Rest API Forbidden with AAR IIS configuration

Hi,

I have configured my jira software to use ARR and IIS to manage reverse proxy (https://confluence.atlassian.com/jirakb/integrating-jira-applications-with-iis-using-arr-313467089.html)
It's working perfectly except for the user directory links between the atlassian applications. I'm unable to login to the other apps because of a rest api fordidden access.

The url that the application are trying to call is http://jira.spodis.local/rest/usermanagement/1/search?entity-type=user&start-index=0&max-results=1&expand=user
Before using AAR, I was using AJP for the proxy (but i wanted to hamonize the proxy), i didn't have any problems with the rest API.

Thanks for your help.
Regards,

 

Mathieu LUTUN

 

1 answer

0 vote

When you configured the tomcat connector $JIRAinstall/conf/server.xml file, did you only set the connector to use this new proxy connection?   I ask because I would be interested to learn more about trying to bypass that proxy.   One way to do this would be to have two different connectors for Jira: one for the proxy, and another connector on a different port that can in turn bypass that.

I understand that the point here is to get it working with IIS, but just having this other connector can be helpful to troubleshoot and understand exactly where the problem might be.  I suspect this could be a setting in IIS in regards to rerouting requests, but it's difficult to tell so far with the information we have.

Also, are these other applications on the same server as Jira?  Where do these applications exist in relation to both Jira and IIS from a network standpoint?  I am curious to learn if perhaps there is a way to have these applications communicate with each other without having to go through the proxy at all.  That might not be possible, but it might one way to get around the current problem.

Also which other applications are you trying to login to via Jira?  I am interested to see what sort of error messages might be presented in the logs of those applications like Confluence, it could be this might offer us a clue as to the nature of this particular error.

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Sarah Schuster
Posted Mar 28, 2018 in Jira Software

Can a company’s culture make or break agile adoption?

Can a new-to-agile team survive and thrive in a non-agile culture? If so, what advice would you give to those trying to be agile in a non-agile culture? What's the key(s) to success? Share your thoug...

11,992 views 15 13
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you