How to debug Confluence LDAP authentication agains two directories?

I am trying to add another Active Directory for authenticating on Confluence 3.5.13 but I am not able to login with any user on the new directory.

Both directories are Microsoft Active Directories and I am able to bind on them with an utility, still Confluence doesn't seem to let me authenticate users with the new one.

  • I tried to change directories order
  • I see nothing interesting in the server logs (even after switching to debug mode)

2 answers

1 accepted

0 votes
Accepted answer

Enable logging for crowd - Confluence has an internal version inside.

It seems that atlassian did not spend too much time setting and documenting the correct LDAP configuration for Microsoft Active Directory. Here is a set that is optimized

# User Schema Settings
User Object Class: person
User Object Filter: (&(samAccountType=805306368)(sAMAccountName=*))
User Name Attribute: sAMAccountName

Note: I'm still working to improve the settings and I will update the answer. On my TODO list: filtering the disabled accounts and improving the filters for the groups, now I have "only" 13000 of them.

On my TODO list: filtering the disabled accounts

Currently this is not possible in Confluence out of the box. It's being tracked at https://jira.atlassian.com/browse/CONF-24786 . But it's achievable by adding the following in your User Object Filter:

!(userAccountControl:1.2.840.113556.1.4.803:=2)

So it should look something like this from your original User Object Filter:

(&(samAccountType=805306368)(sAMAccountName=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

What groups are coming in on the 2nd AD connection? And do any of these group have permissions in Global Permissions to access Confluence?

Suggest an answer

Log in or Sign up to answer
Community showcase
Published yesterday in Statuspage

194 years of downtime: looking back on incident data from 2018

Statuspage customers logged more than 194 years of collective incidents in 2018. That’s a whopping 87% increase from the  104 years logged in 2017 , and we aren’t even through December yet....

35 views 1 5
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you