ApplicationPermissionException error when integrating Crowd with Confluence as a user directory

Question

Hi I am unable to login through local admin credentials in Confluence as well as through SSO after the import from Prod. to QA got failed and I got following errors in logs: Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: HTTP Status 403 – ForbiddenType Status ReportMessage Client with address "10.84.153.119" is forbidden from making requests to the application, confluence.Description The server understood the request but refuses to authorize it.Apache Tomcat/8.5.34 2019-05-07 03:56:22,294 WARN [Caesium-1-1] [impl.schedule.caesium.JobRunnerWrapper] runJob Scheduled job LaasPerformanceLoggingJob#LaasPerformanceLoggingJob completed unsuccessfully with response JobRunnerResponse[runOutcome=ABORTED,message='LaaS performance logging is turned off'] 2019-05-07 04:00:00,012 WARN [Caesium-1-2] [impl.schedule.caesium.JobRunnerWrapper] runJob Scheduled job com.atlassian.confluence.plugins.confluence-periodic-analytics-events:confluenceDailyStatisticsPublisherJob#confluenceDailyStatisticsPublisherJob completed unsuccessfully with response JobRunnerResponse[runOutcome=ABORTED,message='Can't collect analytics.'] 2019-05-07 04:01:22,294 WARN [Caesium-1-1] [impl.schedule.caesium.JobRunnerWrapper] runJob Scheduled job LaasPerformanceLoggingJob#LaasPerformanceLoggingJob completed unsuccessfully with response JobRunnerResponse[runOutcome=ABORTED,message='LaaS performance logging is turned off'] 2019-05-07 04:03:39,230 ERROR [http-nio-8090-exec-3] [crowd.manager.application.ApplicationServiceGeneric] authenticateUser Directory 'New Crowd Server' is not functional during authentication of 'confluence-admin'. Skipped. -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 63052b5f8ad76606 2019-05-07 04:03:39,233 WARN [http-nio-8090-exec-3] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions: ->[com.atlassian.confluence.user.DefaultUserAccessor.authenticate]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #682686972) -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 63052b5f8ad76606 2019-05-07 04:03:39,234 WARN [http-nio-8090-exec-3] [atlassian.confluence.user.ConfluenceAuthenticator] authenticate OperationFailedException caught while authenticating user . -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 63052b5f8ad76606 com.atlassian.crowd.exception.runtime.OperationFailedException at com.atlassian.crowd.embedded.core.CrowdServiceImpl.convertOperationFailedException(CrowdServiceImpl.java:676) at com.atlassian.crowd.embedded.core.CrowdServiceImpl.authenticate(CrowdServiceImpl.java:76) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) 2019-05-07 03:55:17,341 ERROR [http-nio-8090-exec-2] [crowd.manager.application.ApplicationServiceGeneric] authenticateUser Directory 'New Crowd Server' is not functional during authentication of 'confluence-admin'. Skipped. -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 5abaf2cbc612a239 2019-05-07 03:55:17,348 WARN [http-nio-8090-exec-2] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions: ->[com.atlassian.confluence.user.DefaultUserAccessor.authenticate]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #246236325) -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 5abaf2cbc612a239 2019-05-07 03:55:17,349 WARN [http-nio-8090-exec-2] [atlassian.confluence.user.ConfluenceAuthenticator] authenticate OperationFailedException caught while authenticating user . -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 5abaf2cbc612a239 com.atlassian.crowd.exception.runtime.OperationFailedException

Puneet Baradia · Answer

Yes, I tried restarting confluence.

I also tried restarting Crowd and then Confluence but that also didn't solved my issue.

Can you please suggest something new ?

Elifcan Cakmak · Answer

It's interesting. Have you tried to restart confluence? Also it's not meaningful that you can't login with a local admin user. There is nothing about that in the logs. All I see is crowd related problems. What is the error? Are you sue that username and password correct?

We also encountered this issue and the problem was solved with the way I suggested.

This is the documentation for the other error you encounter: (crowd is not functional)

https://confluence.atlassian.com/crowdkb/crowd-user-authentication-fails-with-directory-x-is-not-functional-during-authentication-error-391086721.html

This suggests there may be network issues. I recommend restart crowd first and wait until it's fully started. Then restart confluence and see what happens.

Regards.

Puneet Baradia · Answer

Hi Elifcan

Thanks for your response.

I already tried that solution but did not got any success as the error remains the same.