com.atlassian.crowd.exception.ApplicationPermissionException: Forbidden (403)
Asked by VWMS:

Hi guys,

we have some troubles to setup our Jira and Confluence Instance.

First we setup both instances on the same Server but each Applications runs as a service with its own Tomcat Server. In the first step I was able to make the two applications accessable via the Server IP Address + Port.

In the Second step we setup some aliases for two applications. And to make access possible i followed the following Tutorial:

[Proxying Atlassian server applications with Microsoft Internet Information Services (IIS) - Atlassian Documentation](https://confluence.atlassian.com/kb/proxying-atlassian-server-applications-with-microsoft-internet-information-services-iis-833931378.html)

After that it was possible to open both applications through its own alias/host (jira.vwracing.vw.vwg / wiki.vwracing.vw.vwg).

But know we have the problem, that users can't login into confluence anymore. We configured Jira to maintain the usermanagement. And after that I tried to configure the userdirectory in Confluence. When I want to test my settings, the following error message is shown:

Verbindungstest fehlgeschlagen. Antwort vom Server:  
com.atlassian.crowd.exception.ApplicationPermissionException: Forbidden (403) Beim Laden dieser Seite ist der Fehler "403 - Forbidden" aufgetreten. client.forbidden.exception Zur JIRA Startseite

I have tried a lot but was not able to get this running.

What can I do?

Thanks!


Answers:
author: AnnWorley
body: Hi Bjarne,

It sounds like the settings in Jira no longer match the URL that Confluence is using. Please see [Unable to create JIRA User Directory in Confluence due to ApplicationPermissionException - Forbidden (403)](https://confluence.atlassian.com/confkb/unable-to-create-jira-user-directory-in-confluence-due-to-applicationpermissionexception-forbidden-403-320602732.html) Here are more details on setting up Jira to allow connections from Confluence for User Management: [Allowing connections to JIRA for user management](https://confluence.atlassian.com/adminjiraserver073/allowing-connections-to-jira-for-user-management-861253193.html)  

If you want to start over you can redefine the Application on the Jira side and re-create the User Directory in Confluence. Here is the doc for getting admin access to Confluence when you are locked out because of a situation like this: [Restore Passwords To Recover Admin User Rights](https://confluence.atlassian.com/doc/restore-passwords-to-recover-admin-user-rights-158390.html). If you are running a Confluence version 6.5 or before, you will need to choose your version from the pulldown menu to get the older instructions:

![Screen Shot 2018-07-31 at 10.53.41 AM.png](https://community.atlassian.com/t5/image/serverpage/image-id/28310i57C81E1798A17360/image-dimensions/174x472?v=v2 "Screen Shot 2018-07-31 at 10.53.41 AM.png")

I look forward to hearing how it goes with connecting to Jira for User management again since the proxy changes.

Thanks,

Ann

comments: author: VWMS
body: Thanks for your answer.

I could get this thing running by configuring the user directory to localhost + port from the Jira instance, because the jira und confluence running on the same server!

![Unbenannt.png](https://community.atlassian.com/t5/image/serverpage/image-id/28483i9C1E616A1FF2D052/image-size/large?v=v2&px=999 "Unbenannt.png")


author: AnnWorley
body: That's excellent news! Thanks for following up.


Tags: confluence-server

server