Constantly logged out

[Andreas Ebneter]

Hello

Since the weekend we have a major problem with our
Confluence 7.13.1. every time a user clicks on a page,
he is logged out and sees only the login screen.
At the end of the login url it always has the parameter: permissionViolation=true
When he enters his credential again he sees the page.
This also occurs when he tries to open the page tree.

I have already checked everything.
- Storage space: OK
- Time synchronization server: OK
- Confluence restart: No effect

The log files do not contain anything that indicates a problem.
Only Confluence is running on the server, no other Atlassian products.

Does anyone have any ideas?

[Brant Schroeder]

@Andreas Ebneter 

Sounds like a session issue with the Proxy.  Please double-check all your settings against the documentation.  Check the timeouts and make sure that they are long enough.  https://confluence.atlassian.com/doc/using-apache-with-mod_proxy-173669.html

The save my login creates a cookie in the browser that helps the server reauthorize a session after it times out.  If checking this solves the issue it sounds like a session issue caused by the proxy.

[Paz Grimberg]

Hi @Andreas Ebneter, have you solved this issue?

[Andreas Ebneter]

One additional piece of information: if I check the box for "Save my login to this computer" in the login screen, it works.
What does this button do internally in Confluence?

[Andreas Ebneter]

I should add, this only happens when confluence is accessed through the Apache reverse proxy in front of it. If I access confluence directly (within the network), the error does not occur. But also in the Apache logs nothing conspicuous is to be found.

[Brant Schroeder]

@Andreas Ebneter 

What user directory does Confluence use?

[Andreas Ebneter]

Internal and Active Directory (Univention UCS 4.0 (Samba 4))

But it happens also when I use the built in internal admin account. Seems not to be related with active directory.

Also the number of users is below the number in the license.