ApplicationPermissionException error when integrating Crowd with Confluence as a user directory
Asked by Puneet Baradia:

Hi

I am unable to login through local admin credentials in Confluence as well as through SSO after the import from Prod. to QA got failed and I got following errors in logs:

Caused by: com.atlassian.crowd.exception.ApplicationPermissionException: HTTP Status 403 -- ForbiddenType Status ReportMessage Client with address "10.84.153.119" is forbidden from making requests to the application, confluence.Description The server understood the request but refuses to authorize it.Apache Tomcat/8.5.34

2019-05-07 03:56:22,294 WARN \[Caesium-1-1\] \[impl.schedule.caesium.JobRunnerWrapper\] runJob Scheduled job LaasPerformanceLoggingJob#LaasPerformanceLoggingJob completed unsuccessfully with response JobRunnerResponse\[runOutcome=ABORTED,message='LaaS performance logging is turned off'\]

2019-05-07 04:00:00,012 WARN \[Caesium-1-2\] \[impl.schedule.caesium.JobRunnerWrapper\] runJob Scheduled job com.atlassian.confluence.plugins.confluence-periodic-analytics-events:confluenceDailyStatisticsPublisherJob#confluenceDailyStatisticsPublisherJob completed unsuccessfully with response JobRunnerResponse\[runOutcome=ABORTED,message='Can't collect analytics.'\]

2019-05-07 04:01:22,294 WARN \[Caesium-1-1\] \[impl.schedule.caesium.JobRunnerWrapper\] runJob Scheduled job LaasPerformanceLoggingJob#LaasPerformanceLoggingJob completed unsuccessfully with response JobRunnerResponse\[runOutcome=ABORTED,message='LaaS performance logging is turned off'\]

2019-05-07 04:03:39,230 ERROR \[http-nio-8090-exec-3\] \[crowd.manager.application.ApplicationServiceGeneric\] authenticateUser Directory 'New Crowd Server' is not functional during authentication of 'confluence-admin'. Skipped.

-- referer: <https://confluence-qa.cls.bcs.cnb/dologin.action> \| url: /dologin.action \| traceId: 63052b5f8ad76606

2019-05-07 04:03:39,233 WARN \[http-nio-8090-exec-3\] \[confluence.impl.hibernate.ConfluenceHibernateTransactionManager\] doRollback Performing rollback. Transactions:

-\>\[com.atlassian.confluence.user.DefaultUserAccessor.authenticate\]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #682686972)

-- referer: <https://confluence-qa.cls.bcs.cnb/dologin.action> \| url: /dologin.action \| traceId: 63052b5f8ad76606

2019-05-07 04:03:39,234 WARN \[http-nio-8090-exec-3\] \[atlassian.confluence.user.ConfluenceAuthenticator\] authenticate OperationFailedException caught while authenticating user \<confluence-admin\>.

-- referer: <https://confluence-qa.cls.bcs.cnb/dologin.action> \| url: /dologin.action \| traceId: 63052b5f8ad76606

com.atlassian.crowd.exception.runtime.OperationFailedException

at com.atlassian.crowd.embedded.core.CrowdServiceImpl.convertOperationFailedException(CrowdServiceImpl.java:676)

at com.atlassian.crowd.embedded.core.CrowdServiceImpl.authenticate(CrowdServiceImpl.java:76)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

2019-05-07 03:55:17,341 ERROR \[http-nio-8090-exec-2\] \[crowd.manager.application.ApplicationServiceGeneric\] authenticateUser Directory 'New Crowd Server' is not functional during authentication of 'confluence-admin'. Skipped.

-- referer: <https://confluence-qa.cls.bcs.cnb/dologin.action> \| url: /dologin.action \| traceId: 5abaf2cbc612a239

2019-05-07 03:55:17,348 WARN \[http-nio-8090-exec-2\] \[confluence.impl.hibernate.ConfluenceHibernateTransactionManager\] doRollback Performing rollback. Transactions:

-\>\[com.atlassian.confluence.user.DefaultUserAccessor.authenticate\]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #246236325)

-- referer: <https://confluence-qa.cls.bcs.cnb/dologin.action> \| url: /dologin.action \| traceId: 5abaf2cbc612a239

2019-05-07 03:55:17,349 WARN \[http-nio-8090-exec-2\] \[atlassian.confluence.user.ConfluenceAuthenticator\] authenticate OperationFailedException caught while authenticating user \<confluence-admin\>.

-- referer: <https://confluence-qa.cls.bcs.cnb/dologin.action> \| url: /dologin.action \| traceId: 5abaf2cbc612a239

com.atlassian.crowd.exception.runtime.OperationFailedException


Answers:
author: Elifcan Cakmak
body: Hello,

Check out this documentation:

<https://confluence.atlassian.com/jirakb/connecting-jira-to-crowd-throwing-applicationpermissionexception-301662474.html>

You should try to add this IP address to the remote addressed of the application on Crowd like this:

![Selection_299.png](https://community.atlassian.com/t5/image/serverpage/image-id/53706iD8D647B8214DC2E7/image-size/large?v=v2&px=999 "Selection_299.png")

After that you should be able to login with your crowd user.

Regards.

comments: author: Puneet Baradia
body: Hi Elifcan

Thanks for your response.

I already tried that solution but did not got any success as the error remains the same.


author: Elifcan Cakmak
body: It's interesting. Have you tried to restart confluence? Also it's not meaningful that you can't login with a local admin user. There is nothing about that in the logs. All I see is crowd related problems. What is the error? Are you sue that username and password correct?

We also encountered this issue and the problem was solved with the way I suggested.

This is the documentation for the other error you encounter: (crowd is not functional)

<https://confluence.atlassian.com/crowdkb/crowd-user-authentication-fails-with-directory-x-is-not-functional-during-authentication-error-391086721.html>

This suggests there may be network issues. I recommend restart crowd first and wait until it's fully started. Then restart confluence and see what happens.

Regards.


author: Puneet Baradia
body: Yes, I tried restarting confluence.

I also tried restarting Crowd and then Confluence but that also didn't solved my issue.

Can you please suggest something new ?


Tags: confluence-administration