Confluence Fails to Start after Upgrade Due to 'Could not load security config 'seraph-config.xml'

Symptoms

Confluence, integrated with Crowd, fails to start after an upgrade to Confluence 3.4. The following errors appear in atlassian-confluence.log:

Caused by: org.springframework.beans.BeanInstantiationException: Could not instantiate bean class [com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration]: 
Constructor threw exception; nested exception is java.lang.RuntimeException: Could not load security config 'seraph-config.xml': 
Exception configuring from 'seraph-config.xml : com.atlassian.seraph.config.ConfigurationException: Could not getRequest service: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor : java.lang.ClassNotFoundException: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor
Caused by: java.lang.RuntimeException: Could not load security config 'seraph-config.xml': Exception configuring from 'seraph-config.xml : 
com.atlassian.seraph.config.ConfigurationException: Could not getRequest service: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor : java.lang.ClassNotFoundException: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor
	at com.atlassian.seraph.config.SecurityConfigFactory.loadInstance(SecurityConfigFactory.java:60)
	at com.atlassian.seraph.config.SecurityConfigFactory.getInstance(SecurityConfigFactory.java:21)
	at com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration.<init>(DefaultRememberMeConfiguration.java:21)
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
	at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
...
Caused by: com.atlassian.seraph.config.ConfigurationException: Exception configuring from 'seraph-config.xml : 
com.atlassian.seraph.config.ConfigurationException: Could not getRequest service: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor : java.lang.ClassNotFoundException: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor
	at com.atlassian.seraph.config.SecurityConfigImpl.<init>(SecurityConfigImpl.java:170)
	at com.atlassian.seraph.config.SecurityConfigFactory.loadInstance(SecurityConfigFactory.java:56)
	... 74 more
Caused by: com.atlassian.seraph.config.ConfigurationException: Could not getRequest service: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor : java.lang.ClassNotFoundException: 
com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor
	at com.atlassian.seraph.config.SecurityConfigImpl.configureInterceptors(SecurityConfigImpl.java:368)
	at com.atlassian.seraph.config.SecurityConfigImpl.<init>(SecurityConfigImpl.java:163)
	... 75 more
Caused by: java.lang.ClassNotFoundException: com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor
	at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1516)
	at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1361)
	at com.opensymphony.util.ClassLoaderUtil.loadClass(ClassLoaderUtil.java:104)
	at com.atlassian.seraph.config.SecurityConfigImpl.configureInterceptors(SecurityConfigImpl.java:360)
	... 76 more

Cause

The <<confluence_install>>/confluence/WEB-INF/classes/seraph-config.xml from the previous Confluence version is being used, which contains a deprecated interceptor:

    <interceptors>
        <interceptor name="session-invalidator" class="com.atlassian.confluence.security.seraph.SessionInvalidatingLoginInterceptor"/>
    </interceptors>

Resolution

Ensure that seraph-config.xml from Confluence 3.4 is being used, together with the changes suggested in Custom SSOAuthenticators do not work after upgrading to Confluence 3.4 and above.


Was this helpful?

Thanks for your feedback!

Why was this unhelpful?

Have a question about this article?

See questions about this article

Powered by Confluence and Scroll Viewport