Documentation for JIRA 4.4. Documentation for other versions of JIRA is available too.
This page describes what happens when you have defined more than one user directory in JIRA. For example, you may have an internal directory and you may also connect to an LDAP directory server and/or other types of user directories. When you connect to a new directory server, you also need to define the directory order.
jsmith
in both 'Directory1' and 'Directory2', the entry from 'Directory2' is ignored.
Here is a summary of how the directory order affects the processing:
You can change the order of your directories as defined to JIRA. Select 'User Directories' from the JIRA administration menu and click the blue up- and down-arrows next to each directory.
Notes:
This section summarises the effect the order of the directories will have on login and permissions, and on the updating of users and groups.
The directory order is significant during the authentication of the user, in cases where the same user exists in multiple directories. When a user attempts to log in, the application will search the directories in the order specified, and will use the credentials (password) of the first occurrence of the user to validate the login attempt.
The directory order is significant when granting the user permissions based on group membership. If the same username exists in more than one directory, the application will look for group membership only in the first directory where the username appears, based on the directory order.
Example:
jsmith
exists in both the Customers directory and the Partners directory.jsmith
is a member of group G1
in the Customers directory and group G2
in the Partners directory.jsmith
will have permissions based on membership of G1
only, not G2
.If you update a user or group via the application's administration screens, the update will be made in the first directory where the application has write permissions.
Example 1:
jsmith
exists in both the Customers directory and the Partners directory.jsmith
via the application's administration screens.Example 2: