Rest API Forbidden with AAR IIS configuration

Mathieu LUTUN October 23, 2017

Hi,

I have configured my jira software to use ARR and IIS to manage reverse proxy (https://confluence.atlassian.com/jirakb/integrating-jira-applications-with-iis-using-arr-313467089.html)
It's working perfectly except for the user directory links between the atlassian applications. I'm unable to login to the other apps because of a rest api fordidden access.

The url that the application are trying to call is http://jira.spodis.local/rest/usermanagement/1/search?entity-type=user&start-index=0&max-results=1&expand=user
Before using AAR, I was using AJP for the proxy (but i wanted to hamonize the proxy), i didn't have any problems with the rest API.

Thanks for your help.
Regards,

 

Mathieu LUTUN

 

1 answer

0 votes
Andy Heinzer
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
October 24, 2017

When you configured the tomcat connector $JIRAinstall/conf/server.xml file, did you only set the connector to use this new proxy connection?   I ask because I would be interested to learn more about trying to bypass that proxy.   One way to do this would be to have two different connectors for Jira: one for the proxy, and another connector on a different port that can in turn bypass that.

I understand that the point here is to get it working with IIS, but just having this other connector can be helpful to troubleshoot and understand exactly where the problem might be.  I suspect this could be a setting in IIS in regards to rerouting requests, but it's difficult to tell so far with the information we have.

Also, are these other applications on the same server as Jira?  Where do these applications exist in relation to both Jira and IIS from a network standpoint?  I am curious to learn if perhaps there is a way to have these applications communicate with each other without having to go through the proxy at all.  That might not be possible, but it might one way to get around the current problem.

Also which other applications are you trying to login to via Jira?  I am interested to see what sort of error messages might be presented in the logs of those applications like Confluence, it could be this might offer us a clue as to the nature of this particular error.

Suggest an answer

Log in or Sign up to answer