nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Problems with Active Directory

ket.pjwstk

Hi,

Our goal is to retrieve one group of users with all members and our configuration looks like:

Base DN O=some dn

Additional Users DN /left empty/

Additional Group DN:cn=group_name,cn=groups

And everything is almost fine, because we get group with members, however with also get all users that are not members of any group. And thats a prboblem, because there are ~38k of such users in given AD instance.

Accepted answers

JamieA

You need to set the user object filter under "user schema settings". There you need to filter for only users that are members of your group... using the memberOf attribute.

Eclipse directory studio or JXplorer is useful for testing this stuff.

All comments

JamieA

You need to set the user object filter under "user schema settings". There you need to filter for only users that are members of your group... using the memberOf attribute.

Eclipse directory studio or JXplorer is useful for testing this stuff.

ket.pjwstk

I've done as you wrote and it helped. Ie. I got specific group with users, however I get the following error:

INFO] [talledLocalContainer] com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.InvalidNameException: CN=Deleted Objects,null: [LDAP: error
code 34 - 0000208F: NameErr: DSID-031001F7, problem 2006 (BAD_NAME), data 8350, best match of:
INFO] [talledLocalContainer] 'CN=Deleted Objects,null'
INFO] [talledLocalContainer] ]; nested exception is javax.naming.InvalidNameException: CN=Deleted Objects,null: [LDAP: error code 34 - 0000208F: NameErr: DSID-031001F7,
problem 2006 (BAD_NAME), data 8350, best match of:
INFO] [talledLocalContainer] 'CN=Deleted Objects,null'
INFO] [talledLocalContainer] ]; remaining name 'CN=Deleted Objects,null'

JamieA

Hrm, you might not have permission to that DN. See http://confluence.atlassian.com/display/JIRA/User+Management+Limitations+and+Recommendations#UserManagementLimitationsandRecommendations-SpecificNotesforConnectingtoActiveDirectory , 4th or 5th point.

Amit Girme_b7eu8n

Temporary solution is remove incremental synchronization check box. Atlassian working on it https://jira.atlassian.com/browse/CWD-2581 Hopefully it wont take long.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

ldap