It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Unable to login to Crowd with name url, only ip address Edited

Fresh install of 3.3, but with a server.xml imported from 2.7.2 during the setup.

Setup on default ports.  Accessed via reverse proxy in httpd. After import, updated {INSTALL_DIR}/apache-tomcat/conf/server.xml to add proxyPort, proxyName, and scheme.

I am able to login when accessed via IP address, however when accessed via the configured Base URL the login returns to the login page without an error.  Browser Network indicates a 302 from j_security_check, but there is no error in the logs.  Sometimes (usually before the 'Initiating Jersey' message appears in the log) there is an XSRF failure error.

 

When logging in through the IP address, various pages will result in an XSRF error in the logs:

2018-12-05 11:06:37,298 http-nio-8095-exec-8 WARN [common.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: https://<url>/crowd/rest/webResources/1.0/resources , origin: https://<ip> , referrer: https://<ip>/crowd/console/secure/admin/general.action , credentials in request: true , allowed via CORS: false

 

1 answer

1 accepted

0 votes
Answer accepted

The login loop was a result of cache/cookies as described in this KB article 

 

XSRF is resolved when using the url instead of ip address.

Suggest an answer

Log in or Sign up to answer
This widget could not be displayed.
This widget could not be displayed.
Community showcase
Published yesterday in Confluence

Confluence CVEs and common questions

Two vulnerabilities have been published for Confluence Server and Data Center recently: March 20, 2019 CVE-2019-3395 / CVE-2019-3396 April 17, 2019 CVE-2019-3398 The goal of this article is...

63 views 0 9
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you