Symptoms
After clicking on 'Remember my login', if you close and reopen the browser and navigate to your confluence, you need to log in again (i.e. the 'Remember my login' functionality is not working). The cookie is set correctly in the browser, so it is not a browser issue.
2008-04-26 11:32:58,212 WARN [TP-Processor15] [atlassian.seraph.auth.DefaultAuthenticator] login User: tried to lo
gin but they do not have USE permission or weren't found. Deleting cookie.
Cause
If the cookie being set has a ']' character as does "Yi]i[i[hXh\iTgVfOgUgUmRfPfTfVg[gYf[KB:gSf\gXg" in the above example then you could be suffering from an issue that affects tomcat v.5.5.26 .
Tomcat v.5.5.26 chops off the characters after the ']', thus the above cookie would be read as "Yi" and when this is decoded it of course does not decode to the right user values, hence producing the error:
2008-04-26 11:32:58,212 WARN [TP-Processor15] [atlassian.seraph.auth.DefaultAuthenticator] login User: tried to lo gin but they do not have USE permission or weren't found. Deleting cookie.
which doesn't allow the user to login again.
Please see SER-117 for more details or please read Beware of Hash Cookies written by one of developers.
Resolution
As stated in SER-117 it is advisable to downgrade to v.5.5.20 instead as this version doesn't have the occurrence of such problem.
This bug has been fixed in Confluence 2.8.2 (CONF-11410), if you are using Confluence 2.8 you can try to upgrade your seraph library to Seraph 0.38, which you can download from http://repository.atlassian.com/maven2/com/atlassian/seraph/atlassian-seraph/0.38/atlassian-seraph-0.38.jar
Since this library is also used by the Trusted Applications functionality there is a minor chance that unforeseen side-effects may occur with the Jira Issues Macro. If you encounter new problems with that macro after upgrading to Seraph 0.38, please mention the upgrade when you report the bug.
Additional Information
| Severity | Medium |
|---|---|
| Regular Expression | login\sUser:\s*tried\sto\slo\sgin\sbut\sthey\sdo\snot\shave\sUSE\spermission\sor\sweren't\sfound\.\sDeleting\scookie\. |
| Article ID | CONFKB158106473 |