Auto Add to confluence-users from LDAP (Read Only with Local Groups)

[Chris Swanson]

Following the LDAP documentation for Confluence 5.3.1 I have configured the LDAP connector.
Works great but does not auto add the user to confluence-users so user is denied access.

Name: LDAP server
Active: true
Type: CONNECTOR
Allowed operations: [CREATE_GROUP, UPDATE_USER_ATTRIBUTE, UPDATE_GROUP_ATTRIBUTE, DELETE_GROUP, UPDATE_GROUP]
Implementation class: com.atlassian.crowd.directory.MicrosoftActiveDirectory
Attributes:
"autoAddGroups": "confluence-users"

Looking for suggestions on where to look for why this does not work as intended.
You have to manually login to Confluence and go into the user settings and manually add the user to confluence-users group, which then grants access.

thanks for any hints!

CTS

[Hector Vazquez]

Hi Chris, Did you find a solution. I'm having the same issue with Confluence 5.7.3. Regards,

[Ludovic_DUSSART]

Same defect here with Confluence 6.10 :(

They work fine until we need to manage also groups locally (capacity to add new group)

[Tiago Comasseto]

Hey Chris,

The option Default Group Memberships only works for users on the first login, see here:

In Confluence 3.5.2 and later, and JIRA 4.3.3 and later: The first time a user logs in, their group memberships will be checked. If the user does not belong to the specified group(s), their username will be added to the group(s). If a group does not yet exist, it will be added locally. On subsequent logins, the username will not be added automatically to any groups. This change in behaviour allows users to be removed from automatically-added groups. In Confluence 3.5 and 3.5.1, they would be re-added upon next login.

Do you see this issue when trying log in Confluence with a newly created user that hasn't logged in Confluence yet?

Cheers

[Chris Swanson]

Hi Tiago,

So, when an LDAP user attempts to log in for the first time they are rejected. This is due to them not belonging to the 'confluence-users' group upon login.

Thanks!

Chris