User migration from OpenLDAP to Active Directory

[Arun Ghanta]

We're running Jira, Confluence and Bitbucket at the moment which are authenticated using Jira's Crowd feature that syncs with OpenLDAP.

The new proposal is to migrate all the users from OpenLDAP to Microsoft Active Directory and then tie AD into Crowd.

But we're not sure how this approach is going to work. Will it work seamlessly as it will be same users coming in through AD or will it create duplicate entries for users messing up all content access permissions?

[Jeff Turner]

As long as usernames are the same before and after the move, you should be fine. In Jira and Confluence, permissions and content are just associated with a text username ('bob') not tied to any particular user directory. You can switch your backing user directory from OpenLDAP to AD/Crowd, and as long as the new user directory supplies a 'bob', they'll be able to log in with the new credentials and see all the same content.

For the migration, you could even have both OpenLDAP and AD user directories active for a while. Just switch the order when it's time to migrate, and then when you're confident, delete the OpenLDAP directory.

[Arun Ghanta]

That's relieving.

Thank you for the quick reply Jeff!