-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Low
-
None
-
Affects Version/s: 9.2.5
-
Component/s: Other
-
None
-
1
-
Severity 3 - Minor
Issue Summary
ExtUserDirectoryConnectionStateIpdJob (running on the ipd-worker thread) performs a broad LDAP search rather than a simple connection "ping" or bind.
Steps to Reproduce
- Install Confluence version 9.2.5
- Setup and LDAP connection
- Ensure IPD is enabled
- Now enable DEBUG logging for below class to see the IPD logs in the atlassian-confluence-security.log file
com.atlassian.crowd.directory.ldap.monitoring
Expected Results
- The health check triggers should not run searches and it can only be a test connection
Actual Results
- We can see seraching being executed in LDAP from the IPD threads for all users
2026-04-17 14:19:15,083 DEBUG [ipd-worker:thread-1] [directory.ldap.monitoring.TimedSupplier] get Execute operation search using searchexecutor baseDN: o=company, filter: (objectclass=inetorgperson) 2026-04-17 14:19:15,087 TRACE [ipd-worker:thread-1] [directory.ldap.monitoring.ExecutionInfoNameClassPairCallbackHandler] handleNameClassPair Search result cn=pojala,ou=users, with attributes {entryuuid=entryUUID: fadae2e0-3453-4509-a681-875f430bbc65, mail=mail: Pertti.Ojala@kpmg.fi, displayname=displayName: Ojala, Pertti, sn=sn: Ojala, cn=cn: pojala} 2026-04-17 14:19:15,088 DEBUG [ipd-worker:thread-1] [directory.ldap.monitoring.ExecutionInfoNameClassPairCallbackHandler] logResultCount The operation returned 1 results 2026-04-17 14:19:15,088 DEBUG [ipd-worker:thread-1] [directory.ldap.monitoring.TimedSupplier] get Timed call for search using searchexecutor baseDN: o=company, filter: (objectclass=inetorgperson) took 4ms 2026-04-17 14:20:15,155 DEBUG [ipd-worker:thread-1] [directory.ldap.monitoring.TimedSupplier] get Execute operation search using searchexecutor baseDN: o=company, filter: (objectclass=inetorgperson) 2026-04-17 14:20:15,160 TRACE [ipd-worker:thread-1] [directory.ldap.monitoring.ExecutionInfoNameClassPairCallbackHandler] handleNameClassPair Search result cn=pojala,ou=users, with attributes {entryuuid=entryUUID: fadae2e0-3453-4509-a681-875f430bbc65, mail=mail: Pertti.Ojala@kpmg.fi, displayname=displayName: Ojala, Pertti, sn=sn: Ojala, cn=cn: pojala}
Workaround
Disable IPD