LDAP Changes during Confluence 4.3 -> 5.1.4 Update

[B_ Normann P_ Nielsen]

After an upgrade, this LDAP Query for AD Users suddenly fails:

(&(objectCategory=Person)(sAMAccountName=*)(!(sAMAccountName=SM*)(!(mail=*mailfdqn.eu*))))

with:

Test retrieve user : Failed
org.springframework.ldap.InvalidSearchFilterException: Filter (!) cannot be followed by more than one filters; nested exception is javax.naming.directory.InvalidSearchFilterException: Filter (!) cannot be followed by more than one filters; remaining name 'ou=TheCompanyName,ou=Microsoft Exchange Hosted Organizations,dc=mshosting,dc=local'

After tests, it seems that negations/not's does not work, as in:

(&(objectCategory=Person)(sAMAccountName=*)(mail=*mailfdqn.dk)(!(sAMAccountName=SM*))

But this works:

(&(objectCategory=Person)(sAMAccountName=*)(mail=*mailfdqn.dk))

 But I need the (!(sAMAccountName=SM*) to limit the amount of users sync'ed

[B_ Normann P_ Nielsen · Accepted solution]

Resolution in the newly created KB: https://confluence.atlassian.com/pages/viewpage.action?pageId=385909189

My solution became:

(&(objectCategory=Person)(sAMAccountName=*)(mail=*mailfdqn.dk)(!(sAMAccountName=SM*)))

[Tiago Comasseto]

Hi Norman,

You may try this filter:

(&(objectCategory=Person)(sAMAccountName=*)(!(|(sAMAccountName=SM*)(mail=*mailfdqn.eu*))))

Cheers