| Name | LDAP Dynamic Groups Plug-in |
|---|---|
| Versions | 1.1, 1.2 and 2.2 |
| Product Versions | 2.2.9 - 2.5.x, 2.7 - 2.9 |
| Authors | Stepstone Technologies Inc., Advance Internet |
| Homepages | http://stepstonetech.com, Advance Internet |
| Price | Free |
| License | GPL (with permission for use with Atlassian Confluence) |
| JavaDocs | |
| IssueTracking | http://developer.atlassian.com/jira/browse/LDGP |
| Download JAR (1.1) | http://svn.atlassian.com/svn/public/contrib/confluence/ldap-dynamic-groups/branches/1.1/target/LDAP-Dyn-Groups-1.1.jar |
| Download JAR (1.2) | http://svn.atlassian.com/svn/public/contrib/confluence/ldap-dynamic-groups/jean-marois/target/ldap-dynamic-groups-event-listener-1.2.jar |
| Download JAR (2.2) | http://svn.atlassian.com/svn/public/contrib/confluence/ldap-dynamic-groups/trunk/target/ldap-dynamic-groups-2.2.jar |
| Download Source | http://svn.atlassian.com/svn/public/contrib/confluence/ldap-dynamic-groups |
Introduction
The LDAP Dynamic Groups Plug-in allows LDAP users to join Confluence groups automatically, while they log-in. This makes sure users become members of the right Confluence groups, without much administrator effort.
The administrator defines a set of rules using LDAP static groups or LDAP user attributes. These rules are the group mappings, and each one maps an LDAP grouping to one Confluence group. Use multiple rules to map any LDAP grouping to any Confluence group.
More Documentation
There is more documentation than will fit on a single page. See this page's Children to learn about topics beyond basic installation. The topics include troubleshooting, bug-fixes, & release notes.
LDAP User Management is a Prerequisite
To use this plug-in, Confluence must already be configured to use LDAP as its external user management.
See LDAP User Management or Confluence Static Group Integration to learn how to configure LDAP user management.
Version 2.2 Release for Confluence 2.9
This version provides administrator diagnostics & more security. The administrator sees group mapping errors, such as missing LDAP groups, in the Confluence log file. The valid group mappings are listed on an Administration Console page, under Security. Currently, the group mapping must still be set using a Java properties file, but this may change in a later release. It only supports Confluence versions 2.5.6 and later.
Version 1.2 Maintainance Release for Confluence 2.7 & 2.8
The version 1.2 JAR is a maintainance release that supports Confluence versions 2.7 & 2.8. It reflects the new LDAP repository accessor class. This class has been in Confluence since at least version 2.5.6, and this plug-in should only apply to all versions after that one. Many thanks to Jean Marois whose work made this plug-in update possible.
Please note: In this version, users are not automatically added to confluence-users.
Version 1.1 Release for Confluence 2.2.9 to 2.5.5
This is the original plug-in release. It is designed to work with older Confluence versions, prior to version 2.5.6. This is the only version that requires the seraph-config.xml file's <authenticator> XML class attribute to be changed.
Group Mappings
The administrator should plan out the group mappings before installing this plugin. These topics describe how to map external groups to Confluence groups. First, read the Overview of Mapped Groups. Then, see a Group Mappings Example.
WARNING: Group Membership is not Revoked Automatically!
Users remain Confluence group members. It is not sufficient to remove a group mapping from the properties file. To remove those users that the plug-in added to the mapped group, the administrator must manually remove them.
Deployment Instructions
Make Sure LDAP User Management is Configured
Make sure LDAP user management is configured, and LDAP static groups appear in Confluence.
- See the Administration Console section Security, and click Manage Groups.
- The LDAP static group names appear as read only.
If you do not see your Directory Server static groups appearing in Confluence, then follow the directions for Confluence Static Group Integration.
Installation
Confluence Directories in Directions
Substitute your Confluence installation directory for CONFLUENCE_INSTALL_DIR. Find the CONFLUENCE_HOME location in CONFLUENCE_INSTALL_DIR/confluence/WEB-INF/classes/confluence-init.properties.
Instructions for version 1.1
The LDAP Group Plug-in requires several handmade modifications to the Confluence installation.
Carefully follow these steps.
- Shut down the Confluence server.
- Download LDGP 1.1 JAR to CONFLUENCE_INSTALL_DIR/confluence/WEB-INF/lib.
- Create a new directory called CONFLUENCE_HOME/ldap-group-mapping.
- Download and edit ldap-mappings.properties, following its directions to specify the desired group mappings.
- Place ldap-mappings.properties in CONFLUENCE_HOME/ldap-group-mapping.
- Edit the file CONFLUENCE_INSTALL_DIR/confluence/WEB-INF/classes/seraph-config.xml as follows:
Replace the entry:<authenticator class="com.atlassian.confluence.user.ConfluenceAuthenticator"/>
with:
<authenticator class="com.stepstonetech.confluence.ldap.ConfluenceGroupJoiningAuthenticator"/>
- Restart the Confluence server.
Instructions for versions 1.2, 2.1 or later
These LDAP Group Plug-ins may be downloaded directly from the plugin repository, but they require the Java properties file to complete the Confluence installation.
Carefully follow these steps.
- Download the LDAP Group Plug-in of your choice.
- Browse the Atlassian Plugin Repository to get the JAR.
- Download either LDGP 1.2 JAR, LDGP 2.1.1 JAR, LDPG 2.2 JARto a local directory.
- Shut down the Confluence server.
- Create a CONFLUENCE_HOME/ldap-group-mapping directory.
- Download and edit ldap-mappings.properties, following its directions to specify the desired group mappings.
- Place ldap-mappings.properties in CONFLUENCE_HOME/ldap-group-mapping.
- Install the LDPG JAR of your choice.
- If you chose 1a above, then use the Administrator Console to manually upload the JAR file.
- If you chose 1b above, then theplugin should already be installed.
- Restart Confluence.
Comments (83)
May 10, 2007
Derek Nicol says:
This plug in provided us a way to add users to Confluence that were not automati...This plug in provided us a way to add users to Confluence that were not automatically mapped to the internal confluence-users group. Part of the issue we faced was that the default LDAP integration for Confluence put everyone in confluence-users. We needed the ability to add outside users (vendors, third parties) to confluence but not allows them to see all of our internal public spaces.
So we create an LDAP scheme which distinguished employees and third party/vendors and store all outside users in their own internal-confluence groups.
May 15, 2007
Matt Stevens says:
This plugin really help my deployment as the unconventional way groups were impl...This plugin really help my deployment as the unconventional way groups were implemented in our LDAP was not binding in the Atlassian LDAP integration. The feature of this plugin for binding user auth to Confluence group mappings of attributes was simply "just worked". I had two questions.
For an attribute value which had a forward SLASH in its string how can that be covered in the key value properties file?
For an attribute which you want to wildcard foo* is this possible in the properties file?
May 16, 2007
Darryl Duke says:
Thanks very much for the kind words. We're glad you found this useful. Although...Thanks very much for the kind words. We're glad you found this useful.
Although I don't believe we've specifically tested forward slashes, you should be able to use them in the properties file within attribute values (just like your confluence-init.properties file). Please let us know if this is causing you problems.
At this point, unfortunately, the plug-in currently doesn't support regular expressions.
May 16, 2007
Darryl Duke says:
The plug-in license has been updated to allow use with Confluence. Thanks to eve...The plug-in license has been updated to allow use with Confluence. Thanks to everyone for their help clearing this up. Meanwhile, I'll discuss LGPL with the plug-in owner. (P.S. I've moved the licensing discussion here.)
May 21, 2007
Tim Hayton says:
Many thanks for creating this plug-in, it looks like exactly what we need. I'm i...Many thanks for creating this plug-in, it looks like exactly what we need. I'm in the unusual situation of not having permission to create/modify groups of confluence users on our LDAP server (it's run by a different part of our organisation), so being able to dynamically configure membership of confluence-users locally whilst retaining the advantages of LDAP account management is really useful.
I've installed the plug-in as described, but am getting a problem with multi-line mappings in the ldap-mappings.properties file. If this file consists of just:
static-groups.mapping=AAA_Staff,confluence-users; \ CCC_Staff,confluence-users;then only those users in AAA_Staff get successfully added to confluence-users group when they log in. CCC_Staff members get the 'Not Permitted' error following login.
If I reverse the order of the lines to:
static-groups.mapping=CCC_Staff,confluence-users; \ AAA_Staff,confluence-users;then only those in the CCC_Staff group get successfully added, with AAA_Staff now failing. So it looks like only the first entry in the mapping list is working. The same behaviour also occurs when I use dynamic-groups.mapping.
Have I misunderstood the syntax in the example perhaps?
May 21, 2007
Derek Nicol says:
change static-groups.mapping to dynamic-groups.mappings Here is a sample fro...change static-groups.mapping to dynamic-groups.mappings
Here is a sample from my properties file
dynamic-groups.mapping=ou:people,confluence-users; \
ou:newspapers,confluence-vendors; \
ou:thirdparty,confluence-vendors;
May 22, 2007
Martin Cleaver says:
Can / should this be used with Crowd as well? Is there a better way to accomplis...Can / should this be used with Crowd as well? Is there a better way to accomplish this in Crowd?
May 23, 2007
Derek Nicol says:
At the time I approached Stepstone to write this I couldn't get any information ...At the time I approached Stepstone to write this I couldn't get any information out of Atlassian about Crowd.
I emailed a bunch of times tog et docs and pricing but no one ever got back to me.
Whether or not Crowd can handle this I don't know but I would be happy if this functionality was rolled into the core product.
May 24, 2007
Martin Cleaver says:
I note that Atlassian now do have a com.atlassian.confluence.user.ConfluenceGrou...I note that Atlassian now do have a com.atlassian.confluence.user.ConfluenceGroupJoiningAuthenticator - I could not get it to work though. It would be useful if the instructions on this page stated the syntax for the pathologically minimum case: i.e. add everyone who is authenticated into confluence-groups. Maybe you can tell me how I would write that? Thanks, M.
May 29, 2007
Derek Nicol says:
I'm not sure about that Authenticator you mentioned but it wasn't around when I ...I'm not sure about that Authenticator you mentioned but it wasn't around when I needed this.
If you simply want to map everyone to one group your property file would only need
dynamic-groups.mapping=ou:GROUPContainer,confluence-users;
If you don't want everyone to be put in confluence-users then you can break it up, however your LDAP would have to be seperated into sep ou containers.
dynamic-groups.mapping=ou:people,confluence-users; \
ou:newspapers,confluence-vendors; \
ou:thirdparty,confluence-vendors;
May 22, 2008
Andrew Droffner says:
Class com.atlassian.confluence.user.ConfluenceGroupJoiningAuthenticator The new...Class com.atlassian.confluence.user.ConfluenceGroupJoiningAuthenticator
The new Atlassian class is not the same as this plug-in. It forces all users to join the confluence-users group via hard-coded string. It does not read the properties file to associate your LDAP groups with Confluence.
Confluence source code holders can modify the ConfluenceGroupJoiningAuthenticator.java file. Just write a for loop that lists your LDAP groups as a String[] in the the Hibernate transaction block. There is no non-Java way to change this.
Aug 09, 2007
Justin White says:
I set it up like the directions said, but every time I log into Confluence, the ...I set it up like the directions said, but every time I log into Confluence, the error below appears. Yet, if I just go to the wiki again, it did in fact log me in (but I'm not joined to the groups I should be).
Do you by chance know what could be causing this? Thanks!
java.util.NoSuchElementException at java.util.StringTokenizer.nextToken(StringTokenizer.java:332) at com.stepstonetech.confluence.ldap.ConfluenceGroupJoiningAuthenticator.compareMappingToDistinguishedName(ConfluenceGroupJoiningAuthenticator.java:241) at com.stepstonetech.confluence.ldap.ConfluenceGroupJoiningAuthenticator.getDynamicGroupMembership(ConfluenceGroupJoiningAuthenticator.java:180) at com.stepstonetech.confluence.ldap.ConfluenceGroupJoiningAuthenticator.getMappedGroups(ConfluenceGroupJoiningAuthenticator.java:133) at com.stepstonetech.confluence.ldap.ConfluenceGroupJoiningAuthenticator.login(ConfluenceGroupJoiningAuthenticator.java:96) at com.atlassian.seraph.filter.LoginFilter.doFilter(LoginFilter.java:127) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.atlassian.confluence.util.ClusterHeaderFilter.doFilter(ClusterHeaderFilter.java:35) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.atlassian.johnson.filters.JohnsonFilter.doFilter(JohnsonFilter.java:96) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.springframework.orm.hibernate.support.OpenSessionInViewFilter.doFilterInternal(OpenSessionInViewFilter.java:172) at com.atlassian.spring.filter.FlushingSpringSessionInViewFilter.doFilterInternal(FlushingSpringSessionInViewFilter.java:29) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.atlassian.util.profiling.filters.ProfilingFilter.doFilter(ProfilingFilter.java:122) at com.atlassian.core.filters.ProfilingAndErrorFilter.doFilter(ProfilingAndErrorFilter.java:27) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.atlassian.confluence.util.RequestCacheThreadLocalFilter.doFilter(RequestCacheThreadLocalFilter.java:25) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.atlassian.core.filters.gzip.GzipFilter.doFilter(GzipFilter.java:61) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at com.atlassian.core.filters.AbstractEncodingFilter.doFilter(AbstractEncodingFilter.java:37) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869) at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:667) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:595)
The contents of my ldap-mappings.properties file are:
dynamic-groups.mapping=employeeType:Employee,confluence-users-employees; \
employeeType:EMP,confluence-users-employees; \
employeeType:Contractor,confluence-users-contractors; \
employeeType:Sales Agent,confluence-users-sales-agents; \
employeeType:Ex Employee,confluence-users-ex-employees; \
employeeType:Ex-employee,confluence-users-ex-employees; \
employeeType:Non Company,confluence-users-non-company;
Jun 04, 2007
Chris Foot says:
I too am getting this error! My ldap-mappings.properties file: dynamic-groups....I too am getting this error!
My ldap-mappings.properties file:
dynamic-groups.mapping=ou:students,Student; \
ou:wb,Staff; \
ou:hw,Staff; \
ou:ch,Staff;
Jun 04, 2007
Darryl Duke says:
Hi Justin and Chris, This appears to be choking when digesting the distinguishe...Hi Justin and Chris,
This appears to be choking when digesting the distinguished name for the user in question. Could you help troubleshoot this by sending an example dn returned by your LDAP server? Also, what LDAP are you using.
Thanks,
Darryl
Jun 05, 2007
Chris Foot says:
Hi Darryl, We are using nds. A few of our DNs: dn: cn=20542287,ou=C,ou=Student...Hi Darryl,
We are using nds. A few of our DNs:
dn: cn=20542287,ou=C,ou=Students,o=buckscol
dn: cn=20500997,ou=E,ou=Students,o=buckscol
dn: cn=20306271,ou=U,ou=Students,o=buckscol
dn: cn=pfrost01,ou=MISC,ou=CH,o=buckscol
dn: cn=jnayoa01,ou=SH,ou=CH,o=buckscol
dn: cn=wpococ01,ou=EI,ou=HW,o=buckscol
dn: cn=cfoot01,ou=ICT,ou=HW,o=buckscol
Jun 11, 2007
Chris Foot says:
Any news on this?Any news on this?
Jun 12, 2007
Hawk Newton says:
This is happening, at least for me, because my Active Directory server has dn's ...This is happening, at least for me, because my Active Directory server has dn's with commas in them, like this:
dn: CN=Lastname\, Firstname,CN=domain,CN=Users,DC=comany,DC=com ... So, the code tries to parse on commas and then ='s, and well ... that just doesn't work.
I've got a fix (it's an easy fix) but I can't seem to make maven work .... sigh.
Good luck.
Jun 12, 2007
Martin Cleaver says:
I just attached the version I was using that partly addressed the issue - see th...I just attached the version I was using that partly addressed the issue - see the .java file. In addition to replacing StringTokenizer with Tokenizer it shows a lot more debugging (which are mostly the comments turned into messages). There's one method that doesn't have this finished - I'm not working on it right now as we pushed pause on our LDAP rollout.
You need maven 1.x to compile this plugin, not the latest, 2.x release. This is maven.exe not mvn.exe.
I hope this helps, regards,
Martin Cleaver
Jun 13, 2007
Chris Foot says:
I know the feeling, I can't even get maven to compile the original source! Compl...I know the feeling, I can't even get maven to compile the original source! Complains about resolving symbols!
Jun 14, 2007
Hawk Newton says:
I've attached a patched version of ConfluenceGroupJoiningAutlhenticator.java ......I've attached a patched version of ConfluenceGroupJoiningAutlhenticator.java ... you'll need maven 1.x and you want to do a:
"maven jar" ...
You also need to change http://www.ibiblio.org/maven to http://mirrors.ibiblio.org/pub/mirrors/maven in your project.properties.
Enjoy and good luck.
-- Hawk
Jun 15, 2007
Chris Foot says:
Hi Hawk, I couldn't get this to compile in linux but the windows version of mav...Hi Hawk,
I couldn't get this to compile in linux but the windows version of maven managed it! However, I still can't get it working. When I login I get the following:
javax.servlet.ServletException: Filter execution threw an exception
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:226)
caused by: java.lang.NoSuchMethodError: javax.naming.directory.SearchResult.getNameInNamespace()Ljava/lang/String;
at com.stepstonetech.confluence.ldap.ConfluenceGroupJoiningAuthenticator.compareMappingToDistinguishedName(ConfluenceGroupJoiningAuthenticator.java:230)
as before, it does still login but doesn't add users to thier groups
Jun 15, 2007
Martin Cleaver says:
Hi Chris, What does the debug log trace show? I think I put in enough log...Hi Chris,
What does the debug log trace show? I think I put in enough logging to instrument practically all the pathways.
Jul 25
Kaare Blakstad says:
I did solve this error. Now trying to contact Darryl, so he'll release it as a b...I did solve this error. Now trying to contact Darryl, so he'll release it as a bugfix. Send me an email if you want the updated plugin.
Jul 19, 2007
Chris Hubing says:
Here at Penn State, we use LDAP for authorization, but not authentication. We us...Here at Penn State, we use LDAP for authorization, but not authentication. We use cosign (http://weblogin.org) as our SSO solution for web apps (and kerberos for the real stuff). Right now, we are using some code from Georgetown called remoteAuthn as the authenticator class for confluence (https://svn.middleware.georgetown.edu/confluence/remoteAuthn/). It simply takes the REMOTE_USER header passed in from apache and sets up the session key for confluence.
We want to be able to open the service up to students to view but not modify, by default. All staff members are in an LDAP group called psu.facstaff, but students aren't in any default LDAP group that we can query. This package looked like a good solution to solve that problem, but it doesn't look like it can co-exist with our current authenticator without some code changes (i.e. merging the two together). Anyway out there facing a similar problem or have any suggestions?
Aug 21, 2007
Jessica King says:
I'm getting the following error using Confluence 2.5.6: javax.servlet.ServletEx...I'm getting the following error using Confluence 2.5.6:
javax.servlet.ServletException: Filter execution threw an exception
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:226) caused by: java.lang.NoClassDefFoundError: com/atlassian/user/impl/ldap/repository/LDAPRepository
at com.stepstonetech.confluence.ldap.ConfluenceGroupJoiningAuthenticator.getLDAPRepository(ConfluenceGroupJoiningAuthenticator.java:462)
Anyone else have this problem or know what I'm doing wrong?
Aug 24, 2007
Lalit Dhingra says:
I am experiencing the same problem as Jessica. I am on version 2.5.6 I tried w...I am experiencing the same problem as Jessica.
I am on version 2.5.6
I tried with both version 1.1 and 1.2 of jars, no luck.
I confirm, it works flawlessly with 2.5.4 while using v1.1 of the plugin Jar.
I'll consider downgrading my instance to 2.5.4 or 2.5.5
I have had other issues too with 2.5.6 when it comes to LDAP. The user migration didn't happen. So I migrated my 2.3.1 instance to LDAP and then upgraded to 2.5.6.
Sep 20, 2007
Tim Hayton says:
Just to confirm I also got exactly the same problem when I tried to upgrade from...Just to confirm I also got exactly the same problem when I tried to upgrade from Confluence 2.4.4 to 2.5.7.
Having limited knowledge I haven't been able to find the problem myself, but am more than happy to provide extra log information etc. from my system if this would help anyone find the problem.
Oct 30, 2007
Kyle O'Neill says:
I'm getting a similar error, using Confluence 2.6 LDAP Integrating works fine f...I'm getting a similar error, using Confluence 2.6
LDAP Integrating works fine for the user authentication, but as soon as I login the server dumps the following:
2007-10-29 16:28:01,364 ERROR [http-80-Processor3] [[Standalone].[localhost].[/].[action]] invoke Servlet.service() for servlet action threw exception
java.lang.NoClassDefFoundError: com/atlassian/user/impl/ldap/repository/LDAPRepository
This is the same using the 1.1 or 1.2 version of the plug-in.
Any ideas?? Manually adding 1000+ users is not going to be much fun.
EDIT::
Doing a bit of research on Java errors, and digging through the various JAR files in the program, i determined that the "LDAPRepository.class" was removed or renamed in the 2.6 version of confluence, I tried manually adding int he class file from an older version of confluence and made some progress, but still have been unable to make it work. I'm just going to use an earlier version of Confluence that does work with the plug-in, until/if it is rewritten for 2.6.
::EDIT
Aug 23, 2007
Joe Fernandez says:
Couple of things I learned while getting the LDAP Dynamic Groups Plugin to work ...Couple of things I learned while getting the LDAP Dynamic Groups Plugin to work for me:
static-groups.mapping=AAA_Staff,confluence-users; \ CCC_Staff,confluence-users;The format below SHOULD WORK, assuming "AAA_Staff" and "CCC_Staff" are actually defined "group"s on your LDAP server:
static-groups.mapping=AAA_Staff,confluence-users;CCC_Staff,confluence-users; ^^^ Note: NO spaces here# Allow EVERYONE in the corporate LDAP system to view public content dynamic-groups.mapping=objectClass:user,confluence-users;Aug 24, 2007
Lalit Dhingra says:
Which version did you make it to work with ? 2.5.5 ? Did you try 2.5.6?Which version did you make it to work with ? 2.5.5 ?
Did you try 2.5.6?
Sep 18, 2007
Tim Hayton says:
Many thanks for the useful in