Jira and Confluence Authentication problems

[Igor M]

Good day, I have really annoying issue with authentication in Jira and Confluence.

Sometimes Authentication doesn’t work.. it happens sometimes for 2-3 persons of 50 and I can’t understand why..

I have Jira and Confluence on the same physical machine. Jira uses Tomcad 6, Confluence uses Tomcad 7 and I have synchronization with Active Directory …

Do you have any ideas?

Here is atlassian-security.log

{quote}

2013-03-02 17:01:17,296 http-bio-8080-exec-44 anonymous 1021x45466x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login login : 'MY_USER' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

2013-03-02 17:01:17,312 http-bio-8080-exec-44 anonymous 1021x45466x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 1

2013-03-02 17:01:19,125 http-bio-8080-exec-44 anonymous 1021x45468x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login login : 'MY_USER' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

2013-03-02 17:01:19,140 http-bio-8080-exec-44 anonymous 1021x45468x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 2

2013-03-02 17:01:20,000 http-bio-8080-exec-44 anonymous 1021x45469x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login login : 'MY_USER' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

2013-03-02 17:01:20,015 http-bio-8080-exec-44 anonymous 1021x45469x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 3

2013-03-02 17:01:25,703 http-bio-8080-exec-29 anonymous 1021x45477x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' is required to answer a CAPTCHA elevated security check. Failure count equals 4

{quote}

[Colin Goudie · Accepted solution]

Are you use that user is in the correct group to use JIRA and/or Confluence?

Also check that no user exists in JIRA or Confluence's internal directory that matches that users username.

[Igor M]

yes, I'm using correct groups and i don't have users in the internal directory...

[Dane Kantner]

Strangely, you will get the same exact error for just a bad password entered.

[Masahide Yamamoto]

We faced similar issue recently and found a fix. So I would like to share the info.

In our case, we use JIRA(built-in crowd) as an SSO authentication server.

When one of our guys tried to login, the same error mentioned in the previous discussions occurred like:

  tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

This is because, in our case, Confluence tries to ask JIRA's authentication sub system(built-in Crowd) to check the credentials when the user tries to login and, in our case, the user's password is different between Confluence's db's and JIRA's db's. We use MySQL. So we had to modify JIRA's one; we had to replace JIRA's one with the Confluence's one in a database table named cwd_user. ie: the user was entering the password which was Confluence's(of course the pw itself is being hashed) but during authentication Confluence internally connects to JIRA's authentication system to check the pw entered and that's why such an error is recorded in the log.

Hope this helps.

[meabraha]

This issue got resolved by removing the user who got this issue from Jira-users group and re-adding that user in same Jira-users group.

[Bryan Trummer - ReleaseTEAM]

I am receiving these messages for fisheye and confluence attempting to log in to JIRA. Any ideas?

14-12-18 16:06:54,547 http-bio-8080-exec-18 anonymous 966x98572x1 lnu51a 10.7.4.235 /rest/usermanagement/1/user/group/direct login : 'confluence' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

16:09:01,906 http-bio-8080-exec-22 anonymous 969x98732x3 zp6mpd 10.7.4.195 /rest/usermanagement/1/user/group/nested login : 'FishEye - oma-pmp-fish01 - 1c0e27d4-d589-3b1c-b786-f7aa2b7f5795' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

[Susanne Schiefer]

Same thing here. Problem occurs with only one user!

[kconti]

I am running into the same issue with only 1 user. New user to the system, has the correct groups for access, unique username, set up to use ldap authentication.

Atlassian-jira security.log :

"tried to login but they do not have USE permission or weren't found. Deleting remember me cookie."

I have tried removing this account and adding him again - no luck.

[Ananda Wanigasingha]

I have the same situation

[Ananda Wanigasingha]

Do you have a fix?

[IgorM]

I found solution

I recreated Active Directory Connector and now all works fine

[IgorM]

fuck!!! I got this problem again

2013-03-13 17:08:05,391 http-bio-8080-exec-57 anonymous 1028x356x1 1fzhv40 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 1

Do you have any ideas?

[IgorM]

fuck!!! I got this problem again

2013-03-13 17:08:05,391 http-bio-8080-exec-57 anonymous 1028x356x1 1fzhv40 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 1

Do you have any ideas?

[IgorM]

I created support case https://support.atlassian.com/browse/JSP-155212

[Giorgio Vinci]

Where did you run the test in the screenshot?

[Jari Kokkonen]

You do not have permission to view this request.

[C_ Faysal]

hi igor.

please have a look at

https://answers.atlassian.com/questions/140838/when-new-confluence-user-sign-up-and-logged-in-is-said-not-permitted

also this

https://answers.atlassian.com/questions/65843/unable-to-login-to-internal-directory-user

do you maybe mixed sth up?

i assume you meant Jira (latest ?) is on Tomcat 7 and confluence on tomcat 6 (7 is not officially supported yet)

[Igor M]

Jira - 5.2

Confluence - 4.3.2 (on tomcat 7 , I didn’t install tomcat 7 manually , confluence installed it in upgrade process ) ... May be this is one of the reason...

and I don't have CROWD .. I had it but I removed crowd a few months ago

[C_ Faysal]

hmm how was confluence 4.3.2 installed?

i can't believe that the selfinstaller came with tomcat 7.

even confluence 5.0 is on 6.0.35

[Igor M]

hmmm I just upgraded from 4.1 or 4.0 (don't equal remember) to 4.2

I'll try to reinstall confluence and restore it from backup

[Igor M]

I checked again, i was wrong

Jira on Tomcat 7

Confluence on Tomcat 6

[IgorM]

I sove this problem ... Thanks a lot suppurt guys https://support.atlassian.com/browse/JSP-155212

resolution:

use only one domain conroller for sync accounts. This is good solution if you had a problem with one of domain controllers.

[Technical Operations]

Unfortunately, I can't seem to view that ticket. Can you provide more details on how you tracked down the issue?

[Linus Lindroth]

hi, can you please post the solution here? Only you can access that support case.

[Sara]

Please include the solution directly here. No one other than you can see the support ticket.