If an LDAP group contains a member which doesn't exist, Confluence gets the name from the group, gets a user (which returns null) and then does things with the null pointer, rather than reporting that the group contains a user which doesn't exist (it does log it, but not in a clear way)