• 3
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion.

      Pace USER-105 we should support dynamic groups where a group has an attribute which is an LDAP filter.

            [ID-8991] Support real dynamic groups

            R K added a comment -

            Despite from what is says in the documentation this is not yet supported.
            This is needed so we can use Confluence with our LDAP that uses dynamic groups on a per-user basis.
            Please let me know in case you want a copy of our LDAP schema for testing purposes

            R K added a comment - Despite from what is says in the documentation this is not yet supported. This is needed so we can use Confluence with our LDAP that uses dynamic groups on a per-user basis. Please let me know in case you want a copy of our LDAP schema for testing purposes

            On this page: http://confluence.atlassian.com/display/DEV/How+to+map+LDAP+Users+and+Groups+to+Confluence+via+Atlassian+User

            It seems to indicate that dynamic groups are supported, however it is not document exactly how its supposed to work. The example given relies on the fact that you are using Active Directory. AD is the only directory server that uses the memberOf attribute at the user level, which is really not how dynamic groups work in other directories like Sun's directory.

            In those cases, dynamic groups are defined with a memberURL like this:

            dn: cn=All EMEA Users - Dynamic, ou=Groups, ou=Partners, ou=External, o=SDS
            memberurl: ldap:///ou=Partners,ou=External,o=SDS??sub?(&(objectclass=organiza
            tionalPartner)(|(countrycode=GB)(countrycode=DE)(countrycode=IT)(countrycode=FR)))
            objectclass: top
            objectclass: groupofuniquenames
            objectclass: groupofurls
            cn: All EMEA Users - Dynamic

            jeff peichel added a comment - On this page: http://confluence.atlassian.com/display/DEV/How+to+map+LDAP+Users+and+Groups+to+Confluence+via+Atlassian+User It seems to indicate that dynamic groups are supported, however it is not document exactly how its supposed to work. The example given relies on the fact that you are using Active Directory. AD is the only directory server that uses the memberOf attribute at the user level, which is really not how dynamic groups work in other directories like Sun's directory. In those cases, dynamic groups are defined with a memberURL like this: dn: cn=All EMEA Users - Dynamic, ou=Groups, ou=Partners, ou=External, o=SDS memberurl: ldap:///ou=Partners,ou=External,o=SDS??sub?(&(objectclass=organiza tionalPartner)(|(countrycode=GB)(countrycode=DE)(countrycode=IT)(countrycode=FR))) objectclass: top objectclass: groupofuniquenames objectclass: groupofurls cn: All EMEA Users - Dynamic

              Unassigned Unassigned
              tom@atlassian.com Tom Davies
              Votes:
              32 Vote for this issue
              Watchers:
              16 Start watching this issue

                Created:
                Updated: