Sharepoint Crawl Account has no USE permission

[Michael Hofmann]

We are trying to crawl a confluence server with Share Point with a user account. It already worked for a long time and suddenly it does not anymore but we cannot find out what has changed on the system. From the log file we get this information:

[atlassian.seraph.auth.DefaultAuthenticator] login login : 'XXX' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.-- url: XXX | traceId: 54dbf2221e5c9f5c

The user account is synced through LDAP. Other topics like that suggested to check whether the user account is active and member of "confluence-users" group, doesn't appear twice in the database and to try the crawling without SSO.

We checked all of that:

- In the database the user account appears only once, is active and also the entry in the user_mapping is ok

- the user is member of "confluence-users"

- crawling without SSO doesn't work neither

We increased the logging level for atlassian.seraph.auth.DefaultAuthenticator but didn't get any more information from that.

We are using Confluence 6.2.4. Does anybody know how to fix this?

[Nic Brough -Adaptavist-]

"without success"?  Does that mean you did not find the user in the login group?  If they are in there, are they enabled?

[Michael Hofmann]

Hi @Nic Brough -Adaptavist-,

sorry for the vague description here. I edited this part of my question.

The user account appears only once in the database in cwd_user and is set to active. Also there is only one entry in the user_mapping. The user account is also member of "confluence-users" and crawling without SSO doesn't work neither.

[Nic Brough -Adaptavist-]

Can you log in as that user and check that they can see some content?

[Michael Hofmann]

Yes, I already tried this. I can see content and use confluence normally with this user account.

[Nic Brough -Adaptavist-]

Great, that tells us the account should be able to do what is needed, but "cannot use" means what it says.  Either the network is not delivering the right data, or that user has no rights to view your confluence.