After switching Confluence authentication from one LDAP directory to another users can login but group permissions are not working

Question

I switched Confluence from one directory to another, by adding a second directory and switching the order.

LDAP directory is configured as READ-ONLY WITH LOCAL GROUPS.

* People can login now using the password from the new directory (account id the same)
* Groups are loaded and I can see membeship
* When I go to a specific user (from LDAP), I do see only the default group (confluence-users) assigned to him. Even if I add him to other groups, these groups are not going to show in his page.

Problems:

* Everybody has normal access
* People belonging to groups (local or ldap) with with admin access do still have only normal access
* Restricted pages access is not working anymore, people who used to have access to restricted pages do not have access anymore, even if they are listed. Adding them again does not solve the problem.
* Practically now everybody logged-in from LDAP has only normal access

Sorin Sbarnea ( · Accepted Answer

The cause was that the directoru sync was failing after syncing the users. It was failing a grous sync without any message in the interface.

If you have groups with identical names, you will encounter this bug !

I hope you will not encounter this bug if you cannot manage the Active Directory as you will spend many hours trying to tune the filtering in order to prevent this bug from appearing.