Keep getting redirected to login page after logging in (User's login token got rejected upon logging in)
Problem
When JIRA users login into the instance, it redirects them back to the login page. atlassian-jira-security.log shows the authentication passed.
The following appears in the atlassian-jira-security.log
2015-12-24 17:13:19,709 Navlink Plugin Executor:thread-5 anonymous Setting JIRA Auth Context to be 'XXXXX'
2015-12-24 17:13:19,709 Navlink Plugin Executor:thread-5 anonymous Setting JIRA Auth Context to be 'XXXXX'
2015-12-24 17:13:20,005 http-bio-8080-exec-15 XXXXX 1033x416x1 - XXX.XX.XX.XXX,127.0.0.1 / There is no cookie header.
2015-12-24 17:13:20,005 http-bio-8080-exec-15 XXXXX 1033x416x1 - XXX.XX.XX.XXX,127.0.0.1 / The request has arrived WITHOUT a JSESSIONID cookie
2015-12-24 17:13:20,413 http-bio-8080-exec-1 XXXXX 1033x417x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/MyJiraHome.jspa There is no cookie header.
2015-12-24 17:13:20,413 http-bio-8080-exec-1 XXXXX 1033x417x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/MyJiraHome.jspa The request has arrived WITHOUT a JSESSIONID cookie
2015-12-24 17:13:20,414 http-bio-8080-exec-1 XXXXX 1033x417x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/MyJiraHome.jspa HttpSession created [1sor81a]
2015-12-24 17:13:20,839 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa There is no cookie header.
2015-12-24 17:13:20,839 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa The request has arrived WITHOUT a JSESSIONID cookie
2015-12-24 17:13:20,841 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa HttpSession created [yp7jig]
2015-12-24 17:13:20,842 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa Gadget login called with lastLoginResult : null
2015-12-24 17:13:21,877 http-bio-8080-exec-6 XXXXX 1033x419x1 - XXX.XX.XX.XXX,127.0.0.1 /rest/helptips/1.0/tips There is no cookie header.
2015-12-24 17:13:21,877 http-bio-8080-exec-6 XXXXX 1033x419x1 - XXX.XX.XX.XXX,127.0.0.1 /rest/helptips/1.0/tips The request has arrived WITHOUT Cause
The instance is serving both HTTP and HTTPS. However, the secure parameter in SSL connector is set to TRUE.
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"/>
Resolution
Only set secure = "true" when JIRA instance is serving HTTPS ONLY. If JIRA serves both HTTP and HTTPS, then remove the secure parameter secure = "true"
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https"
clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"/>
Last modified on Mar 30, 2016
Powered by Confluence and Scroll Viewport.