Limit users in Confluence when connected to LDAP or Active Directory

Peter Meier1

Hi all,

I'm trying to limit the number of users that are displayed in Confluence when connected to an Active Directory or LDAP server.

According to (even if this is a Crowd documentation it should work for Confluence as well):

http://confluence.atlassian.com/display/CROWD/Restricting+LDAP+Scope+for+User+and+Group+Search

I can change the filter to:

(&(objectCategory=Person)(sAMAccountName=*)
(|(memberOf=cn=confluence-users,ou=Groups,dc=sydney,dc=atlassian,dc=com)
(memberOf=cn=confluence-administrators,ou=Groups,dc=sydney,dc=atlassian,dc=com)))

This implies, that the membership of a user is defined in the user object via the attribute "memberOf". Unfortunately in our environment, the user doesn't have this attribute, instead, the group has several entries "member", listing all people connected to this group.

Is there a way to filter based on this setup?

Thanks

Peter

Jim Birch

AFAIK Active directory creates the backlink entries for group membership automatically, ie each member entry in group should have a corresponding memberOf attibute in the user object. If you are using AD I'd check that there isn't something wrong with your query or the rights of the account read to the member attribute.

Other LDAP directories may not do this - I wouldn't know.

(BTW If you need a tool to view or query an LDAP server, I've found Apache Directory Studio very useful.)