Group rights AD groups don't work

[manfred_jordan]

Hello everybody,

we upgraded confluence 3 to version 6. We connected confluence to our active driectory and have servral pages with special read and write permissions. Those permissions are realized with ad groups. Now these rights are not working. For instance there is a page "foo". I see that the group "admin" has full access, I can see the ad group in confluence and can see that f.i. John.Doe is a member of that group but John.Doe is not able to see that  page.

If I give rights to the person John.Doe (ad user), the page is viewable.

This is very strange and I have no idea where to look for this error.

Any help is apreciated.

Manfred

[Jonathan Smith]

Morning @manfred_jordan,

  It sounds like you were using internal groups for Confluence 3. Now that you hooked up your active directory in Confluence 6, you should change your space permissions groups to the AD groups instead of internal groups.

• Confirm your Active Directory is above Internal Directory in the User Directories page.
• More information on configuring User Directories

What you can try:

Go into space permissions, search for the group you want to use for permissions. There is a chance you might get two results, one being your AD group result, and the other being the internal group.

I ran into this situation when hooking up Active Directory. confluence-users was the internal group, and AD was bringing down a new group called Confluence-users. When typing in a group, Confluence was case sensitive.

[manfred_jordan]

Thanks for the answer @Jonathan Smith,

and good evening (....here in germany). I only see one group with that name and that is the ad-group. Confluence 3 was connected to the ad as well.

But I found a solution. There is a flag in the config files where you can tell the system zu check the group membership with every login. After setting that flag, I got access.

[Jonathan Smith]

Great! Was it an option in the configuration of the AD user directory or was it a flag in the database?

[manfred_jordan]

It was a flag in the config-files in confluence, not in the ad.