LDAP Groups Return Different Values Than Expected
Platform Notice: Cloud and Data Center - This article applies equally to both cloud and data center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Symptoms
LDAP group names display incorrect values in the Group Browser.
Cause
This function returns a list of full names or first names:
1
userAccessor.getMemberNames(group);
Confluence will go look under your group node in ldap. Usually what is under here is a list of members which are identified by CN=SomeUserName }} and Confluence will strip the {{'CN=' and return you the rest. Confluence returns a list of usernames that belong to a group.
This unexpected list can result if usernames are associated to some other attribute rather than the CN attribute, such as full name or first name or some other field assigned to CN instead.
Resolution
There is currently no solution as this is dependent on your LDAP configuration. If the members under a group are identified by something other than CN=username, then the username will not be returned.
Was this helpful?