問題

Users that are sourced from an external LDAP directory lose local group memberships on synchronization.

atlassian-confluence.log に次のメッセージが表示される。 

2015-03-31 01:39:24,633 INFO [ajp-bio-127.0.0.1-8009-exec-2] [atlassian.crowd.directory.DelegatedAuthenticationDirectory] updateGroups Deleted user "myuser"'s imported membership of remote group "confluence-users" to directory "Delegated Authentication Directory".

診断

データベース

• Check the length of the active and local columns in the cwd_group table. The column length for both should be one (1). 

原因

By default, the length of the active and local columns in the cwd_group table is one (1) character. If that column is increased to two characters, which can happen when changing the data type to one that supports Unicode (like nchar), that creates a situation where Confluence cannot determine the properties of groups; specifically the status and whether they are local. As a result, Confluence will remove the local group memberships from users, even though nothing has actually changed in that regard. 

ソリューション

• Modify the affected table (cwd_group) by changing the length of the active and/or local columns back to one character:

  ALTER TABLE table_name
  ALTER COLUMN active nchar(1);

  データベースを変更する前には必ずデータをバックアップするようにします。

• Restart Confluence or flush the Confluence caches
• Manually restore the local group memberships that were removed