Jira and Confluence Authentication problems
Asked by Igor M:

Good day, I have really annoying issue with authentication in Jira and Confluence.

Sometimes Authentication doesn't work.. it happens sometimes for 2-3 persons of 50 and I can't understand why..

I have Jira and Confluence on the same physical machine. Jira uses Tomcad 6, Confluence uses Tomcad 7 and I have synchronization with Active Directory ...

Do you have any ideas?

Here is atlassian-security.log

{quote}

2013-03-02 17:01:17,296 http-bio-8080-exec-44 anonymous 1021x45466x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login login : 'MY_USER' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

2013-03-02 17:01:17,312 http-bio-8080-exec-44 anonymous 1021x45466x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 1

2013-03-02 17:01:19,125 http-bio-8080-exec-44 anonymous 1021x45468x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login login : 'MY_USER' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

2013-03-02 17:01:19,140 http-bio-8080-exec-44 anonymous 1021x45468x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 2

2013-03-02 17:01:20,000 http-bio-8080-exec-44 anonymous 1021x45469x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login login : 'MY_USER' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

2013-03-02 17:01:20,015 http-bio-8080-exec-44 anonymous 1021x45469x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 3

2013-03-02 17:01:25,703 http-bio-8080-exec-29 anonymous 1021x45477x1 1x7tv8s 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' is required to answer a CAPTCHA elevated security check. Failure count equals 4

{quote}


Answers:
author: Colin Goudie
body: Are you use that user is in the correct group to use JIRA and/or Confluence?

Also check that no user exists in JIRA or Confluence's internal directory that matches that users username.

comments: author: Igor M
body: yes, I'm using correct groups and i don't have users in the internal directory...


author: Dane Kantner
body: Strangely, you will get the same exact error for just a bad password entered.


author: Masahide Yamamoto
body: We faced similar issue recently and found a fix. So I would like to share the info.

In our case, we use JIRA(built-in crowd) as an SSO authentication server.

When one of our guys tried to login, the same error mentioned in the previous discussions occurred like:

tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

This is because, in our case, Confluence tries to ask JIRA's authentication sub system(built-in Crowd) to check the credentials when the user tries to login and, in our case, the user's password is different between Confluence's db's and JIRA's db's. We use MySQL. So we had to modify JIRA's one; we had to replace JIRA's one with the Confluence's one in a database table named cwd_user. ie: the user was entering the password which was Confluence's(of course the pw itself is being hashed) but during authentication Confluence internally connects to JIRA's authentication system to check the pw entered and that's why such an error is recorded in the log.

Hope this helps.


author: meabraha
body: This issue got resolved by removing the user who got this issue from Jira-users group and re-adding that user in same Jira-users group.


author: Bryan Trummer - ReleaseTEAM
body: I am receiving these messages for fisheye and confluence attempting to log in to JIRA. Any ideas?

14-12-18 16:06:54,547 http-bio-8080-exec-18 anonymous 966x98572x1 lnu51a 10.7.4.235 /rest/usermanagement/1/user/group/direct login : 'confluence' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.

16:09:01,906 http-bio-8080-exec-22 anonymous 969x98732x3 zp6mpd 10.7.4.195 /rest/usermanagement/1/user/group/nested login : 'FishEye - oma-pmp-fish01 - 1c0e27d4-d589-3b1c-b786-f7aa2b7f5795' tried to login but they do not have USE permission or weren't found. Deleting remember me cookie.


author: Susanne Schiefer
body: Same thing here. Problem occurs with only one user!


author: kconti
body: I am running into the same issue with only 1 user. New user to the system, has the correct groups for access, unique username, set up to use ldap authentication.

Atlassian-jira security.log :

"tried to login but they do not have USE permission or weren't found. Deleting remember me cookie."

I have tried removing this account and adding him again - no luck.

comments: author: Ananda Wanigasingha
body: I have the same situation


author: Ananda Wanigasingha
body: Do you have a fix?


author: IgorM
body: I found solution

I recreated Active Directory Connector and now all works fine

comments: author: IgorM
body: fuck!!! I got this problem again

2013-03-13 17:08:05,391 http-bio-8080-exec-57 anonymous 1028x356x1 1fzhv40 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 1

Do you have any ideas?


author: IgorM
body: fuck!!! I got this problem again

<br />

2013-03-13 17:08:05,391 http-bio-8080-exec-57 anonymous 1028x356x1 1fzhv40 192.168.22.138 /rest/gadget/1.0/login The user 'MY_USER' has FAILED authentication. Failure count equals 1

<br />

Do you have any ideas?

![](../../../upfiles/test_3.JPG)  


author: IgorM
body: I created support case <https://support.atlassian.com/browse/JSP-155212>


author: Giorgio Vinci
body: Where did you run the test in the screenshot?


author: Jari Kokkonen
body: > You do not have permission to view this request.


author: C. Faysal
body: hi igor.

please have a look at

[https://answers.atlassian.com/questions/140838/when-new-confluence-user-sign-up-and-logged-in-is-said-not-permitted](/questions/140838/when-new-confluence-user-sign-up-and-logged-in-is-said-not-permitted)

also this

[https://answers.atlassian.com/questions/65843/unable-to-login-to-internal-directory-user](/questions/65843/unable-to-login-to-internal-directory-user)

do you maybe mixed sth up?

i assume you meant Jira (latest ?) is on Tomcat 7 and confluence on tomcat 6 (7 is not officially supported yet)

comments: author: Igor M
body: Jira - 5.2

Confluence - 4.3.2 (on tomcat 7 , I didn't install tomcat 7 manually , confluence installed it in upgrade process ) ... May be this is one of the reason...

and I don't have CROWD .. I had it but I removed crowd a few months ago


author: C. Faysal
body: hmm how was confluence 4.3.2 installed?

i can't believe that the selfinstaller came with tomcat 7.

even confluence 5.0 is on 6.0.35


author: Igor M
body: hmmm I just upgraded from 4.1 or 4.0 (don't equal remember) to 4.2

I'll try to reinstall confluence and restore it from backup


author: Igor M
body: I checked again, i was wrong

Jira on Tomcat 7

Confluence on Tomcat 6


author: IgorM
body: I sove this problem ... Thanks a lot suppurt guys <https://support.atlassian.com/browse/JSP-155212>

resolution:

use only one domain conroller for sync accounts. This is good solution if you had a problem with one of domain controllers.

comments: author: Technical Operations
body: Unfortunately, I can't seem to view that ticket. Can you provide more details on how you tracked down the issue?


author: Linus Lindroth
body: hi, can you please post the solution here? Only you can access that support case.


author: Sara
body: Please include the solution directly here. No one other than you can see the support ticket.


Tags: addon-com.innovalog.jmwe.jira-misc-workflow-extensions

authentication

hipchat

workflow