Nazaretyan's blog blog about everthing ….

how to configure Confluence 3.x to use user/groups from Windows 2008R2 Domain controller

just get installed Confluence 3.x from atlassian.com, and dicide to use active directory for autorization.

benefits are that for new employers you dont need to open secondary accesses, give them more then 1 password for accessing network recourses.

spend almost all day on configuration.

1. you need to install confluance on a machine with min 2 GB ram and 2 cores. as its runs on java and using huge amount of memory/cpu. (it didn't start on my VmWare, but don't have a time to check why).

2. get default ubuntu server installation x64 and start to configure, for it you can use manuals from atlassian they have quite good step-by-step configuration guide no need to run brain to make it running.

problems starts when i found the button "check LDAP connectivity" inside of admin tool, if something can check the button means its can grep the info from ldap as well :).

I tryed to configure with documentation online but seems that sales guys from atlassian want to sell other product "crowd" which is supporing all the stuff with active directory.

there is a few steps what you need to do to make it running.

1. you need to change atlassian-user.xml file which is located in confluence/WEB-INF/classes/

better is make a backup from file and change it to this one http://confluence.atlassian.com/download/attachments/164870/atlassian-user.xml?version=3&modificationDate=1214540227491

after you need to edit file and fill in uniq info for your domain. good help doc's are here --> http://confluence.atlassian.com/display/DEV/Mapping+Active+Directory+to+Confluence

2.  you need to remember that your "system admin account" must stay uniq. you need to have different account on your AD,

you dont need to add confluence-administration, and confluence-users groups to your AD, they need to stay on wiki level, just when wiki will read all user info from domain you need to add everybody to this group's via wiki admin to give them permission to read/write and do all other stuff.

if youre using not AD but openLdap atlassian.com have good plugin and lot of docs and how to's how to do it.

starting from tommorow i'm going to work on data migration from another wiki system (dokuwiki) in my case.

will keep in touch regarding problems.

and remeber its java with stuped caching system . if something is not working .. just restart i spend like 2 hours with playing on XML file without success, one restart resolved all my problems

kinds.

Moushegh