• Icon: Suggestion Suggestion
    • Resolution: Answered
    • None
    • None
    • Confluence Standalone
      JDK 1.6.22
      64Bit Windows 2008 R2
    • We collect Confluence feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion.

      The old Confluence LDAP connector supports multi-valued fields.
      The new LDAP connector does not and Confluence shoud regain that feature, as it helped really much in an organization where multiple userdirectores get combined into one big directory.

      Here is an example of the LDAP fields where a user would have three different logins which all refer to the same identity:
      CN=E01010101
      Loginnames=user@domain.com
      Loginnames=DOMAIN_A.USERNAME
      Loginnames=DOMAIN_B.USERNAME

      Groupmembership is searched via CN. Confluence searched the Loginnames field for checking the credentials and getting the comlpete DN for groupsearches (for instance: cn=E01010101,ou=users,dc=domain,dc=com).
      Confluence 3.2.1 works very well with this setup, looking up the correct user information by CN.
      Confluence 3.5.13 only finds user "Domain_B.USERNAME".

            [CONFSERVER-23741] Multi Valued RDN for LDAP

            BillA added a comment -

            Thank you for raising this issue. While we can see how this feature would be useful, we have no plans to implement it in the foreseeable future. In order to set expectations, we're closing this request now.

            Thanks again for your idea.

            Bill Arconati,
            Confluence Group Product Manager

            BillA added a comment - Thank you for raising this issue. While we can see how this feature would be useful, we have no plans to implement it in the foreseeable future. In order to set expectations, we're closing this request now. Thanks again for your idea. Bill Arconati, Confluence Group Product Manager

            Yes, we'll have to wait.

            Manse Wolken added a comment - Yes, we'll have to wait.

            Dennis added a comment - - edited

            seems to be still unresolved in the actual Confluence 5.x Release

            Dennis added a comment - - edited seems to be still unresolved in the actual Confluence 5.x Release

            Does anyone know if this is still unresolved?

            Jesse Wagner added a comment - Does anyone know if this is still unresolved?

            Dennis added a comment - - edited

            what about that ? We still have the problem, Multivalue Entries from external Userdatabases in Confluence are still not supportet, applications like the SAP NetWeaver Portal are able to handle Multi Value Fields.
            It's an important feature for huge companys where Persons with equal names are common.

            Dennis added a comment - - edited what about that ? We still have the problem, Multivalue Entries from external Userdatabases in Confluence are still not supportet, applications like the SAP NetWeaver Portal are able to handle Multi Value Fields. It's an important feature for huge companys where Persons with equal names are common.

            Dennis added a comment - - edited

            of course....(as I mentioned we have more then 20.000 Users , working worldwide, connected in one LDAP)
            for a better understanding here is a short cut of a LDAP entry regarding my own data ( I have deleted sensitive infos, btw. set them to xxx.
            At the moment we use in confluence user schema settings "Name Attribute" "cn" as well as for RDN. But this is not working due to amount of users with equal entrys. We must not change or set different usernames for "cn" this relates to our system architecture, therefore we have the multivalue field UID - this one is unique filled BUT with multiple Entries - every system is able to deal with this multivalue field but confluence. I my case for example, I should be able to log in either with Dennis Guse or with gd3867x.

            uid: Dennis Guse
            uid: gd3867x
            uid: dennis.guse@xx.xxx

            Dennis added a comment - - edited of course....(as I mentioned we have more then 20.000 Users , working worldwide, connected in one LDAP) for a better understanding here is a short cut of a LDAP entry regarding my own data ( I have deleted sensitive infos, btw. set them to xxx. At the moment we use in confluence user schema settings "Name Attribute" "cn" as well as for RDN. But this is not working due to amount of users with equal entrys. We must not change or set different usernames for "cn" this relates to our system architecture, therefore we have the multivalue field UID - this one is unique filled BUT with multiple Entries - every system is able to deal with this multivalue field but confluence. I my case for example, I should be able to log in either with Dennis Guse or with gd3867x. uid: Dennis Guse uid: gd3867x uid: dennis.guse@xx.xxx

            But that still means, that you have to use different usernames for each user.
            The point is, that one user can have multiple usernames, but still these usernames point only to one specific user.
            It is not possible to have different users with the same name.
            For instance:
            Users John Doe, Joe Doe and Jonathan Doe are three different users. Typical loginname for users are 2 letters from firstname, all letters from lastname.
            Would result in:
            jodoe
            jndoe
            jedoe

            Multi-valued uids could be:
            jodoe.lotus, jodoe.sap, jodoe
            jndoe.lotus, jndoe.sap, jndoe
            jedoe.lotus,jedoe.sap, jedoe

            Manse Wolken added a comment - But that still means, that you have to use different usernames for each user. The point is, that one user can have multiple usernames, but still these usernames point only to one specific user. It is not possible to have different users with the same name. For instance: Users John Doe, Joe Doe and Jonathan Doe are three different users. Typical loginname for users are 2 letters from firstname, all letters from lastname. Would result in: jodoe jndoe jedoe Multi-valued uids could be: jodoe.lotus, jodoe.sap, jodoe jndoe.lotus, jndoe.sap, jndoe jedoe.lotus,jedoe.sap, jedoe

            Dennis added a comment -

            The thing is, in a company with multiple systems (SAP Portal, Lotus Notes, Microsoft Sharepoint, JIRA and Confluence) and one LDAP with more than 20K user entrys we experience the issue, that two or three useres (at the moment approx. 30-35 Users) with the same name occure. We have up to 5 comma seperated entrys in the multi user field UID and it would be great if confluence would be able to take all of them, so that users can login with each of them.

            Dennis added a comment - The thing is, in a company with multiple systems (SAP Portal, Lotus Notes, Microsoft Sharepoint, JIRA and Confluence) and one LDAP with more than 20K user entrys we experience the issue, that two or three useres (at the moment approx. 30-35 Users) with the same name occure. We have up to 5 comma seperated entrys in the multi user field UID and it would be great if confluence would be able to take all of them, so that users can login with each of them.

              Unassigned Unassigned
              ecbc22522731 Manse Wolken
              Votes:
              2 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: