Purpose

Your application connects to Active Directory (AD) for user management. Accessing AD may be very slow, or you could be running into PartialResultsExceptions and UnknownHostExceptions as described in these articles:

• Some users are unable to login due to Active Directory 'follow referrals' configuration
• User lookups fail with 'PartialResultExceptions' due to Active Directory 'Follow Referrals' configuration

Solution

• Turn off 'Follow Referrals' in the 'Advanced Settings' section of your User Directory configuration
• Point Confluence to your Global Catalog. The catalog is read-only, but it contains all users, groups, and memberships from across your forest.

  • The global catalog can be accessed on port 3268, but be sure to talk to your AD admin for global catalog connection details. Simply point to the domain controller that houses the global catalog.