LDAP sync fails due to incorrect directory type

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Summary

Problem

LDAP synchronisation fails and the users are not added into any groups. The following appears in the atlassian-confluence.log:

1 2 3 4 5 6 7 8 2013-01-03 12:50:44,309 ERROR [scheduler_Worker-4] [directory.ldap.mapper.GroupContextMapper] mapFromContext Failed to map attribute <memberDNs> from context with DN <cn=conf,ou=groups,dc=atl,dc=atlassian,dc=com> org.springframework.ldap.BadLdapGrammarException: Failed to parse DN; nested exception is org.springframework.ldap.core.ParseException: Encountered "<EOF>" at line 1, column 5. Was expecting: <SPACED_EQUALS> ... at org.springframework.ldap.core.DistinguishedName.parse(DistinguishedName.java:187) at org.springframework.ldap.core.DistinguishedName.<init>(DistinguishedName.java:140) ...

Diagnosis

Ensure that you have POSIX style LDAP system

Cause

The "Directory Type" chosen in the directory configuration is wrong

Solution

Resolution

Navigate to Confluence Admin > User Directories, edit the configuration directory, and change the "Directory Type" to OpenLDAP (Read-Only Posix Schema)

Updated on April 8, 2025

Still need help?

The Atlassian Community is here for you.