Confluence: No authenticaton
Asked by Lars Hadidi:

Since our last reboot, the confluence server is not authenticating users anymore. It isn't listed under Atliassian Tools on the other applications (JIRA, Bitbucket) either.

The server startup isn't ununual, the authentication is managed via Crowd.


Answers:
author: Elifcan Cakmak
body: Hello,

What are the logs saying? It's very hard to say what went wrong without checking the logs first. You should check both Confluence ant Crowd logs. If you have a local admin user on Confluence, you can try to login with that first and check Crowd integration.

For integration with other tools, you need to check Application Links configuration. For listing, you need to check Application Navigator configuration.

Regards.

comments: author: Lars Hadidi
body: Thanks for your quick reply,

going through the logs of the Confluence's tomcat shows several exceptions:

Regular occurence of

org.apache.catalina.loader.WebappClassLoaderBase.checkThreadLocalMapForLeaks The web application \[ROOT\] created a ThreadLocal with key of type \[com.opensymphony.xwork.ActionContext.ActionContextThreadLocal\] (value \[com.opensymphony.xwork.ActionContext$ActionContextThreadLocal@379bbafd\]) and a value of type \[com.opensymphony.xwork.ActionContext\] (value \[com.opensymphony.xwork.ActionContext@22d1bbef\]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and avoid a probable memory leak.

Few occurences of

org.apache.catalina.valves.StuckThreadDetectionValve.notifyStuckThreadDetected Thread "http-nio-8090-exec-4" (id=161) has been active for 61,682 milliseconds (since 4/23/19 2:19 PM) to serve the same request for https://.../client and may be stuck (configured threshold for this StuckThreadDetectionValve is 60 seconds). There is/are 1 thread(s) in total that are monitored by this Valve and may be stuck.

Many occurences of

\[http-nio-8090-exec-9\] org.apache.catalina.core.StandardHostValve.custom Exception Processing ErrorPage\[errorCode=500, location=/500page.jsp\]  
org.springframework.transaction.CannotCreateTransactionException: Could not open Hibernate Session for transaction; nested exception is net.sf.hibernate.exception.GenericJDBCException: Unable to acquire JDBC Connection

and WARNINGS in the beginning:

\[http-nio-8090-exec-41\] org.apache.cxf.phase.PhaseInterceptorChain.doDefaultLogging Interceptor for {<http://atlassian.com/webservices/}Lists#{http://atlassian.com/webservices/}GetList> has thrown exception, unwinding now  
org.apache.cxf.interceptor.Fault: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Usage constraint TLSServer check failed: SHA1 used with certificate: CN=DFN-Verein PCA Global - G01, OU=DFN-PKI, O=DFN-Verein, C=DE. Usage was tls server

Caused by: java.security.cert.CertPathValidatorException: Usage constraint TLSServer check failed: SHA1 used with certificate: CN=DFN-Verein PCA Global - G01, OU=DFN-PKI, O=DFN-Verein, C=DE. Usage was tls server

The SysLog reads

confluence kernel: \[598607.587359\] \[UFW BLOCK\] IN=eth0 OUT= MAC=... src=46.232.112.20 DST=... LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=63497 PROTO=TCP SPT=48120 DPT=19908 WINDOW=1024 RES=0x00 SYN URGP=0  
confluence ntpd\[3293\]: error resolving pool 3.ubuntu.pool.ntp.org: Temporary failure in name resolution (-3)


author: Elifcan Cakmak
body: Hello,

For the first exception, which is a memory leak error, check out this question and answer. You probably need to increase memory for Confluence.

<https://community.atlassian.com/t5/Confluence-questions/Confluence-don-t-start-after-reboot/qaq-p/1040142>

For the second exception, which is a thread stuck error, check out this question and answer. Accepted answer could be what you are looking for, since it is the same error.

<https://community.atlassian.com/t5/Confluence-questions/Confluence-hangs-when-logging-in/qaq-p/716137>

For the third exception, which is a JDBC error, check out this documentation. It is the same error as yours:

<https://confluence.atlassian.com/confkb/unable-to-start-due-to-net-sf-hibernate-exception-genericjdbcexception-cannot-open-connection-128843899.html>

Last one, the warning is about certification. Something is probably wrong with your certification. You can try to renew it.

Regards.


Tags: confluence-server

server