Deleted group in Active Directory not deleted from Confluence

[Gary Lipscomb]

Confluence syncs group membership from AD. When the AD group is deleted this is not reflected in Confluence. The groups still exists in Confluence. The group in confluence does show that is has no membership now.

[Kiran Panduga {Appfire}]

Hi @Gary Lipscomb ,

Looks like you had set the LDAP permission to Read Only, with Local Groups  on the  Microsoft Active Directory Directory type.

LDAP users, groups and memberships are retrieved from your directory server and can only be modified via your directory server. You cannot modify LDAP users, groups or memberships via the application administration screens. However, you can add groups to the internal directory and add LDAP users to those groups.

The groups which you are referring might be added to the Internal directory. Please verify.

For additional information, Please visit the below Atlassian KB.

https://confluence.atlassian.com/doc/connecting-to-an-ldap-directory-229838241.html

thanks,

Kiran.

[Gary Lipscomb]

The group in question was imported from Active Directory and deleted from Active Directory. No changes where made to it in Confluence (6.14.3).

Also we don't have the option Read Only,with Local for the Microsoft Active Directory type.

We have selected

• Copy User on Login
• Synchronise Group Memberships

But haven't selected

• Update User Attributes on Login.

When the group was deleted in AD the user membership was deleted from the group in Confluence.