As part of a migration we're removing our internal LDAP directory (FreeIPA) and use SAML for logging in.
Logging in works fine but now I'm trying to move the users in Jira from LDAP to the internal directory and this is not working. The page shows "0 of 5 users successfully migrated." and the log says:
2021-08-15 00:21:54,540+0000 http-nio-8080-exec-30 WARN <my username> 21x693x1 8o4k7k 1<my IP> /plugins/servlet/embedded-crowd/directories/migrate/
[c.a.j.c.embedded.ofbiz.OfBizDirectoryDao] Attempting to store directory [1] with only 3 attributes.
Another option would be to create new users and change all the contributions from the old to the new users but I was not able to find how to do this.
The same procedure I also have to repeat on Confluence/Bitbucket.
Hi Daan, I wish I had an answer for you. I'm interested because we are moving from Jira Delegated LDAP auth (with directory_id=10000) so SAML SSO (miniOrange) so need to migrate all users, groups, memberships to the internal directory (id=1).
The Jira directory migration tool was partially successful for me, but left about half of users in the delegated directory. It's still not clear why, but there were likely duplicate users in both directories, or group memberships.
Now I'm testing database manipulation of 4 tables to move/migrate the remaining users with group memberships: cwd_user, cwd_group, cwd_membership, cwd_user_attributes.
If you found a solution, I would sure love to hear about it.
I will also have the same issue with Bitbucket and Confluence, w/o the built in migration tool.
Thanks.
Rex
Atlassian Government Cloud has achieved FedRAMP Authorization at the Moderate level! Join our webinar to learn how you can accelerate mission success and move work forward faster in cloud, all while ensuring your critical data is secure.
Register NowOnline forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.