How to configure the user object filter to search for users that belong to a group that starts with #

Still need help?

The Atlassian Community is here for you.

Ask the community

Platform Notice: Server and Data Center Only - This article only applies to Atlassian products on the server and data center platforms.

Purpose

Restrict the user object filter inside Fisheye/Crucible to look for users that belong to groups that start with a hash/ pound (#) inside Microsoft Active Directory (e.g. #fisheye-users, #crucible-users and etc):

Searching for the group attributes inside Microsoft Active Directory we can see the hash/ pound is escaped with a backslash (\) inside the Distinguished Name attribute.

Solution

It's necessary to escape the hash/ pound twice in the User Object Filter field under the User Schema Settings inside the LDAP User Directory configuration in Fisheye/Crucible. Here's an example:

  • If I want to restrict the search and look for users that belong to the #fecru-users group only (among other attributes) the following search filter needs to be used:

    (&(sAMAccountName=*)(objectCategory=Person)(|(memberOf=CN=\\#fecru-users,OU=Groups,DC=CSSATLASSIAN,DC=internal)))
  • If I try escaping the hash/ pound once (i.e. \#fecru-users) OR not escape it all (i.e. #fecru-users) the search does NOT work. Fisheye/Crucible will not find and sync the users that belong to the #fecru-users group.


Last modified on Feb 1, 2021

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.