Local Group Memberships for LDAP Users are Lost After Confluence 3.5.x Upgrade
Symptoms
- LDAP was integrated through Atlassian User in
atlassian-user.xml
prior 3.5.x upgrade - Local group memberships for LDAP users are lost after upgrade to Confluence 3.5.x
- The following appears in the
atlassian-confluence.log
:
Copying 0 local memberships of LDAP users
Cause
atlassian-user.xml
was not copied before Confluence 3.5.x was started for the upgrade.
See also: CONF-22090
Workaround
If you've installed Confluence version 3.5.1 or later, skip to step #4 below. Otherwise, if you're running Confluence 3.5:
- Download the attached migratelocalgroups.jsp
- Copy it to the
<confluence install>/confluence/admin
folder - Start up Confluence and log in as a local user with administrator privileges
- Visit http://<confluence url>/admin/migratelocalgroups.jsp
- Follow the instructions on the page
If you are not sure what your local admin user is, please execute the following database query:
select * from CWD_USER where id in (select child_user_id from CWD_MEMBERSHIP where parent_id = (select id from CWD_GROUP where group_name = 'confluence-administrators' and directory_id = (select id from cwd_directory where directory_type = 'INTERNAL')));
If you used LDAP authentication with local groups, and your users were not migrated either, follow the instructions here: Upgrade to Confluence 3.5 with OSUser LDAP authentication fails