Have Jira use Apache Authentication. It is possible to pass Apache's REMOTE_USER system variable to Apache. Have Jira look at this and override it's own authentication mechanism. This variable could even be set using mod_auth_kerb, thus enabling full SSO.

Using the attached PHP script, and runing it from the cron, would enable you to manage all you Jira users completely from AD.