ApplicationPermissionException error when integrating Crowd with Confluence as a user directory

[Puneet Baradia]

Hi

I am unable to login through local admin credentials in Confluence as well as through SSO after the import from Prod. to QA got failed and I got following errors in logs:

Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: HTTP Status 403 – ForbiddenType Status ReportMessage Client with address "10.84.153.119" is forbidden from making requests to the application, confluence.Description The server understood the request but refuses to authorize it.Apache Tomcat/8.5.34

2019-05-07 03:56:22,294 WARN [Caesium-1-1] [impl.schedule.caesium.JobRunnerWrapper] runJob Scheduled job LaasPerformanceLoggingJob#LaasPerformanceLoggingJob completed unsuccessfully with response JobRunnerResponse[runOutcome=ABORTED,message='LaaS performance logging is turned off']

2019-05-07 04:00:00,012 WARN [Caesium-1-2] [impl.schedule.caesium.JobRunnerWrapper] runJob Scheduled job com.atlassian.confluence.plugins.confluence-periodic-analytics-events:confluenceDailyStatisticsPublisherJob#confluenceDailyStatisticsPublisherJob completed unsuccessfully with response JobRunnerResponse[runOutcome=ABORTED,message='Can't collect analytics.']

2019-05-07 04:01:22,294 WARN [Caesium-1-1] [impl.schedule.caesium.JobRunnerWrapper] runJob Scheduled job LaasPerformanceLoggingJob#LaasPerformanceLoggingJob completed unsuccessfully with response JobRunnerResponse[runOutcome=ABORTED,message='LaaS performance logging is turned off']

2019-05-07 04:03:39,230 ERROR [http-nio-8090-exec-3] [crowd.manager.application.ApplicationServiceGeneric] authenticateUser Directory 'New Crowd Server' is not functional during authentication of 'confluence-admin'. Skipped.

 -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 63052b5f8ad76606

2019-05-07 04:03:39,233 WARN [http-nio-8090-exec-3] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions:

  ->[com.atlassian.confluence.user.DefaultUserAccessor.authenticate]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #682686972)

 -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 63052b5f8ad76606

2019-05-07 04:03:39,234 WARN [http-nio-8090-exec-3] [atlassian.confluence.user.ConfluenceAuthenticator] authenticate OperationFailedException caught while authenticating user <confluence-admin>.

 -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 63052b5f8ad76606

com.atlassian.crowd.exception.runtime.OperationFailedException

        at com.atlassian.crowd.embedded.core.CrowdServiceImpl.convertOperationFailedException(CrowdServiceImpl.java:676)

        at com.atlassian.crowd.embedded.core.CrowdServiceImpl.authenticate(CrowdServiceImpl.java:76)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

2019-05-07 03:55:17,341 ERROR [http-nio-8090-exec-2] [crowd.manager.application.ApplicationServiceGeneric] authenticateUser Directory 'New Crowd Server' is not functional during authentication of 'confluence-admin'. Skipped.

 -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 5abaf2cbc612a239

2019-05-07 03:55:17,348 WARN [http-nio-8090-exec-2] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions:

  ->[com.atlassian.confluence.user.DefaultUserAccessor.authenticate]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #246236325)

 -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 5abaf2cbc612a239

2019-05-07 03:55:17,349 WARN [http-nio-8090-exec-2] [atlassian.confluence.user.ConfluenceAuthenticator] authenticate OperationFailedException caught while authenticating user <confluence-admin>.

 -- referer: https://confluence-qa.cls.bcs.cnb/dologin.action | url: /dologin.action | traceId: 5abaf2cbc612a239

com.atlassian.crowd.exception.runtime.OperationFailedException

[Elifcan Cakmak]

Hello,

Check out this documentation:

https://confluence.atlassian.com/jirakb/connecting-jira-to-crowd-throwing-applicationpermissionexception-301662474.html

You should try to add this IP address to the remote addressed of the application on Crowd like this:

After that you should be able to login with your crowd user.

Regards.

[Puneet Baradia]

Hi Elifcan

Thanks for your response.

I already tried that solution but did not got any success as the error remains the same. 

[Elifcan Cakmak]

It's interesting. Have you tried to restart confluence? Also it's not meaningful that you can't login with a local admin user. There is nothing about that in the logs. All I see is crowd related problems. What is the error? Are you sue that username and password correct?

We also encountered this issue and the problem was solved with the way I suggested. 

This is the documentation for the other error you encounter: (crowd is not functional)

https://confluence.atlassian.com/crowdkb/crowd-user-authentication-fails-with-directory-x-is-not-functional-during-authentication-error-391086721.html

This suggests there may be network issues. I recommend restart crowd first and wait until it's fully started. Then restart confluence and see what happens.

Regards.

[Puneet Baradia]

Yes, I tried restarting confluence.

I also tried restarting Crowd and then Confluence but that also didn't solved my issue.

Can you please suggest something new ?