crowd - apache http server authentication integration problem

YieldrD June 17, 2014

Hi,

I would like to use crowd as authenticaiton backend server integrating with apache http server as http authenticaiton mechanishm. I've followed document below;

https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Apache

I'm getting this error;

[error] CrowdAuth: Failed to authenticate application.

- configuration;

<Directory "/var/www/">
  AuthName crowd
  AuthType Basic
  PerlAuthenHandler Apache::CrowdAuth
  PerlSetVar CrowdAppName XXX
  PerlSetVar CrowdAppPassword XXX
  PerlSetVar CrowdSOAPURL http://crowd.domain.com:8095/crowd/services/SecurityServer
  PerlSetVar CrowdCacheEnabled on
  PerlSetVar CrowdCacheLocation /tmp/CrowdAuth
  PerlSetVar CrowdCacheExpiry 300
  require valid-user
</Directory>

what did i check;

- application name and password correct, i also try with another application name and password it works with restfull api.

- i have checked remote ip configuration, i'm sure i added server's real external ip.

- i got tcpdump on the crowd server, it's below;

09:56:22.769876 IP xx.54627 > crowd.xxx.com.8095: Flags [P.], seq 2995895305:2995896539, ack 2611274641, win 281, options [nop,nop,TS val 254446793 ecr
 3787739752], length 1234
E...0.@.;...6H..
6"..c.....      ........+......
.*....RhPOST /crowd/services/SecurityServer HTTP/1.1
TE: deflate,gzip;q=0.3
Connection: TE, close
Accept: text/xml
Accept: multipart/*
Accept: application/soap
Host: crowd.domain.com:8095
User-Agent: SOAP::Lite/Perl/0.714
Content-Length: 933
Content-Type: text/xml; charset=utf-8
SOAPAction: ""
<?xml version="1.0" encoding="UTF-8"?>
<soap:Envelope
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"
    xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <namesp1:authenticateApplication xmlns:namesp1="urn:SecurityServer">
      <in0>
        <credential xmlns="http://authentication.integration.crowd.atlassian.com">
          <credential xsi:type="xsd:string">XXX</credential>
        </credential>
        <name xmlns="http://authentication.integration.crowd.atlassian.com" xsi:type="xsd:string">XXX</name>
        <validationFactors xmlns="http://authentication.integration.crowd.atlassian.com" xsi:nil="true" />
              </in0>
    </namesp1:authenticateApplication>
  </soap:Body>
</soap:Envelope>

- at the crowd server, the application is active.

- crowd url is correct, when i try with with curl, it works;

http://crowd.domain.com:8095/crowd/services/SecurityServer

[Invalid SOAP request.]

Could anyone help me to solve the problem.

Thanks.

1 answer

1 accepted

2 votes
Answer accepted
Tiago Comasseto
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
June 17, 2014

I see your Apache settings are a bit differente than the example in our site, have you tried with the example configuration in step 4?

<Directory "/var/mysite/">
.
.
.
  AuthName "Atlassian Crowd"
  AuthType Basic
  AuthBasicProvider crowd
 
  CrowdAppName myappname
  CrowdAppPassword mypassword
  CrowdURL http://localhost:8095/crowd/
 
  Require valid-user
.
.
.
</Directory>

Cheers

YieldrD June 17, 2014

The configuration that you referred is for the 2.x version of Crowd-Apache Connector and it doesn't support ubuntu 12.04. As document says, i've used Crowd-Apache 1.4 Connector, documanted below;

https://confluence.atlassian.com/display/CROWD020/Integrating+Crowd+with+Apache

Am i wrong?


"This document is for the 2.x version of Crowd-Apache Connector, if you can't find an compatible version of the 2.x Subversion Connector for your O/S in the table below then refer to the 1.4 version of the Crowd-Apache Connector."

Tiago Comasseto
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
June 17, 2014

I'm pretty sure I've tested apache connector 2.0 with newer versions of Ubuntu, I believe our docs are outdated. I've opened this request to review this information: https://jira.atlassian.com/browse/CWD-3963

In the meantime, if you have a test server, you may want to test apache connector 2.0.

Cheers

YieldrD June 22, 2014

Thank you Tiago. Using documentation i've easily configured 2.0.

Cheers.

Tiago Comasseto
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
June 22, 2014

I'm glad to hear that, if you thing this question was answered satisfactorily, you may accept the answer, this will increase its visibility and may help others in the future.

Cheers

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events