Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-790

Revisit the need of jira-ldap-syncer in account-app

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      INFRA-787 made me realize that account-app is creating a user in JIRA through API. This was a surprise to me, because I thought JIRA was using LDAP as the user directory and authentication. The related code is from 2011, so I have no recollection of why this is done that way.

      R. Tyler Croy apparently talked to Larry Shatzer about this, and Larry Shatzer seems to understand why this is necessary, and how to tweak JIRA to eliminate the need for that.

      Once the current INFRA-787 outage is over, let's come back to whether we need to keep using this ldap-jira-syncer. If we are keeping it, we should document what it does and why it's needed. If we are not keeping it, that's fine, too.

        Attachments

          Issue Links

            Activity

            Hide
            lshatzer Larry Shatzer, Jr. added a comment -

            If we can get JIRA to be like Confluence to use LDAP for everything, then we can kill it. If we still need to get an account copied over, then I think it is necessary, but not critical, since if setup correctly, JIRA will copy info from LDAP on first authentication. The only real use case is when someone signs up with the account app, we can still assign them JIRA tickets, even if they have not logged into JIRA yet.

            Show
            lshatzer Larry Shatzer, Jr. added a comment - If we can get JIRA to be like Confluence to use LDAP for everything, then we can kill it. If we still need to get an account copied over, then I think it is necessary, but not critical, since if setup correctly, JIRA will copy info from LDAP on first authentication. The only real use case is when someone signs up with the account app, we can still assign them JIRA tickets, even if they have not logged into JIRA yet.
            Hide
            dduportal Damien Duportal added a comment -

            Update: it has to be checked and documented if needed/

            Show
            dduportal Damien Duportal added a comment - Update: it has to be checked and documented if needed/

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              kohsuke Kohsuke Kawaguchi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated: