Disable LDAP, Keep Users?

[Brian E. Nicely]

Our organization is interested in going back to letting Confluence manage logins instead of LDAP.

First of all, is this possible?

If it's possible, will all the users' created spaces still be kept on Confluence? Will the users still be linked to their space?

What would be the steps to take to do this?

[Bruna Griebeler · Accepted solution]

Hi Brian!

I was also thinking about an appraoch that might help.
I didn't test it so it's just a suggestion! Please perform a backup of your database before making this changes.

On Confluence database, check the ID of your Confluence Internal Directory.
{code}
select id from cwd_directory where directory_name="Confluence Internal Directory";
{code}

Then change all users directory_id to the number above, on the cwd_user table.
This query will show you all users and its directory_id value.

1) You might test it with just one user from LDAP.
2) After any changes on the database, you must restart confluence;
3) To check if that works, you can disable the LDAP instance and check if the user is still enable to login.

Hope it works!

PS: Important! Users will need to reset their passwords since Confluence does not store their LDAP passwords

[BernardoA]

Basically to achieve this goal is necessary remove the LDAP directory, and as Tino informed create these same user names as internal.

Hope this information helps.

[Tino Winkler [Communardo]]

Hi Brian,

in theory this is possible. As the users are identified by ther username (login), you "simply" have to create a new local account for each user from your LDAP repository. You just have to make sure that the username stays the same. This way the newly created users will take tha place of the old ones from LDAP. Even if you miss some users, their content will stay in Confluence (just the creator will be missing).

If you have to create many users, the Confluence Command Line Interface might be of good help.