Manually re-enable user accounts

Question

Hello,

I have a Confluence self-hosted installation that I am currently locked out of. We use the SAML SSO plugin to allow AD domain users to login to the server. As the license we are using is for a limited number of users I had disabled the non-SSO admin user. To make matters worse we temporarily switched the licensing to an unlimited user trial license. Now that the trial license is over, nobody is able to login, including the admin account.

How do I regain control of the server to apply a new license? Is there a manual way to install a license? Can I re-enable the user somehow? Perhaps modify the database directly?

Jefferson Dong · Answer

Going the SQL route worked. I was able to enable and reset the admin password. Thank you for your help!

AnnWorley · Answer

That looks correct but the recovery mode is a new feature of Confluence versions higher than 6.5.0. If you are using an older version you will need to use SQL queries as described in Restore Passwords To Recover Admin User Rights To check your version, search the /logs/atlassian-confluence.log for the phrase, "Starting Confluence". The startup entry will include the version of Confluence. If there is a custom authenticator in /confluence/WEB-INF/classes/seraph-config.xml that is used by the SSO plugin, please comment it out and comment in: Confluence will need to be restarted to pick up changes to configuration files or the database.

admin_bn2p2o · Answer

Hi Ann,

Thank you for your response. I have tried the enabling the recovery mode just as the instructions describe but I am still unable to log in.

This is what my setenv.sh file looks like.

CATALINA_OPTS="-XX:-PrintGCDetails -XX:+PrintGCDateStamps -XX:-PrintTenuringDistribution ${CATALINA_OPTS}"
CATALINA_OPTS="-Xloggc:$LOGBASEABS/logs/gc-`date +%F_%H-%M-%S`.log -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=5 -XX:GCLogFileSize=2M ${CATALINA_OPTS}"
CATALINA_OPTS="-XX:G1ReservePercent=20 ${CATALINA_OPTS}"
CATALINA_OPTS="-Djava.awt.headless=true ${CATALINA_OPTS}"
CATALINA_OPTS="-Datlassian.plugins.enable.wait=300 ${CATALINA_OPTS}"
CATALINA_OPTS="-Xms1024m -Xmx1024m -XX:+UseG1GC ${CATALINA_OPTS}"
CATALINA_OPTS="-Dsynchrony.enable.xhr.fallback=true ${CATALINA_OPTS}"
CATALINA_OPTS="-Dorg.apache.tomcat.websocket.DEFAULT_BUFFER_SIZE=32768 ${CATALINA_OPTS}"
CATALINA_OPTS="-Datlassian.recovery.password=passw0rd123 ${CATALINA_OPTS}"
CATALINA_OPTS="${START_CONFLUENCE_JAVA_OPTS} ${CATALINA_OPTS}"
CATALINA_OPTS="-Dconfluence.context.path=${CONFLUENCE_CONTEXT_PATH} ${CATALINA_OPTS}"
CATALINA_OPTS="-Dpassword.confirmation.disabled=true ${CATALINA_OPTS}"