As part of work I’ve been doing for a customer who was quite disappointed with Jira’s LDAP shortcomings, I’ve implemented an alternative OSUser LDAP CredentialsProvider. Because of serious limitations, proper integration is not possible (although planned for Jira 4.1), but my implementation covers most problems.