Win 2012 AD Ldap configuration for Confluence Server

[Paul Hackett]

I want to sync only certain users and groups so I have setup a confluence group called SCI-Confluence in AD that contains these users and have the groups in a specific OU.

When I do a quick test that comes back fine so my server settings are good.

My users are in OU=Staff,OU=SBSUsers,OU=Users,OU=MyBusiness

My groups are in 

OU=Security Groups,OU=MyBusiness

Under the Configure LDAP User Directory I have my Base DN setup as DC=Company,DC=Local

I specify an Addition User DN: OU=MyBusiness, the same for Additional Group DN

I have tried a number of User Object Filters including:

(&(objectCategory=Person)(sAMAccountName=*)(memberOf=cn=SCI-Confluence,OU=Security Groups))

(&(objectCategory=Person)(sAMAccountName=*)(memberOf=cn=SCI-Confluence,OU=Security Groups,OU=MyBusiness))

I've tried changing the Additional user DN to 

 (|(ou=sbsusers)(ou=users)),ou=staff

and a myriad of other combinations but I just can't seem to get the syntax correct so any help would be appreciated.

Link to Confluence Log

[Shawn C · Accepted solution]

Hi Paul, 

Sorry to hear you're experiencing some issues with your LDAP AD Filters.  From the logs, it looks like we're receiving LDAP Error Code 32; in this particular situation with Data 0, it indicates you're missing the Defined DN in the filter.

Looking at an example filter, it specifies the FQDN of the group including your Domain details: 

(&(objectCategory=Person)(sAMAccountName=*)(memberOf=cn=CaptainPlanet,ou=users,dc=company,dc=com))

I would recommend trying to match your memberOF filter to that example.  If we're still experiencing issues with syncing after updating the filter, please check the Confluence Logs for any new LDAP Error Codes and let me know. 

Regards,
Shawn

[Paul Hackett]

Shawn,

Sorry for the long delay in replying I was on vacation.

Thanks for the suggestion so I was able to get it working by having by base DN set to DC-sciinc,DC=local, leaving the additional User DN and Additional Group DN fields blank under the LDAP Schema section and my User filter set to (&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=SCI-Confluence,OU=Security Groups,OU=MyBusiness,DC=sciinc,DC=local))

This worked, thanks for your help!