Authentication broken for Crowd or JIRA users

Still need help?

The Atlassian Community is here for you.

Ask the community

This article requires fixes

This article has been Flagged for fixing. Use caution when using it and fix it if you have Publisher rights.

Symptoms

You have delegated Bamboo user management to either Crowd or JIRA and after performing upgrade or migration of JIRA/Crowd, no user is able to login.

The atlassian-bamboo.log shows the following:

Caused by: com.atlassian.crowd.exception.InvalidAuthenticationException: Application failed to authenticate
	at com.atlassian.crowd.integration.rest.service.RestExecutor.throwError(RestExecutor.java:457)
	at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.andReceive(RestExecutor.java:307)
	at com.atlassian.crowd.integration.rest.service.RestCrowdClient.searchGroupNames(RestCrowdClient.java:545)
	at com.atlassian.crowd.integration.atlassianuser.UserGroupFetcher.fetch(UserGroupFetcher.java:38)
	at com.atlassian.crowd.integration.atlassianuser.UserGroupCache.fetchAndSetSnapshot(UserGroupCache.java:87)
	... 7 more
2013-01-25 19:26:26,275 INFO [QuartzScheduler_Worker-4] [AuthChallengeProcessor] basic authentication scheme selected
2013-01-25 19:26:26,276 INFO [QuartzScheduler_Worker-4] [HttpMethodDirector] Failure authenticating with BASIC 'Crowd REST Service'@xxxx:8080
2013-01-25 19:26:26,276 WARN [QuartzScheduler_Worker-4] [HttpMethodBase] Going to buffer response body of large or unknown size. Using getResponseBodyAsStream instead is recommended.
2013-01-25 19:26:26,276 WARN [QuartzScheduler_Worker-4] [CrowdClientControl] Failed to refresh the user and group cache
com.atlassian.user.EntityException: com.atlassian.crowd.exception.InvalidAuthenticationException: Application failed to authenticate
	at com.atlassian.crowd.integration.atlassianuser.UserGroupCache.fetchAndSetSnapshot(UserGroupCache.java:107)
	at com.atlassian.crowd.integration.atlassianuser.UserGroupCache.refreshCache(UserGroupCache.java:429)
	at com.atlassian.crowd.integration.atlassianuser.UserGroupCache.refreshCacheIfNecessary(UserGroupCache.java:450)
	at com.atlassian.crowd.integration.atlassianuser.CrowdClientControl.refreshCacheIfNecessary(CrowdClientControl.java:103)
	at com.atlassian.bamboo.user.BambooUserRefreshJobScheduler$BambooUserRefreshJob.execute(BambooUserRefreshJobScheduler.java:73)
	at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
	at com.atlassian.bamboo.quartz.SystemAuthorizedThreadPool$1.run(SystemAuthorizedThreadPool.java:38)
	at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:525)
Caused by: com.atlassian.crowd.exception.InvalidAuthenticationException: Application failed to authenticate
	at com.atlassian.crowd.integration.rest.service.RestExecutor.throwError(RestExecutor.java:457)
	at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.andReceive(RestExecutor.java:307)
	at com.atlassian.crowd.integration.rest.service.RestCrowdClient.searchGroupNames(RestCrowdClient.java:545)
	at com.atlassian.crowd.integration.atlassianuser.UserGroupFetcher.fetch(UserGroupFetcher.java:38)
	at com.atlassian.crowd.integration.atlassianuser.UserGroupCache.fetchAndSetSnapshot(UserGroupCache.java:87)

Cause

This issue can happen if there are any changes in the Bamboo application created in JIRA/Crowd. For example, the Bamboo application created in JIRA or Crowd may have a wrong name, password or URL.

Resolution

Please follow these steps:

  1. Go to JIRA user server page or step 2 of the Crowd integration page and change the password and or URL if there is any change

  2. Navigate to Bamboo $BAMBOOHOME/xml-data/configuration/crowd.properties file and effect the changes you have made in step 1

  3. Restart Bamboo and you should be able to login with your JIRA or Crowd password.

There are some things you might also want to try if integrating with JIRA:

  1. Bamboo side:
    1. Make sure that the base URL is in host format. Localhost and/or ip address might not work.
    2. Create an additional user with admin rights, e.g., bamboo-user.
  2. JIRA side:
    1. Create a group named as bamboo-admin. The syntax must be the same as in Bamboo.
    2. Create the bamboo-user as a member of bamboo-admin and jira-users.
    3. Create the application link for Bamboo.
  3. Log in back in Bamboo as bamboo-user.
  4. Link the user repository.
  5. If any user from JIRA needs to have admin rights they must be members in bamboo-admin group.

 

If you are still having problems, please contact support on https://support.atlassian.com attaching a zip of the BAMBOO_HOME/xml-data/configuration folder, the server logs and the URL used in accessing Crowd/JIRA.

Last modified on Nov 2, 2018

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.