Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-22841

User directory sync fails on group name with control character (^Z)

XMLWordPrintable

      Steps to reproduce:
      1. Create base case of Confluence (I used Confluence 3.5.1, but I'm confident that this affects all current versions of 3.5.x+)
      2. Create a record in LDAP-- LDIF attached to ticket (asdf.ldif)
      3. User directory > Add this ldap as a read-only with local groups.

      Sync fails with this error:

      2011-07-05 11:58:00,635 INFO [QuartzScheduler_Worker-8] [atlassian.crowd.directory.DbCachingRemoteDirectoryCache] deleteCachedUsersNotIn scanned for deleted users in [ 1ms ]
2011-07-05 11:58:00,645 INFO [QuartzScheduler_Worker-8] [directory.ldap.util.DirectoryAttributeRetriever] getValueFromAttributes Unsafe or Blank attribute value for attribute <cn>: '^Zasdf'.
2011-07-05 11:58:00,646 FATAL [QuartzScheduler_Worker-8] [ldap.mapper.entity.LDAPGroupAttributesMapper] getGroupNameFromAttributes The following record does not have a groupname: {objectclass=objectClass: groupOfUniqueNames, top, uniquemember=uniquemember: cn=foobar,ou=people,o=sevenSeas, cn=cn: ^Zasdf}
2011-07-05 11:58:00,646 INFO [QuartzScheduler_Worker-8] [atlassian.crowd.directory.DbCachingRemoteDirectory] synchroniseCache synchronisation complete in [ 1039ms ]
2011-07-05 11:58:00,671 ERROR [QuartzScheduler_Worker-8] [atlassian.crowd.directory.DbCachingDirectoryPoller] pollChanges Error occurred while refreshing the cache for directory [ 327682 ].
com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.UncategorizedLdapException: Unable to find the groupname of the principal.
        at com.atlassian.crowd.directory.SpringLDAPConnector.searchEntitiesWithRequestControls(SpringLDAPConnector.java:405)
        at com.atlassian.crowd.directory.SpringLDAPConnector.searchEntities(SpringLDAPConnector.java:370)
        at com.atlassian.crowd.directory.SpringLDAPConnector.searchGroupObjectsOfSpecifiedGroupType(SpringLDAPConnector.java:1094)
        at com.atlassian.crowd.directory.SpringLDAPConnector.searchGroupObjects(SpringLDAPConnector.java:1144)

      The origin of this case traces back to korean characters in the cn of an Active Directory group reference.

        1. asdf.ldif
          0.2 kB
          Tim Wong

          Form Name

            [CONFSERVER-22841] User directory sync fails on group name with control character (^Z)

            Matt Ryall added a comment -

            We're not planning to fix bugs around control characters in user names. If you have a problem with valid usernames (i.e. someone's name) breaking Confluence, please raise a separate issue.

            See CONF-22660 for a proposed improvement around whitespace handling with user and group names.

            Matt Ryall added a comment - We're not planning to fix bugs around control characters in user names. If you have a problem with valid usernames (i.e. someone's name) breaking Confluence, please raise a separate issue. See CONF-22660 for a proposed improvement around whitespace handling with user and group names.

              matt@atlassian.com Matt Ryall
              twong Tim Wong (Inactive)
              Affected customers:
              1 This affects my team
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: