How do I search from Active Directory's global catalog?
プラットフォームについて: Cloud および Data Center - この記事はクラウドと Data Center 両方のプラットフォームに等しく適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
目的
Your application connects to Active Directory (AD) for user management. Accessing AD may be very slow, or you could be running into PartialResultsExceptions and UnknownHostExceptions as described in these articles:
- Active Directory の "照会に従う" 設定により一部のユーザーがログインできない
- User lookups fail with 'PartialResultExceptions' due to Active Directory 'Follow Referrals' configuration
ソリューション
- Turn off 'Follow Referrals' in the 'Advanced Settings' section of your User Directory configuration
- Point Confluence to your Global Catalog. The catalog is read-only, but it contains all users, groups, and memberships from across your forest.
The global catalog can be accessed on port 3268, but be sure to talk to your AD admin for global catalog connection details. Simply point to the domain controller that houses the global catalog.