Connecting to crowd from confluence

[david martin]

I am currently able to bring up the confluence page but I can't log in. I am recieving the following errors in the log.

2014-04-03 06:24:22,261 ERROR [http-8090-8] [crowd.manager.application.ApplicationServiceGeneric] authenticateUser Directory 'Crowd Server' is not functional during authentication of 'david.martin'. Skipped.
2014-04-03 06:24:22,264 WARN [http-8090-8] [atlassian.confluence.user.Confluence Authenticator] authenticate OperationFailedException caught while authenticating user <david.martin>.
com.atlassian.crowd.exception.runtime.OperationFailedException
at com.atlassian.crowd.embedded.core.CrowdServiceImpl.convertOperationFa iledException(CrowdServiceImpl.java:915)
at com.atlassian.crowd.embedded.core.CrowdServiceImpl.authenticate(Crowd ServiceImpl.java:80)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflecti on(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJo inpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed( ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.in voke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed( ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynami cAopProxy.java:204)
at com.sun.proxy.$Proxy40.authenticate(Unknown Source)
at com.atlassian.crowd.embedded.atlassianuser.EmbeddedCrowdAuthenticator .authenticate(EmbeddedCrowdAuthenticator.java:31)
at bucket.user.DefaultUserAccessor.authenticate(DefaultUserAccessor.java :604)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflecti on(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJo inpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed( ReflectiveMethodInvocation.java:149)
at com.atlassian.spring.interceptors.SpringProfilingInterceptor.invoke(S pringProfilingInterceptor.java:16)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed( ReflectiveMethodInvocation.java:171)
at org.springframework.transaction.interceptor.TransactionInterceptor.in voke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed( ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynami cAopProxy.java:204)
at com.sun.proxy.$Proxy51.authenticate(Unknown Source)
at com.atlassian.confluence.user.ConfluenceAuthenticator.authenticate(Co nfluenceAuthenticator.java:70)
at com.atlassian.seraph.auth.DefaultAuthenticator.login(DefaultAuthentic ator.java:94)
at com.atlassian.confluence.user.ConfluenceAuthenticator.login(Confluenc eAuthenticator.java:53)
at com.atlassian.seraph.filter.PasswordBasedLoginFilter.runAuthenticatio n(PasswordBasedLoginFilter.java:127)
at com.atlassian.seraph.filter.PasswordBasedLoginFilter.login(PasswordBa sedLoginFilter.java:72)
at com.atlassian.seraph.filter.BaseLoginFilter.doFilter(BaseLoginFilter. java:130)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite ratingFilterChain.java:46)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter (DelegatingPluginFilter.java:66)
at com.atlassian.oauth.serviceprovider.internal.servlet.OAuthFilter.doFi lter(OAuthFilter.java:61)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D elegatingPluginFilter.java:74)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite ratingFilterChain.java:42)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter (DelegatingPluginFilter.java:66)
at com.atlassian.prettyurls.filter.PrettyUrlsCombinedMatchDispatcherFilt er.doFilter(PrettyUrlsCombinedMatchDispatcherFilter.java:61)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D elegatingPluginFilter.java:74)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite ratingFilterChain.java:42)
at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte r.doFilter(ServletFilterModuleContainerFilter.java:77)
at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte r.doFilter(ServletFilterModuleContainerFilter.java:63)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.util.ClusterHeaderFilter.doFilter(ClusterHea derFilter.java:42)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.johnson.filters.AbstractJohnsonFilter.doFilter(Abstract JohnsonFilter.java:72)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at org.springframework.orm.hibernate.support.OpenSessionInViewFilter.doF ilterInternal(OpenSessionInViewFilter.java:170)
at com.atlassian.spring.filter.FlushingSpringSessionInViewFilter.doFilte rInternal(FlushingSpringSessionInViewFilter.java:29)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerR equestFilter.java:76)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.util.ConfluenceErrorFilter.doFilter(Confluen ceErrorFilter.java:27)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.util.profiling.filters.ProfilingFilter.doFilter(Profili ngFilter.java:99)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.core.datetime.RequestTimeThreadLocalFilter.d oFilter(RequestTimeThreadLocalFilter.java:41)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.gzipfilter.GzipFilter.doFilterInternal(GzipFilter.java: 80)
at com.atlassian.gzipfilter.GzipFilter.doFilter(GzipFilter.java:51)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.core.filters.cache.AbstractCachingFilter.doFilter(Abstr actCachingFilter.java:33)
at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi lter.java:31)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite ratingFilterChain.java:46)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter (DelegatingPluginFilter.java:66)
at com.atlassian.confluence.web.filter.ConfluenceTimingFilter.doFilter(C onfluenceTimingFilter.java:75)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D elegatingPluginFilter.java:74)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite ratingFilterChain.java:42)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter (DelegatingPluginFilter.java:66)
at com.atlassian.prettyurls.filter.PrettyUrlsCombinedMatchDispatcherFilt er.doFilter(PrettyUrlsCombinedMatchDispatcherFilter.java:61)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D elegatingPluginFilter.java:74)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite ratingFilterChain.java:42)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter (DelegatingPluginFilter.java:66)
at com.atlassian.confluence.extra.webdav.servlet.filter.ReverseProxyFilt er.doFilter(ReverseProxyFilter.java:427)
at com.atlassian.confluence.extra.webdav.servlet.filter.AbstractHttpFilt er.doFilter(AbstractHttpFilter.java:34)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D elegatingPluginFilter.java:74)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite ratingFilterChain.java:42)
at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte r.doFilter(ServletFilterModuleContainerFilter.java:77)
at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte r.doFilter(ServletFilterModuleContainerFilter.java:63)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.web.filter.validateparam.RequestParamValidat ionFilter.doFilter(RequestParamValidationFilter.java:58)
at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi lter.java:31)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.web.filter.TranslationModeFilter.doFilter(Tr anslationModeFilter.java:43)
at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi lter.java:31)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.plugin.servlet.filter.ActionContextCleanUp.d oFilter(ActionContextCleanUp.java:71)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.web.filter.LanguageExtractionFilter.doFilter (LanguageExtractionFilter.java:53)
at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi lter.java:31)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.util.RequestCacheThreadLocalFilter.doFilter( RequestCacheThreadLocalFilter.java:31)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.web.filter.DebugFilter.doFilter(DebugFilter. java:50)
at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi lter.java:31)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.core.filters.encoding.AbstractEncodingFilter.doFilter(A bstractEncodingFilter.java:41)
at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi lter.java:31)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.core.filters.HeaderSanitisingFilter.doFilter(HeaderSani tisingFilter.java:44)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at com.atlassian.confluence.servlet.FourOhFourErrorLoggingFilter.doFilte r(FourOhFourErrorLoggingFilter.java:65)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl icationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF ilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV alve.java:233)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextV alve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j ava:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j ava:102)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal ve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.jav a:293)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java :859)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce ss(Http11Protocol.java:602)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:48 9)
at java.lang.Thread.run(Unknown Source)
Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: HTTP St atus 403 - Client with address "10.255.152.54" is forbidden from making requests to the application, confluence.type Status reportmessage Client with address "1 0.255.152.54" is forbidden from making requests to the application, confluence.d escription Access to the specified resource has been forbidden.Apache Tomcat/7.0 .40
at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecu tor.throwError(RestExecutor.java:490)
at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecu tor.andReceive(RestExecutor.java:344)
at com.atlassian.crowd.integration.rest.service.RestCrowdClient.authenti cateUser(RestCrowdClient.java:121)
at com.atlassian.crowd.directory.RemoteCrowdDirectory.authenticate(Remot eCrowdDirectory.java:193)
at com.atlassian.crowd.directory.DbCachingRemoteDirectory.authenticateAn dUpdateInternalUser(DbCachingRemoteDirectory.java:253)
at com.atlassian.crowd.directory.DbCachingRemoteDirectory.authenticate(D bCachingRemoteDirectory.java:158)
at com.atlassian.crowd.manager.directory.DirectoryManagerGeneric.authent icateUser(DirectoryManagerGeneric.java:292)
at com.atlassian.crowd.manager.application.ApplicationServiceGeneric.aut henticateUser(ApplicationServiceGeneric.java:141)
at com.atlassian.crowd.embedded.core.CrowdServiceImpl.authenticate(Crowd ServiceImpl.java:68)
... 135 more

[Peter Van de Voorde]

Hi David,

this is probably the problem :

Client with address "10.255.152.54" is forbidden from making requests to the application, confluence.type Status reportmessage Client with address "1 0.255.152.54

You'll need to add that ip-address into the application configuration of confluence in crowd.

Take a look at the connection details here : https://confluence.atlassian.com/display/CROWD/Adding+an+Application

Or it might be the same problem as in this question:

https://answers.atlassian.com/questions/168573/cannot-authenticate-to-crowd-as-administrator-in-confluence

Best regards,

Peter

[Satish_Kumar]

This is an old post, but I got this exact same issue & I managed to resolve it. Thought of sharing the solution since it is not found in other posts/wiki pages.

The issue here is the application trying to connect to crowd (Confluence listed in this post, for me it is jira) is configured to startup with a proxy in java settings (setenv.sh in /opt/atlassian/jira/bin usually). This is needed so that application can reach internet for plugin updates on marketplace & other purposes.

So the same route is taken for Crowd authentication as well & crowd is rejecting the request as it only knows the applications listed on it. I tried to use the trusted proxies feature of crowd, but that didn't help.

What finally solved the issue after a bit of look around is adding a switch to the java settings of setenv.sh of JIRA to bypass proxy for local intranet lookups. Very similar to how we do it in browsers most of the time.

The exact switch to be used is Dhttp.nonProxyHosts="localhost|crowdserver|AnyOtherIntranetApp".

Application restart is needed after adding the above entry in setenv.sh of JIRA/confluence.

Cheers.

[Satish_Kumar]

Note : There could be other methods for enabling proxy in JIRA/Confluence/other applications. In each case, the solution is to find ways to bypass that proxy for local services, especially crowd.

[david martin]

I added the above IP to the remote page under applications and restarted confluence. I also did the authenication test and my username and password vaildated. I even added the proxy info just in case it was missing. But soon as I try to log in to confluence I get.

Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: HTTP Status 403 - Client with address "10.255.152.54" is forbidden from making requests to the application, confluence.type Status reportmessage Client with address "10.255.152.54" is forbidden from making requests to the application, confluence.description Access to the specified resource has been forbidden.Apache Tomcat/7.0.40

Is there anything else I can do to resolve this?