Connecting to crowd from confluence

Question

I am currently able to bring up the confluence page but I can't log in.  I am recieving the following errors in the log.

2014-04-03 06:24:22,261 ERROR [http-8090-8] [crowd.manager.application.ApplicationServiceGeneric] authenticateUser Directory 'Crowd Server' is not functional during authentication of 'david.martin'. Skipped.
2014-04-03 06:24:22,264 WARN [http-8090-8] [atlassian.confluence.user.Confluence                                        Authenticator] authenticate OperationFailedException caught while authenticating                                         user <david.martin>.
com.atlassian.crowd.exception.runtime.OperationFailedException
        at com.atlassian.crowd.embedded.core.CrowdServiceImpl.convertOperationFa                                        iledException(CrowdServiceImpl.java:915)
        at com.atlassian.crowd.embedded.core.CrowdServiceImpl.authenticate(Crowd                                        ServiceImpl.java:80)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflecti                                        on(AopUtils.java:307)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJo                                        inpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(                                        ReflectiveMethodInvocation.java:149)
        at org.springframework.transaction.interceptor.TransactionInterceptor.in                                        voke(TransactionInterceptor.java:106)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(                                        ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynami                                        cAopProxy.java:204)
        at com.sun.proxy.$Proxy40.authenticate(Unknown Source)
        at com.atlassian.crowd.embedded.atlassianuser.EmbeddedCrowdAuthenticator                                        .authenticate(EmbeddedCrowdAuthenticator.java:31)
        at bucket.user.DefaultUserAccessor.authenticate(DefaultUserAccessor.java                                        :604)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflecti                                        on(AopUtils.java:307)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJo                                        inpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(                                        ReflectiveMethodInvocation.java:149)
        at com.atlassian.spring.interceptors.SpringProfilingInterceptor.invoke(S                                        pringProfilingInterceptor.java:16)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(                                        ReflectiveMethodInvocation.java:171)
        at org.springframework.transaction.interceptor.TransactionInterceptor.in                                        voke(TransactionInterceptor.java:106)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(                                        ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynami                                        cAopProxy.java:204)
        at com.sun.proxy.$Proxy51.authenticate(Unknown Source)
        at com.atlassian.confluence.user.ConfluenceAuthenticator.authenticate(Co                                        nfluenceAuthenticator.java:70)
        at com.atlassian.seraph.auth.DefaultAuthenticator.login(DefaultAuthentic                                        ator.java:94)
        at com.atlassian.confluence.user.ConfluenceAuthenticator.login(Confluenc                                        eAuthenticator.java:53)
        at com.atlassian.seraph.filter.PasswordBasedLoginFilter.runAuthenticatio                                        n(PasswordBasedLoginFilter.java:127)
        at com.atlassian.seraph.filter.PasswordBasedLoginFilter.login(PasswordBa                                        sedLoginFilter.java:72)
        at com.atlassian.seraph.filter.BaseLoginFilter.doFilter(BaseLoginFilter.                                        java:130)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite                                        ratingFilterChain.java:46)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter                                        (DelegatingPluginFilter.java:66)
        at com.atlassian.oauth.serviceprovider.internal.servlet.OAuthFilter.doFi                                        lter(OAuthFilter.java:61)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D                                        elegatingPluginFilter.java:74)
        at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite                                        ratingFilterChain.java:42)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter                                        (DelegatingPluginFilter.java:66)
        at com.atlassian.prettyurls.filter.PrettyUrlsCombinedMatchDispatcherFilt                                        er.doFilter(PrettyUrlsCombinedMatchDispatcherFilter.java:61)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D                                        elegatingPluginFilter.java:74)
        at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite                                        ratingFilterChain.java:42)
        at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte                                        r.doFilter(ServletFilterModuleContainerFilter.java:77)
        at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte                                        r.doFilter(ServletFilterModuleContainerFilter.java:63)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.util.ClusterHeaderFilter.doFilter(ClusterHea                                        derFilter.java:42)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.johnson.filters.AbstractJohnsonFilter.doFilter(Abstract                                        JohnsonFilter.java:72)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at org.springframework.orm.hibernate.support.OpenSessionInViewFilter.doF                                        ilterInternal(OpenSessionInViewFilter.java:170)
        at com.atlassian.spring.filter.FlushingSpringSessionInViewFilter.doFilte                                        rInternal(FlushingSpringSessionInViewFilter.java:29)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerR                                        equestFilter.java:76)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.util.ConfluenceErrorFilter.doFilter(Confluen                                        ceErrorFilter.java:27)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.util.profiling.filters.ProfilingFilter.doFilter(Profili                                        ngFilter.java:99)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.core.datetime.RequestTimeThreadLocalFilter.d                                        oFilter(RequestTimeThreadLocalFilter.java:41)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.gzipfilter.GzipFilter.doFilterInternal(GzipFilter.java:                                        80)
        at com.atlassian.gzipfilter.GzipFilter.doFilter(GzipFilter.java:51)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.core.filters.cache.AbstractCachingFilter.doFilter(Abstr                                        actCachingFilter.java:33)
        at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi                                        lter.java:31)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite                                        ratingFilterChain.java:46)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter                                        (DelegatingPluginFilter.java:66)
        at com.atlassian.confluence.web.filter.ConfluenceTimingFilter.doFilter(C                                        onfluenceTimingFilter.java:75)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D                                        elegatingPluginFilter.java:74)
        at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite                                        ratingFilterChain.java:42)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter                                        (DelegatingPluginFilter.java:66)
        at com.atlassian.prettyurls.filter.PrettyUrlsCombinedMatchDispatcherFilt                                        er.doFilter(PrettyUrlsCombinedMatchDispatcherFilter.java:61)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D                                        elegatingPluginFilter.java:74)
        at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite                                        ratingFilterChain.java:42)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter                                        (DelegatingPluginFilter.java:66)
        at com.atlassian.confluence.extra.webdav.servlet.filter.ReverseProxyFilt                                        er.doFilter(ReverseProxyFilter.java:427)
        at com.atlassian.confluence.extra.webdav.servlet.filter.AbstractHttpFilt                                        er.doFilter(AbstractHttpFilter.java:34)
        at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(D                                        elegatingPluginFilter.java:74)
        at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(Ite                                        ratingFilterChain.java:42)
        at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte                                        r.doFilter(ServletFilterModuleContainerFilter.java:77)
        at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilte                                        r.doFilter(ServletFilterModuleContainerFilter.java:63)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.web.filter.validateparam.RequestParamValidat                                        ionFilter.doFilter(RequestParamValidationFilter.java:58)
        at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi                                        lter.java:31)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.web.filter.TranslationModeFilter.doFilter(Tr                                        anslationModeFilter.java:43)
        at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi                                        lter.java:31)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.plugin.servlet.filter.ActionContextCleanUp.d                                        oFilter(ActionContextCleanUp.java:71)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.web.filter.LanguageExtractionFilter.doFilter                                        (LanguageExtractionFilter.java:53)
        at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi                                        lter.java:31)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.util.RequestCacheThreadLocalFilter.doFilter(                                        RequestCacheThreadLocalFilter.java:31)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.web.filter.DebugFilter.doFilter(DebugFilter.                                        java:50)
        at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi                                        lter.java:31)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.core.filters.encoding.AbstractEncodingFilter.doFilter(A                                        bstractEncodingFilter.java:41)
        at com.atlassian.core.filters.AbstractHttpFilter.doFilter(AbstractHttpFi                                        lter.java:31)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.core.filters.HeaderSanitisingFilter.doFilter(HeaderSani                                        tisingFilter.java:44)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at com.atlassian.confluence.servlet.FourOhFourErrorLoggingFilter.doFilte                                        r(FourOhFourErrorLoggingFilter.java:65)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl                                        icationFilterChain.java:235)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF                                        ilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV                                        alve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextV                                        alve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j                                        ava:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j                                        ava:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal                                        ve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.jav                                        a:293)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java                                        :859)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce                                        ss(Http11Protocol.java:602)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:48                                        9)
        at java.lang.Thread.run(Unknown Source)
Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: HTTP St                                        atus 403 - Client with address "10.255.152.54" is forbidden from making requests                                         to the application, confluence.type Status reportmessage Client with address "1                                        0.255.152.54" is forbidden from making requests to the application, confluence.d                                        escription Access to the specified resource has been forbidden.Apache Tomcat/7.0                                        .40
        at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecu                                        tor.throwError(RestExecutor.java:490)
        at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecu                                        tor.andReceive(RestExecutor.java:344)
        at com.atlassian.crowd.integration.rest.service.RestCrowdClient.authenti                                        cateUser(RestCrowdClient.java:121)
        at com.atlassian.crowd.directory.RemoteCrowdDirectory.authenticate(Remot                                        eCrowdDirectory.java:193)
        at com.atlassian.crowd.directory.DbCachingRemoteDirectory.authenticateAn                                        dUpdateInternalUser(DbCachingRemoteDirectory.java:253)
        at com.atlassian.crowd.directory.DbCachingRemoteDirectory.authenticate(D                                        bCachingRemoteDirectory.java:158)
        at com.atlassian.crowd.manager.directory.DirectoryManagerGeneric.authent                                        icateUser(DirectoryManagerGeneric.java:292)
        at com.atlassian.crowd.manager.application.ApplicationServiceGeneric.aut                                        henticateUser(ApplicationServiceGeneric.java:141)
        at com.atlassian.crowd.embedded.core.CrowdServiceImpl.authenticate(Crowd                                        ServiceImpl.java:68)
        ... 135 more

Satish_Kumar · Answer

Note : There could be other methods for enabling proxy in JIRA/Confluence/other applications. In each case, the solution is to find ways to bypass that proxy for local services, especially crowd.

Satish_Kumar · Answer

This is an old post, but I got this exact same issue & I managed to resolve it. Thought of sharing the solution since it is not found in other posts/wiki pages.

The issue here is the application trying to connect to crowd (Confluence listed in this post, for me it is jira) is configured to startup with a proxy in java settings (setenv.sh in /opt/atlassian/jira/bin usually). This is needed so that application can reach internet for plugin updates on marketplace & other purposes.

So the same route is taken for Crowd authentication as well & crowd is rejecting the request as it only knows the applications listed on it. I tried to use the trusted proxies feature of crowd, but that didn't help.

What finally solved the issue after a bit of look around is adding a switch to the java settings of setenv.sh of JIRA to bypass proxy for local intranet lookups. Very similar to how we do it in browsers most of the time.

The exact switch to be used is Dhttp.nonProxyHosts="localhost|crowdserver|AnyOtherIntranetApp".

Application restart is needed after adding the above entry in setenv.sh of JIRA/confluence.

Cheers.

david martin14 · Answer

I added the above IP to the remote page under applications and restarted confluence.  I also did the authenication test and my username and password vaildated.  I even added the proxy info just in case it was missing.  But soon as I try to log in to confluence I get.

Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: HTTP Status 403 - Client with address "10.255.152.54" is forbidden from making requests to the application, confluence.type Status reportmessage Client with address "10.255.152.54" is forbidden from making requests to the application, confluence.description Access to the specified resource has been forbidden.Apache Tomcat/7.0.40

Is there anything else I can do to resolve this?