Active Directory sync doesn't import nested groups correctly and throws GroupNotFoundException

Question

There are two major problems:

1. We have nested groups. But although we checked the option in Confluence, the sync throws Exceptions at several groups:

2012-09-17 14:46:20,311 WARN QuartzScheduler_Worker-10 atlassian.crowd.directory.DbCachingRemoteChangeOperations addGroupMembershipsForGroup Could not add child group A to parent group B . One or both groups was not found
com.atlassian.crowd.exception.GroupNotFoundException: Group A does not exist
at com.atlassian.confluence.user.crowd.CachedCrowdGroupDao.findGroup(CachedCrowdGroupDao.java:86)
at com.atlassian.confluence.user.crowd.CachedCrowdGroupDao.findByName(CachedCrowdGroupDao.java:104)
at com.atlassian.crowd.directory.AbstractInternalDirectory.findGroupByName(AbstractInternalDirectory.java:556)
...

2. There is one Group which has about 1200 members. If we add a user in AD, it will not be synced with Confluence. So new users can't access Confluence until we add them manually.

We use Micosoft Active Directory with ~70,000 users, ~50,000 groups and ~400,000 memberships. Users that actively use Confluence are about 18,000.

Bruna Griebeler · Answer

Make sure that you have nested groups enabled on your LDAP configuration in Crowd, although the groups that are inside other groups, will not be imported.

Cheers!