Changing LDAP Source from Novell to Microsoft

[Markus Adler]

We are running Confluence 3.4.6 and are migrating from Novell eDir to Microsoft Active Directory.

Currently the two systems are synchronized, so user IDs and passwords match. Confluence is using LDAP only to authenticate, all group memberships and access are controlled in Confluence.

I plan to change the atlassian-user.xml to point to AD and then restart confluence. I expect I will have to re-add the users to their Confluence groups but will it orphan any of their pages? eg. Personal Space

Or will it recognize their account as the same user but from a different source?

[Andrew Frayling · Accepted solution]

Hi Markus,

I've not done that particular LDAP switch, but if the usernames are the same I'd expect Confluence to recognise accounts as the same user and it shouldn't orphan any pages - I wouldn't even expect to have to re-add users to their Confluence groups.

If the usernames are different things get a bit complicated (http://confluence.atlassian.com/display/DOC/Changing+Usernames), but if they're the same and you're only using LDAP for authentication then as far as Confluence is concerned a user with the username "jbloggs" is "jbloggs" whether it authenticates against eDir or AD.

As mentioned, I've not tried this particualr switch, but that's what I'd exepct. A quick test on a test instance of shutting down Confluence, changing LDAP config and re-starting Confluence will give you a definitive answer.

Andrew.

[Markus Adler]

Looks like it works. We did end up migrating Confluence to a new server with LDAP authentication pointing to Active Directory but it seems to have picked up all the accounts as before.

Thanks for the information.