Best Practice: Changing User Directory and merging users

We would like to switch from an Apple Open Directory LDAP to a Microsoft Active Directory. On the new Active Directory some usernames will change and and some usernames will not change. 

On Apple Open Directory we configured "Read Only, with Local Groups" (Users, groups and memberships are retrieved from your LDAP server and cannot be modified in Confluence. Users from LDAP can be added to groups maintained in Confluence's internal directory.)

Unfortunately I couldn't find any informations how users can be merged, so that their own preferences, confluence-groups, permissions, tasks, etc. will not be affected by the changes.

Can you explain the steps and best practices.

 

My idea is to disable the old ldap connection, change the usernames manually to match the new usernames and then configure the new active directory as the default user directory. Will this work? 

2 answers

Hello,

we've done similar (different LDAP User Repositores with different usernames to one) years ago with Confluence and JIRA as rename where not possible.

Because rename is now possible this is much easier than before.

I would suggest you

  1. that you write the old username in a new field within your MS AD. This new field will be your username in the LDAP field mapping (default is sAMAccountName).
  2. Shutdown you Confluene instance
  3. Go to your database (table: cwd_directory_attribute) and look for ldap.url and ldap.user.username. Change Booth to your new server and new temporary attribute
  4. Then start Confluence and wait for the directory sync and look if all content looks like before
  5. When all is fine and authentication works, you can switch back the LDAP field mapping to the default field

Migrating user directories needs some testing on a test server but it is possible. But every configuration is different and needs some testing.

Regards,
Tim 

HI Tim, 

 

Thanks for your reply. This worked perfectly. 

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Posted Jul 10, 2018 in Confluence

We want to see the templates you've created in Confluence!

Hi Community, Jessica here from the Confluence Product Marketing team!  July’s community challenge is all about sharing pictures  — and as an extension of our first post on what ...

587 views 20 11
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you