LDAP synchronization never completes - Too many users added to cache
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
問題
LDAP appears to synchronize without end. In Administration > User Directories, it can be seen that more users are being added to the LDAP cache than anticipated.
For example, an instance that anticipates 400 users:
Synchronising for 1655s…
Last synchronised at 2/23/16 10:53 AM (took 2s).
Adding 34,556 users to the cache.
原因
This will happen when only the base DN information is provided and filter settings are too broad or the default settings have not been modified.
ソリューション
Ensure that user and group DN settings are configured so filtering narrows down how many users are synced/added to cache.
For reference, use these resources that discuss creating LDAP filters:
Restricting LDAP Scope for User and Group Search