Session Expire once both jira and confluence tools are used

[panagiotis.karalis]

Hello community,

I have noticed that in my company's server if I'm using in parallel both confluence and jira tools. The relevant sessions are expired very often.

The specific scenario is:

A user has two different tabs open in the browser. the first one has jira software and the second the confluence tool. This user is trying to work in parallel with both tools. The sessions are expired very often.

PS: we're using the same LDAP folder for all atlassian tools, so the users are using the same credentials during log in.

Is this normal?

Is this matter of configuration or something?

If you need any clarification , please feel free to ask me.

Thank you in advance for your answers.

[JP _AC Bielefeld Leader_ · Accepted solution]

Hi,

let's clarify "very often"? Every minute, hour?

Could you post the URL (anonymized) used to access Jira & Confluence? Are you the admin of the server? Did you check the session timeout settings of Jira & Confluence? Are they sharing a session?

Best

JP

[panagiotis.karalis]

Hi,

You are right, I was not so clear on my description.

First of all, yes I'm the administrator and the Jira software is installed in our premises (private data center).

Let's describe better the scenario.

A user is logged in at Jira software and in parallel the same user open a different tab on the same browser and trying to log in at confluence. The log in at confluence is successful, BUT the session in the jira is expired.

No error log is generated from jira support tool.

PS: we're using the same LDAP folder for all atlassian tools, so the users are using the same credentials during log in.

[JP _AC Bielefeld Leader_]

I'm still not sure, how you're running Jira & Confluence:

1. Unique hosts

jira.abc.com

confluence.abc.com

2. Same host 

server.abc.com/jira

server.abc.com/confluence

3. Same path/cookie

server.abc.com/apps/jira

server.abc.com/apps/confluence

The LDAP settings / config are not relevant. What matters is the session id. On case 1 & 2 above I'm sure there are different session ids (unless a reverse proxy sitting in front does something naughty). On case 3 I'm pretty sure the session id gets invalided the same moment the user logs into the other app.

Best

JP

[panagiotis.karalis]

Both tools are running on the same host.

Specifically, 

JIRA : host_IP:port1

CONFLUENCE : host_IP:port2

Do you believe that this could be the problem?

I didn't see anywhere that there is a such limitation, but I'm sure if I've lost something

Thank you for your support!

[JP _AC Bielefeld Leader_]

Just to make sure: Your users are using IP addresses & ports? Do they match the base URL of Jira & Confluence?

Best

JP

[JP _AC Bielefeld Leader_]

This will not work, as session ids are bound to an ip address but not to a port. Therefore a user will be logged off (session id changes) each time he logs into the other application.

Check here:

https://stackoverflow.com/questions/13412864/same-session-id-on-same-ip-address-but%20-different%20ports/21773261%20

My advice: Get it running with DNS and a reverse proxy in front. Use SSL/TLS.

Best

JP

[panagiotis.karalis]

I checked that and indeed the cookies for both confluence and jira are the same.

We had already planned to go with DNS option.

Thank you very much for your quick support!