Unable to log in to Confluence after connecting to Crowd

Gerald Schneider
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 4, 2024

I have a problem logging in after connecting a newly installed Confluence to Crowd. I set up Confluence 8.9.8 (I deliberately use this version because I need to test the upgrade to 9 before rolling that out to production) via the official Docker images and configured it. So far so good, I can log in fine with the admin user and use it.


Then I connect it to Crowd. This works without problems, the test works, and as soon as I save the settings I get logged out and the problems start.

I can log in with Active Directory users via Crowd, but I don't get admin access because I can't configure the AD users.

I can't log in with the admin user from the internal directory anymore. When I try, I get this message in the atlassian-confluence-security.log:
2024-12-04 12:21:54,411 WARN [http-nio-8090-exec-5 url: /confluence/dologin.action] [atlassian.seraph.auth.DefaultAuthenticator] login login : 'confluence-admin' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

I went through this KB article, logging in with recovery_admin and my configured password:
2024-12-04 12:25:40,600 WARN [http-nio-8090-exec-26 url: /confluence/dologin.action] [atlassian.seraph.auth.DefaultAuthenticator] login login : 'recovery_admin' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.
I already tried this multiple times, deleting and recreating the container, the MySQL database and the files directory every time, so this is completely from scratch.

How can I give the admin users the USE permissions back it had before connecting Crowd?

1 answer

0 votes
Laurie Sciutti
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
December 9, 2024

Hello @Gerald Schneider ~

1. do you have another admin account you can use to log in to Confluence and Crowd to troubleshoot the "confluence-admin" account issues?  If not, you might want to create an manual one outside of AD to use via the Internal Directory.  I also have a Crowd Internal Directory for troubleshooting in the event of AD issues.

2. are you able to add the confluence-administrators group to the user's account in Crowd (via the Groups > Direct Members screen)?  If so, be sure to sync the directory in Confluence to have it applied immediately so you can test.  If not, can you manually add the group to the user's account directly in Confluence?

3. From Crowd, navigate to you Confluence directory and try the confluence-admin account via the Authentication test screen

4. From Confluence, navigate to the User Directories admin screen and select the Test link in the Crowd directory entry to test the confluence-admin account credentials.

5. If you change the order of the directories in Confluence (put the Internal Directory first), can you then log in with the admin user from the internal directory?

Gerald Schneider
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 10, 2024

1. I have no admin account in confluence, the admin privileges vanished when I connected it to Crowd. I can log into Crowd as an admin fine, but that doesn't help me here. 

2. I don't see how. Crowd is not aware of the internal groups and users of Confluence.

3. That works fine in Crowd, but the accounts don't have any administrative rights in Confluence.

4. I can't do that, I don't have any administrative rights

5. See 4.

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
SERVER
VERSION
8.9.8
TAGS
AUG Leaders

Atlassian Community Events