Rest API Forbidden with AAR IIS configuration


I have configured my jira software to use ARR and IIS to manage reverse proxy (
It's working perfectly except for the user directory links between the atlassian applications. I'm unable to login to the other apps because of a rest api fordidden access.

The url that the application are trying to call is http://jira.spodis.local/rest/usermanagement/1/search?entity-type=user&start-index=0&max-results=1&expand=user
Before using AAR, I was using AJP for the proxy (but i wanted to hamonize the proxy), i didn't have any problems with the rest API.

Thanks for your help.


Mathieu LUTUN


1 answer

0 vote

When you configured the tomcat connector $JIRAinstall/conf/server.xml file, did you only set the connector to use this new proxy connection?   I ask because I would be interested to learn more about trying to bypass that proxy.   One way to do this would be to have two different connectors for Jira: one for the proxy, and another connector on a different port that can in turn bypass that.

I understand that the point here is to get it working with IIS, but just having this other connector can be helpful to troubleshoot and understand exactly where the problem might be.  I suspect this could be a setting in IIS in regards to rerouting requests, but it's difficult to tell so far with the information we have.

Also, are these other applications on the same server as Jira?  Where do these applications exist in relation to both Jira and IIS from a network standpoint?  I am curious to learn if perhaps there is a way to have these applications communicate with each other without having to go through the proxy at all.  That might not be possible, but it might one way to get around the current problem.

Also which other applications are you trying to login to via Jira?  I am interested to see what sort of error messages might be presented in the logs of those applications like Confluence, it could be this might offer us a clue as to the nature of this particular error.

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published May 21, 2018 in Jira Software

How large do you think Jira Software can grow?

Hi Atlassian Community! My name is Shana, and I’m on the Jira Software team. One of the many reasons this Community exists is to connect you to others on similar product journeys or with comparabl...

1,002 views 7 17
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you