No log in possible due to session timeout?

[Jouni Mäkeläinen]

We have Jira and Confluence installed on our server (Ubuntu 11.10). Programs are behind the Apache proxy in separate paths (/confluence and /jira) and configured to use HTTPS. Jira and Confluence are linked together and Confluence uses Jira's user directory. Everything works well apart the problem, that sometimes blocks the user from logging in to Jira on Confluence entirely. Instead of the login screen, user gets Unauthorized (401) error from the Jira and in Confluence HTTP Status 401 - Basic Authentication Failure - Reason: AUTHENTICATED_FAILED error from Tomcat.

We suspect that the reason for the problem is died session, that causes error instead of the login screen. Sometimes deleting cookies from the browser helps, but particularly not with Confluence.

[Jouni Mäkeläinen · Accepted solution]

Proxy configuration that we use is not supported by Atlassian, so the troubleshooting was quite hard. We ended up setting session timeout in conf/web.xml to -1 (no timeout). Hope, it doesn't raise new issues :) I also considered persistent sessions, but wasn't sure if it's possible with Jira & Confluence.

[Pedro Cora]

Hi Jouni,

Check this knowledge base article https://confluence.atlassian.com/display/JIRAKB/User+is+Logged+Out+of+JIRA+after+Confluence+Login

It may help you.

Cheers,

[Jouni Mäkeläinen]

Hi, thanks for the suggestion. It seems that problem is not the overwritten session cookie, because both applications session cookies seems to be happily path specific (/jira and /confluence). Problem occurs when user has open browser windows with died sessions because of the session timeout (5h).

[Jouni Mäkeläinen]

We solved the problem by setting session timeout in conf/web.xml to -1 (no timeout). Hope, it doesn't raise new issues :) I also considered persistent sessions, but wasn't sure if it's possible with the apps.