Best Practice: Changing User Directory and merging users

We would like to switch from an Apple Open Directory LDAP to a Microsoft Active Directory. On the new Active Directory some usernames will change and and some usernames will not change. 

On Apple Open Directory we configured "Read Only, with Local Groups" (Users, groups and memberships are retrieved from your LDAP server and cannot be modified in Confluence. Users from LDAP can be added to groups maintained in Confluence's internal directory.)

Unfortunately I couldn't find any informations how users can be merged, so that their own preferences, confluence-groups, permissions, tasks, etc. will not be affected by the changes.

Can you explain the steps and best practices.

 

My idea is to disable the old ldap connection, change the usernames manually to match the new usernames and then configure the new active directory as the default user directory. Will this work? 

2 answers

This widget could not be displayed.

Hello,

we've done similar (different LDAP User Repositores with different usernames to one) years ago with Confluence and JIRA as rename where not possible.

Because rename is now possible this is much easier than before.

I would suggest you

  1. that you write the old username in a new field within your MS AD. This new field will be your username in the LDAP field mapping (default is sAMAccountName).
  2. Shutdown you Confluene instance
  3. Go to your database (table: cwd_directory_attribute) and look for ldap.url and ldap.user.username. Change Booth to your new server and new temporary attribute
  4. Then start Confluence and wait for the directory sync and look if all content looks like before
  5. When all is fine and authentication works, you can switch back the LDAP field mapping to the default field

Migrating user directories needs some testing on a test server but it is possible. But every configuration is different and needs some testing.

Regards,
Tim 

This widget could not be displayed.

HI Tim, 

 

Thanks for your reply. This worked perfectly. 

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted Monday in Confluence

Why start from scratch? Introducing four new templates for Confluence Cloud

Hi my Community friends!  For those who don't know me, I'm a product marketer on the Confluence Cloud team - nice to meet you! For those of you who do, you know that I've been all up in your Co...

384 views 3 6
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you