When calling com.atlassian.crowd.directory.RFC4519Directory#findDirectMembersOfGroup with an unresolvable DN an empty list will be returned. However when this is called on a MicrosoftActiveDirectory instance and primary group support is enabled, this will throw javax.naming.NameNotFoundException. While the superclass' method checks for the group being missing, the subclass assumes it exists.