Confluence Jira Macro - You do not have permission to create issues on this Jira server.
Asked by Thomas Wohlwend:

I have exhausted all my checks and read all relevant community and support tickets.

The Confluence Jira Macro does not work properly in my setup. I can open the dialog but can neither search nor create Jira Issues from Confluence (see error msg in post title).

Application Link is set up correctly both ways with OAuth enabled and working properly. I am successfully using Jira user directory to authenticate in Confluence (Jira is primary user directory). Collaborative editing works fine.

Confluences Spaces are connected to Jira Projects in Space configuration. Users have correct roles in Jira and Confluence.

All Jira related system plugins are enabled in Confluence.

Both Jira Core and Confluence are installed on the same Windows VM. Connection is routed over SSL thru an IIS Proxy. Certificates are valid. No other issues on either Application.

Base URLs are: https://jira.\<mydomain\>.com and https://wiki.\<mydomain\>.com

Browser Console (Chrome) shows http 400 error (bad request) on URL:

https://wiki.\<mydomain\>.com/plugins/servlet/applinks/proxy?_=...

https://wiki.\<mydomain\>.com/s/.../_/download/contextbatch/js/editor-v4,atl.general,editor,macro-browser,page,main,-_super/batch.js?frontend.editor.v4=true\&healthcheck-resources=true\&hostenabled=true\&locale=en-GB\&whisper-enabled=true

When I try this URL in a separate browser window, I get java.lang.NullPointerException  
at com.atlassian.confluence.plugins.jira.AppLinksProxyRequestServlet.doProxy(AppLinksProxyRequestServlet.java:60)

A problem with the IIS reverse Proxy? I checked SSL Configuration in IIS and noticed, that the Jira Application was not configured to accept client certificates. So I switched that option on. This resulted in the Jira Macro to show the Create Issue dialogue - but only once. The fields where read-only. Since then, same behaviour as before.

I checked the http request parameter length in the Windows registry which was described in another thread as a possible issue. It is 4096 in length and therefore probably no issue here.

Confluence is v6.15.4 and Jira Core is v8.3.2

Any ideas are much appreciated. Thanks.


Answers:
author: Thomas Wohlwend
body: I meanwhile solved the problem by configuring the application links with **oAuth with impersonation** both ways. Now it works!


author: Diego
body: Hello [@Thomas Wohlwend](/t5/user/viewprofilepage/user-id/3308409) !

As I understand, you are having problems to create Jira issues via Confluence.

I have seen this issue when we were accessing Confluence and Jira on the same server and they did not have distinct Context Paths. I suspect that you might be facing the same situation.

However, since I can not be sure about the affecting issue due to the lack of insight on your Confluence server, we should start by looking at the logs from Confluence to check what is happening. If you need more information on the logs, you can check our documentation on logs here:
> * [++***\[Confluence Server\] Working with Confluence Logs***++](https://confluence.atlassian.com/doc/working-with-confluence-logs-108364721.html)

Since the issue that you are currently facing is a known one, we have relevant documentation that aims at the solution for this. You can look at it here:
> * [++***\[Confluence Server\] Unable to create JIRA issues from Confluence - "You do not have permission to create issues on this JIRA server."***++](https://confluence.atlassian.com/confkb/unable-to-create-jira-issues-from-confluence-you-do-not-have-permission-to-create-issues-on-this-jira-server-718833461.html)

Please, let us hear from you!

comments: author: Thomas Wohlwend
body: Hi Diego, thanks for taking the time.

Context path does not apply in my case. I work with subdomains, albeit on the same server.


author: Thomas Wohlwend
body: Update:

I also tried the following remedies:

<https://confluence.atlassian.com/doc/connecting-to-ldap-or-jira-applications-or-other-services-via-ssl-133817.html>

with this

<https://docs.oracle.com/cd/E29585_01/PlatformServices.61x/security/src/csec_ssl_jsp_start_server.html>

No avail...


author: Thomas Wohlwend
body: Update:

I checked the IIS http Log and it says:

GET /sr/jira.issueviews:searchrequest-xml/temp/SearchRequest.xml jqlQuery=project%20%3D%20XYZ\&returnMax=true\&tempMax=20\&field=summary\&field=type\&field=link\&_= \<some key\> \&X-ARR-CACHE-HIT=0\&X-ARR-LOG-ID=\<session-id\>\&SERVER-STATUS=400 443 - \<ip-adress\> Apache-HttpClient/4.5.5+(Java/1.8.0_202) - 400 0 0 493

This is preceeded by some 401 - unauthorized errors

in http.sys Log it says at the same time

HTTP/1.1 POST /rest/mywork-client/1/host/verifyAuth - 411 - LengthRequired -


author: Carla Ann Rowland
body: I have seen this error once and it was a while ago so I cannot remember all the items that had to be fixed because it was a different worklife; I confluence reindexed? It was a while ago and if I remember correctly it was a combo of issues; check the browsers and the firewall and time out issues by the browers and JIRA.


Tags: confluence-server

iis

jira

macro

server