Multiple LDAP-Directories and mutliple sAMAccountNames

[Steve Gerstner [bridgingIT]]

What happens if I've multiple Directories/Domains and if've got two Users with the same sAMAccoutName which is unique in the specified Domain but in the merged Confluence Directory, it will no longer be unique?

Is there any way to prevend this by configuration? and define the Username like username@Domain ?

[Manse Wolken · Accepted solution]

We had the same problem and solved it by using an third LDAP Directory in with the users from multiple AD's get synced.

Usernames became DOMAIN.USERNAME.

Since we use an IIS (able to authenticate to every domain involved) for NTLM authentication, our authenticator class just changes the RequestUser property from the forwarded IIS requests: "DOMAIN\USERNAME" to "DOMAIN.USERNAME"

Confluence takes these information and requests group information from LDAP.

Thats all it took and it works (using Confluence 3.5.13).