SSO （via Crowd） failed for Crucible（with Fisheye）

[段 琳]

I can use Crowd user (After add directory, groups, users and application on Crowd and Add directory in Crucible) to logon the Crucible, while SSO always failed.Crucible (with Fisheye) and Crowd are all latest versions.

Crowd with JIRA, Confluence, Bamboo successfully logon and SSO with no problem.

My refer: https://confluence.atlassian.com/fisheye/connecting-to-crowd-813695565.html

My config.xml:

<config control-bind="127.0.0.1:8059" version="1.0">

    <!-- see example-config.xml and config.xsd for more documentation -->

    <web-server>

        <http bind=":8060"/>

    </web-server>

    <security allow-anon="false" allow-cru-anon="false">

        <built-in>

                <signup enabled="true"/>

        </built-in>

        <crowd sso-enabled="true"/>

        <admins>

                <system-admins>

                        <group>confluence-users</group>

                </system-admins>

        </admins>

        <avatar><disabled/></avatar>

        <emailVisibility/>

    </security>

    <repository-defaults>

        <linker/>

        <allow/>

        <tarball enabled="false" maxFileCount="0"/>

        <security allow-anon="true"/>

    </repository-defaults>

</config>

[段 琳]

sorry, still the same SSO failure, what logs should I Provide？

[Caterina Curti]

Hi,

please raise a Support Request (go to http://support.atlassian.com) and provide a Support Zip as attachment (go to {{FishEye/Crucible Administration > Systems Settings > Atlassian Support Tools > Support Zip}} to generate one).

We will then be able to help you further on the support case.

Thanks,
Caterina - Atlassian Support

[段 琳]

Your message regarding "SSO &#65288;via Crowd&#65289; failed for Crucible&#65288;with Fisheye&#65289;" has been successfully added to the mail queue.

[段 琳]

Any updates?

[Caterina Curti]

Hi,

I did not see your case being created in our support system. Could you please try again?

Thanks!

[Maciej Swinarski]

Please turn on debug on both FishEye/Crucible and Crowd. What are the logs you are seeing when a user with an SSO token is accessing FishEye/Crucible. 

For testing: on the Crowd side please try to disable validating client IP. To do this please go to the Crowd Administration / Session Config and uncheck: Require Consistent Client IP Address.

Please let me know if after this change SSO works in Crucible. If not I would need debug logs from both FishEye/Crucible and Crowd when a user with an SSO token is accessing FishEye/Crucible. 

mac

[段 琳]

Hi, Maciej, it's still a problem, can you help for further investigation?

[Maciej Swinarski]

Sure, have you created a support ticket?

mac

[Jack Nolddor _Sweet Bananas_]

Same problem for me... I'll configure config.xml in fisheye/crucible
The SSO Domain is set in CROWD and I'm able to use SSO between all products (JIRA, Bitbucket, Confluence, Bamboo,...) however it doesn't work on fisheye.

Any updates??

[Maciej Swinarski]

Hi @Jack Nolddor, unfortunately I am unable to help you with this level of information. As advised please:

• turn on debug logging in FishEye and Crucible 
• turn on debug logging in Crowd
• log in to one of the application where SSO is working
• in the same browser access FishEye and Crucible 
• create a support ticket with FishEye and Crucible support zip and add Crowd debug logs

This will allow to identify the problem you are facing.

Thank you

Mac