We have the following setup:

• User Directories
  1. Sun Directory Server (Read Only, with Local Groups)
  2. internal
• all users are manged in LDAP
• user is member of static and dynamic groups in LDAP
• LDAP synchronization works correctly

When a user logs in, it is removed from all dynamic LDAP groups (see screenshots). After synchronizing all group memberships are restored.

Confluence is not usable anymore as permissions to access a space are given to dynamic LDAP groups.

This bug prevents us from updating to Confluence 5.3.