Rest API Forbidden with AAR IIS configuration


I have configured my jira software to use ARR and IIS to manage reverse proxy (
It's working perfectly except for the user directory links between the atlassian applications. I'm unable to login to the other apps because of a rest api fordidden access.

The url that the application are trying to call is http://jira.spodis.local/rest/usermanagement/1/search?entity-type=user&start-index=0&max-results=1&expand=user
Before using AAR, I was using AJP for the proxy (but i wanted to hamonize the proxy), i didn't have any problems with the rest API.

Thanks for your help.


Mathieu LUTUN


1 answer

0 votes

When you configured the tomcat connector $JIRAinstall/conf/server.xml file, did you only set the connector to use this new proxy connection?   I ask because I would be interested to learn more about trying to bypass that proxy.   One way to do this would be to have two different connectors for Jira: one for the proxy, and another connector on a different port that can in turn bypass that.

I understand that the point here is to get it working with IIS, but just having this other connector can be helpful to troubleshoot and understand exactly where the problem might be.  I suspect this could be a setting in IIS in regards to rerouting requests, but it's difficult to tell so far with the information we have.

Also, are these other applications on the same server as Jira?  Where do these applications exist in relation to both Jira and IIS from a network standpoint?  I am curious to learn if perhaps there is a way to have these applications communicate with each other without having to go through the proxy at all.  That might not be possible, but it might one way to get around the current problem.

Also which other applications are you trying to login to via Jira?  I am interested to see what sort of error messages might be presented in the logs of those applications like Confluence, it could be this might offer us a clue as to the nature of this particular error.

Suggest an answer

Log in or Sign up to answer
Community showcase
Published Feb 26, 2019 in Jira Software

How to prevent the propagation of unused project schemes, workflows & screens in Jira software

Atlassian ranks project attributes as the third most important factor impacting performance in the category of data. It’s not surprising, since project attributes are precisely the rules used to ma...

630 views 0 7
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you