LDAP Configuration question

Jonas Berlin

We have two domains domain1.local and domain2.corp, both running MS Active Directory 2008. There is a trust relationship such that domain1 trusts domain2, but not the other way around. The group confluence-users is located in domain1's AD, and Confluence is set up to use domain1's AD as the LDAP server. The confluence-users group contains users from both domain1 and domain2. The users in domain1 can be synchronized with Confluence and all users in domain1 can log in and use Confluence just fine. Users from domain2 do not show up in Confluence, and they can't log in.

I have checked the Follow Referrals box under Advanced in the directory configuration.

Is this supposed to work? Is this a Confluence configuration issue or an AD configuration issue?

Thanks

Jonas

Bruna Griebeler

Hi Jonas!

I believe that in this case, you must configure 2 User Directories in Confluence, one for domain1 and another for domain2 since Confluence will search for users and groups just below the BaseDN you have configured, like example.domain1.com.
So, even if domain1 trusts domain2 Confluence doesn't know that since it is an Active Directory internal configuration.

Hope it helps!