nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

LDAP synchronization does not load any group member

Alexander Alexa11

Hi,
we use confluence 3.5 together with LDAP user directory. User and groups are synchronized but the groups do not show any member.
We are able to login with our LDAP accounts but without any group membership.
Our LDAP is a OpenLDAP system.

After synchronization confluence has all groups and members from LDAP, but groups don't contain any member.

Why does confluence not load the members from the member-Attribute?

Thanks in advance.

Accepted answers

All comments

JamieA

How do you mean "member-Attribute"? AFAIK the member attribute for OpenLDAP is uniqueMember. If you have member, you need to change that in in Membership Schema Settings.

Can you double-check the actual attribute in your schema, and the settings in jira.

Alexander Alexa11

Jamie, thank you for answer.

I set next parameters in LDAP User Directory in section "Membership Schema Settings":

Group Members Attribute: memberUid

User Membership Attribute: uid

Use the User Membership Attribute: When finding the user's group membership

And after this settings members didn't load in group.

JamieA

What does the ldif for a group look like. does it have attributes called memberUid?

My settings are:

Group Members Attribute: uniqueMember

and the checkbox unchecked. You may have your openldap set up different from mine of course, so only looking at the ldif for a group will tell us.

Alexander Alexa11

ldif of group:

dn: cn=block_ip,ou=dev,ou=Group,dc=example,dc=com
objectClass: posixGroup
objectClass: top
cn: block_ip
description: users can use script block_ip
memberUid: daymon
memberUid: brian
memberUid: paul
memberUid: john
gidNumber: 14485

JamieA

I think your user membership attribute is wrong, I don't see how it could be uid. It should be memberOf or something.

Try unchecking that option.

Alexander Alexa11

We use static group configuration, when group's members contains into group, not into user (dynamic group configuration).

Also I tried setup configuration with unchecked and cheched option. I tried both, but result is same (

JamieA

I would create a support ticket, I'd be interested to hear what Atlassian support say about this. Sorry not to be of more help.

Alexander Alexa11

Thank you.

Can you post the link of support ticket. I also will check it state.

Brian Hill

The posixGroup (memberUid) and groupOfNames (member) are mutually exclusive object classes. memberUid is just a login name - not an entire DN the way member is.

The question for Atlassian support how they support the posixGroup config if they even do.

Has anyone figured this out yet?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

ldap