The user directories do not change when LDAP changes.It changes when I execute "Rebuild Index".

zhangyifei December 20, 2018

The user directories of my confluence come from LDAP.It should be updated in real time when the information of LDAP changes. But now it is not.It is updated when I execute "Rebuild Index" on the webpage which is "admin/search-indexes.action".

1 answer

0 votes
Stephen Sifers
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
December 24, 2018

Hello,

Connecting Confluence with an LDAP directory is a great way to have central control of users and access. There are some things that need to be considered when configuring LDAP.

By default, LDAP synchronization will occur every 60 minutes. This means from the last sync that takes place it will be another 60 minutes from there before the sync is completed. There is also another option to enable incremental synchronization which would allow you to only sync differences from your last full sync. You are able to configure these settings within your LDAP settings.

Enable Incremental Synchronization

Enable incremental synchronization if you only want changes since the last synchronization to be queried when synchronizing a directory.

Please be aware that when using this option, the user account configured for synchronization must have read access to:

  • The uSNChanged attribute of all users and groups in the directory that need to be synchronized.
  • The objects and attributes in the Active Directory deleted objects container.

If at least one of these conditions is not met, you may end up with users who are added to (or deleted from) the Active Directory not being respectively added (or deleted) in the application.

This setting is only available if the directory type is set to "Microsoft Active Directory".

Synchronization Interval (minutes)

Synchronization is the process by which the application updates its internal store of user data to agree with the data on the directory server. The application will send a request to your directory server every x minutes, where 'x' is the number specified here. The default value is 60 minutes.

Source document: Connecting to an LDAP Directory

As far as your user directories being out of sync, can you please provide a further example as to what you’re seeing not synchronized from LDAP to Confluence when you make a change in LDAP? Included screenshots will help to see where you’re not seeing the data synchronized.

Regards,
Stephen Sifers

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events