group about what it's like to be a Jira Admin. For #JiraJuly, our talented designers created these graphics t...

507 views 2 17
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you