nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Sudden "<user> tried to login but they do not have USE permission or weren't found"

Krystian Szczęsny_f0mvu7

Hello

Recently I have migrated from Jira Crowd to Jira internal directory. It was around 2 weeks ago. Jira worked fine and all of the users were able to login and perform operations.

Today, none of the users can log in to jira.

I have checked the logs, and found the only reasonable thing in the security log:

/rest/gadget/1.0/login login : 'krystian' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

This user is the admin user, so I can't access JIRA at all at the moment.

I went through several questions here and none of the solution applies. All of te users exist, there are duplicates (since we used to use Crowd, there are users from Crowd there as well) but they are disabled and like I've stated before. This has worked for around 2 weeks just fine.

I'm a bit lost and I'm not sure where to look for help. Jira version is 5.1.5.

Accepted answers

All comments

Steven F Behnke

Show us your directories page.

Is it possible that, since they're duplicated, all your users are now shadowed by different user accounts that take hierarchy priority but don't have log in permissions?

I see now that you have no access at all, apologies! Recovery via DB followed by an inspection of your directory configuration is in order, Andrew's got the advice!

Andy Heinzer

If you can't login to Jira and you're the admin, I would recommend the guide: Retrieving the JIRA Administrator.

In all likelihood that specific error message you mentioned happens when the user account exists in Jira, and the user has the right password, but that user is not being granted application access because they do not belong to one or more of the necessary groups defined to grant application access.

You can run the following SQL queries to first understand what groups grant admin access in your instance:

select group_id from globalpermissionentry where PERMISSION='SYSTEM_ADMIN';

The default group name is 'jira-administrators' but this is commonly customized or changed. Based on the results of that first query, you will likely need to run the following query and update the group name. You might have to run this next one for each group that grants admin access.

select child_name, directory_id from cwd_membership where parent_name='jira-administrators';

This 2nd query should be able to tell you all the usernames that actually have Jira admin rights in the system. If you get no results there, then the first link I posted does explain some additional steps you can take to create a new admin group via SQL and give the user membership that way.

Lastly, it might help to look at what user directories you have and which are enabled right now, and their order. You can do this via sql with the command:

select * from cwd_directory;

Unable to login to JIRA applications is also a helpful KB to troubleshoot your initial error. If you recently changed user directories, I suspect that there might be one of more groups that did not actually get moved over or that the user accounts don't actually belong to after the migration.

Krystian Szczęsny_f0mvu7

Thank you Andrew.

Yes, I can't login to Jira admin panel

The 'globalpermissionentry' table is not there for jira 5.1.5. I actually tried creating it and adding entriesfrom the KB, but it didn't help (didn't make much sense to do it, but what the hell...).

Here's my directory table:

jira5=# select id,directory_name,active,directory_type,directory_position from cwd_directory;
 id | directory_name | active | directory_type | directory_position
----+-------------------------+--------+----------------+--------------------
 2 | Remote Crowd Directory | 0 | CROWD | 2
 1 | JIRA Internal Directory | 1 | INTERNAL | 0
(2 rows)

My cwd_membership table:

jira5=# select child_name, directory_id from cwd_membership where parent_name='jira-administrators';
 child_name | directory_id
--------------+--------------
 lukasz.zajac | 1
 krystian | 1
(2 rows)

My cwd_membership table:

jira5=# select child_id, child_name, directory_id from cwd_membership where parent_name='jira-administrators';
child_id | child_name | directory_id
----------+--------------+--------------
11010 | lukasz.zajac | 1
10000 | krystian | 1
(2 rows)

And finally my cwd_users table:

jira5=# select id, user_name, active, directory_id from cwd_user where id = 10000;
id | user_name | active | directory_id
-------+-----------+--------+--------------
10000 | krystian | 1 | 1
(1 row)

I have already reset my password as described in KB, to make sure that LastPass doesn't fool me when logging in, but still nothing.

I am not sure where else to look

Thanks for all your help.

Krystian Szczęsny_f0mvu7

Hello Steven, thanks for the help.

I have already setup jira on another server from the backups from last week - the same issue unfortunately

And yes... jira worked fine.

Krystian Szczęsny_f0mvu7

As stated above, my database didn't have the globalpermissionentry table, but I have created it with following entries:

jira5=# select * from globalpermissionentry;
 id | permission | group_id
-------+--------------+---------------------
 10000 | ADMINISTER | jira-administrators
 10001 | USE | jira-users
 10006 | SYSTEM_ADMIN | jira-administrators
(3 rows)

It didn't help though.

Andy Heinzer

My apologies @Krystian Szczęsny

There are actually a different set of steps to follow in order to recover the Jira admin for Jira versions before 6.0 like yours.

Instead please see:

Jira 5.1.x documentation: Retrieving the Jira Administrator

I would recommend reverting the changes you might have made directly first if possible. However I believe this other guide has some slightly different steps to follow in order to be able to recover this via SQL in that version.

Please let us know if you run into any problems with this.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira