Why? Client with address "xxx.yyy.zzz.aaa", and hostname "xxx.yyy.zzz.aaa" is forbidden from making requests

[Douglas Leech]

I have created a Crowd plugin by folllowing the documented instructions. Everything seems to run fine - the app starts with no apparant error but when I attempt to signon on using admin/admin I get an invalid logon message and the following stack trace:

NOTE: The IP addresses in the stack trace have been modified to hide their true identity - in the log both the client and host have the same IP address and are both correct.

[INFO] [talledLocalContainer] 2012-02-10 14:16:09,017 http-7000-1 ERROR [crowd.console.action.Login] Client with address "347.403.49.45", and hostname "347.403.49.45" is forbidden from making requests to the application, crowd.; nested exception is com.atlassian.crowd.exception.InvalidAuthorizationTokenException: Client with address "347.403.49.45", and host name "347.403.49.45" is forbidden from making requests to the application, crowd.
[INFO] [talledLocalContainer] org.springframework.security.AuthenticationServiceException: Client with address "347.403.49.45", and hostname "347.403.49.45" is forbidden from making requests to the application, crowd.; nested exception is com.atlassian.crowd.exception.InvalidAuthorizationTokenException: Client with address "347.403.49.45", and hostname "347.403.49.45" is forbidden from making requests to the application, crowd.
[INFO] [talledLocalContainer] at com.atlassian.crowd.integration.springsecurity.CrowdAuthenticationProvider.translateException(CrowdAuthenticationProvider.java:289)
[INFO] [talledLocalContainer] at com.atlassian.crowd.integration.springsecurity.CrowdAuthenticationProvider.authenticateUsernamePassword(CrowdAuthenticationProvider.java:152)
[INFO] [talledLocalContainer] at com.atlassian.crowd.integration.springsecurity.CrowdAuthenticationProvider.authenticate(CrowdAuthenticationProvider.java:90)
[INFO] [talledLocalContainer] at org.springframework.security.providers.ProviderManager.doAuthentication(ProviderManager.java:188)
[INFO] [talledLocalContainer] at com.atlassian.crowd.integration.springsecurity.DynamicProviderManagerImpl.doAuthentication(DynamicProviderManagerImpl.java:39)
[INFO] [talledLocalContainer] at org.springframework.security.AbstractAuthenticationManager.authenticate(AbstractAuthenticationManager.java:46)
[INFO] [talledLocalContainer] at org.springframework.security.ui.webapp.AuthenticationProcessingFilter.attemptAuthentication(AuthenticationProcessingFilter.java:82)

Can anyone provide any suggestions.

Doug

[Douglas Leech · Accepted solution]

Question was invalid - two instances of Crowd were running on the same server and these were interfering with each other.

[Colin Goudie]

Is the source applications IP address added to the Remote Addresses list in the application tab?

[Dieter]

First, i'm no crowd expert but this error looks like you send some binary data as ip address where ascii data is expected or vice versa. Legal ip addresses cannot have octets > 255. Maybe this helps you http://confluence.atlassian.com/display/CROWDKB/Client+Host+is+Invalid

[Dieter]

Or maybe this http://forums.atlassian.com/message.jspa?messageID=257362624

[Douglas Leech]

The problem has changed - during the previous run my colleague had an instance of crowd running on the same server (using a different port). We did notice that his log would detect some activity whenever I attempted to logon to my instance. Today his instance is down and we only have one crowd instance running. I am still not able to logon but the error messages are different. I will re-post a different question.