LDAP server permission help

[Sanu Soman]

Hi All,

I'm trying to integrate LDAP server on our JIRA 5.1.6 instance. While configuring its asking for the permission type, like

1. Read Only

2. Read Only, with Local Groups

3. Read/Write

Can anybody help me on difference between these options? Also for customizng the groups for the LDAP users within JIRA, we need to put External user management in OFF mode?

Thanks,

Sanu P Soman

[Jobin Kuruvilla [Adaptavist] · Accepted solution]

It is all explained here: https://confluence.atlassian.com/display/JIRA/Connecting+to+an+LDAP+Directory#ConnectingtoanLDAPDirectory-ConnectingtoanLDAPDirectoryinJIRA

[JiraYo]

Its explained, but what about real world best practices?

Is there any reason why i wouldn't want to manage everything through active directory groups (read only)? I assume i can add an AD group to say a local group so that all users end up the the desired local group by their AD membership.

Whats the advantage to having local groups for things? Couldn't i just create AD groups? I'm trying to get at if there is any benefit to option 2, read only with local groups. Never set up JIRA before so i dont know best practices. Your link only defines the things. I want to know if i am setting myself up for problems in the future by setting one of these options and what those possible problems would be.

[Aspect Infra Team]

1. All data ( users/groups ) JIRA takes from ldap, but readonly. all manageable outside jira

2. Users Jira takes from LDAP and groups store/manage localy in own database. So users readonly, groups manageable inside jira

3. All data ( users/groups ) JIRA takes from ldap, and can manage those data in ldap, so jira administrator as example can add users to ldap.