Confluence Datacenter: LDAP Sync - No Groupmembership after Update

[Blutspende SRK Schweiz]

Good Day

I am experiencing an issue with Confluence Datacenter after upgrading from LTS Version 8.5.14 --> 9.2.4. 

The issue is, that memberships of groups are not synchronized properly with our AD anymore. 

Right after updating our testinstance but before importing the certificate Users, Groups and the membership of those users to the group is working fine. As soon as I import the certificate and the first Sync happens, the Users loose their membership. Users are still there, groups are still there.

We do not get any errors, according to the security log synchronisation is working. The only entry we suspect to be related to the problem would be: 
"[directory.synchronisation.cache.GroupUserCache] calcUserGroupToMembersMap Calculated overall group membership using user's memberOf: totalUsers: 79, totalReferencedGroups: 0"

We do work with nested grups but the very same configuration is running in production (8.5.14) and we have no issues at all.

Were there any changes on how confluence handles nested groups? I did not find anything in the notes. 

Anyone else experiencing a similair issue? 

Thanks
Matthias

[Tinker Fadoua]

@Blutspende SRK Schweiz  are you still experiencing the problem?

From my experience when I upgrade to a major version I will go:

8.5.14 -> 9.0.0 -> 9.2.4

Usually there could be configuration changes and some other critical changes from 8.x.x to 9.x.x

Best of luck!

Fadoua