Need to exclude a global LDAP group

We are planning on switching our confluence instance to use LDAP but we need to exclude some company wide AD groups in the process as they have the same name as some confluence groups such as 'confluence-administrators'.

I am trying to achieve this via a search filter but nothing I have tried works.

This is one filter I tried but the system won't even start with this filter.

<groupsearchfilter>(&(objectClass=group)(!(dn:=confluence-administrators)))</groupsearchfilter>

Can you advise on the proper syntax to achieve excluding a group?

Thanks.

4 answers

1 accepted

This widget could not be displayed.

Hi Tony, and Glenn,

Try to replace & to &amp and see how it goes. So your filter should be somthing like this

(&amp;amp;(objectClass=group)(&amp;#33;(cn=confluence-administrators)))
(&amp;amp;(objectClass=group)(&amp;#33;(dn:=confluence-administrators)))

Hope it helps.

Cheers,
Septa Cahyadiputra

This widget could not be displayed.

Finally got it. The example from Septa was just ONE character off. Finally found the help I needed here :

https://confluence.atlassian.com/display/DEV/How+to+write+LDAP+search+filters

Here was the filter that worked, again, Septa was very close!

(&amp;(objectClass=group)(&#33;(cn=confluence-administrators)))

Thanks to all for the help.

ah I missed a semicolon there :(. Anyway, great to hear that you have find the resolution on your end.

I modified my Answer so that other user won't fall to the same trap :P.

Cheers,
Septa Cahyadiputra

This widget could not be displayed.

FYI, the Confluence vesion is 3.1.1

I tried the same filter, well close

(&(objectClass=group)(!(cn=confluence-administrators)))

from the command line using Sun's ldapsearch and it worked fine. However, when I add this filter to the XML config file as shown above, Confluence wont even start.

Any ideas?

This widget could not be displayed.

Still not having any luck. I am starting to think the version of Confluence that we have is not able to accept complex filters. If I make any changes to the filter at all, Confluence wont even start. I am going to enable debug level logging and see where that gets me.

Suggest an answer

Log in or Sign up to answer
Atlassian Summit 2018

Meet the community IRL

Atlassian Summit is an excellent opportunity for in-person support, training, and networking.

Learn more
Community showcase
Posted Aug 06, 2018 in Jira Service Desk

A is for Activate: Share your top Jira Service Desk onboarding tips for new users!

Hi, everyone! Molly here from the Jira Service Desk Product Marketing Team :).  In the spirit of this month's  august-challenge, we're sourcing stories of Jira Service Desk activation fro...

575 views 25 15
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you