-
Suggestion
-
Resolution: Done
-
* Win 2k3
* PostgreSQL
NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion.
Crowd Embedded doesn't currently synchronise a user's primary group, as per the attached screenshot. It looks like this is because it's not a memberOf object, as in the sample LDIF below:
version: 1 dn: CN=David Currie,CN=Users,DC=sydney,DC=atlassian,DC=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: David Currie instanceType: 4 objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=sydney,DC=atlassian, DC=com accountExpires: 9223372036854775807 badPasswordTime: 129864372011250000 badPwdCount: 0 codePage: 0 countryCode: 0 displayName: David Currie distinguishedName: CN=David Currie,CN=Users,DC=sydney,DC=atlassian,DC=com givenName: David lastLogoff: 0 lastLogon: 129864372039218750 logonCount: 0 memberOf: CN=jira-users,OU=test space,DC=sydney,DC=atlassian,DC=com memberOf: CN=jira-administrators,OU=test space,DC=sydney,DC=atlassian,DC=com memberOf: CN=jira-developers,OU=test space,DC=sydney,DC=atlassian,DC=com name: David Currie objectGUID:: MRACIlp/eUazyg2iDAiW3A== objectSid:: AQUAAAAAAAUVAAAA1XLEFMke4fTNF9tNXvwEAA== primaryGroupID: 513 pwdLastSet: 129853139487968750 sAMAccountName: dcurrie sAMAccountType: 805306368 sn: Currie userAccountControl: 66048 userPrincipalName: dcurrie@sydney.atlassian.com uSNChanged: 26853843 uSNCreated: 26853837 whenChanged: 20120627233908.0Z whenCreated: 20120627233908.0Z
Can you please improve the Embedded Crowd engine in JIRA so that it imports the primary group of the user? Thanks!
Workaround
Set up the User Directory so that it uses the Default Group Membership functionality. This will require a permission setting of Read Only, with Local Groups. This won't bring over the Primary Group, however it will let you set a default group for all users.
- is related to
-
JRASERVER-29187 When synchronising with Active Directory, the Primary Group of the User is not brought across
- Closed
- relates to
-
CWD-1286 Provide support for Active Directory Primary group memberships (eg. Domain Users, Domain Admins)
- Closed
-
CONFCLOUD-6729 primaryGroupId not visible to Confluence when integrated with AD LDAP
- Gathering Interest