Combining users and groups from different AD domains

Martin Jæger

Hi all,

Still trying to make the confluence/ad integration work.

Have question in that regard:

We have two domains (with trust between)

dom1 and dom2

We have users and groups in both domains - not with any of the same name though.

dom1 is primarily it-personal users, but also groups.

dom2 is live-systems and 'real' users.
Also in here is stored our groups that control application access. (E.g. AppAccess_Live_confluence_read)

The thing is, that users in dom1 is member of groups in dom2.

So I basically want to have the application groups sync from dom2 to Confluence, and also the users from dom2 that are member of these groups. (Working ok)

AND i want to sync users from dom1 that are member of the application access group in dom2. (Can't make this work)

Does confluence support this setup with the features provides by the 'user directories'. Or would i have to maintain this setup using other methods? (Thinking cli commands or similar)

Thank you all. Pease advise

/Martin

Martin Jæger

Got it! I had to change the port to 3268, for the search to be done in the global catalog. In base DN i could write whatever, it didn't matter. Now i just have the value NULL in there. Now users from dom1 is getting membership in groups from dom2, as it is configured in AD. Look here for details: http://technet.microsoft.com/en-us/library/cc728188(v=ws.10).aspx Martin