Windows AD Sync works for Confluence but not JIRA

[Dan]

Hey All!

So interesting issue, the LDAP configuration is the same for our JIRA and Confluence (which are application linked). However I did create the groups in AD after I created them locally for JIRA, once I did them in AD - Confluence ( I did not create local groups originally in Confluence) was able to sync and grab them. When I deleted those groups (same name btw) from the internal JIRA group, they won't pull from AD. I even ran a resync on that user directory. 

Any thoughts as why I can't get them to sync on JIRA, hopefully, it's not because they were a local group first. That would be crazy if it wouldn't sync because of that. User Directory for each JIRA and Confluence is Read Only w/ Local Groups.  Its just odd that Confluence pulled the groups without issue. 

[Hernan Halabi - Elite IT Consulting Group]

I don't have many ideas of why would it be, but I'll have to ask. After the sync, did you log in with a user that belongs to those groups? Maybe they aren't created just because of that. Similar to what happens if by default you assign a group to the ad users. The group isn't assigned before the first login.

[Dan]

Well the sync with AD should be the same for JIRA and Confluence, Confluence instantly pulled all groups in while JIRA didn't with the sync. 

[Hernan Halabi - Elite IT Consulting Group]

In theory yes but you can never know. What happens if you do that on a clean instance? 

[Dan]

We don't have the resources for standing up another instance to test. Any idea of where to start, or is there something I can do to force this sync even though I already have. I am quite puzzled to say the least at why JIRA won't grab groups from AD but has no issues grabbing new people that have been placed in AD. 

[Hernan Halabi - Elite IT Consulting Group]

Not much that I can think of, can you validate at the db that the local groups aren't still listed there? Maybe they are even though you deleted them from the UI and that is causing conflict