Failed to create Application Links due to "We can't enable the incoming authentication because Confluence is not reachable"
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
要約
The "We can't enable the incoming authentication because Confluence is not reachable" message error appears when creating an Application Link between Confluence and Jira or Bitbucket.
環境
- Confluence 7.11. or higher
- EasySSO app 4.6.7 or below
診断
EasySSO plugin version 4.6.7 or below is enabled on Confluence and the following error messages are appearing on the atlassian-confluence.log:
atlassian-confluence.log
2022-07-20 01:00:17,460 ERROR [https-jsse-nio2-8443-exec-3] [mywork.host.rest.ExceptionLogger] toResponse Exception thrown from REST resource
-- url: /rest/mywork/1/client | traceId: 1bd6de9f3e5b6df9 | userName: anonymous
java.lang.IllegalStateException: Failed to obtain client registration lock, cannot update potential client e154d593-6c41-3466-8ca0-1689bdd022b1
at com.atlassian.mywork.host.service.ClientServiceImpl.updatePotentialClient(ClientServiceImpl.java:362)
at com.atlassian.mywork.host.service.ClientServiceImpl.updatePotentialClient(ClientServiceImpl.java:310)
at com.atlassian.mywork.host.rest.ClientResource.clientRegistration(ClientResource.java:50)
..
at org.techtime.easysso.PrincipalUserComponent.processPrincipalUser(PrincipalUserComponent.java:161)
at org.techtime.easysso.ntlm.statemachine.strategy.AbstractAllUploadedStrategy.doPrincipalFiltering(AbstractAllUploadedStrategy.java:125)
at org.techtime.easysso.PrincipalFilter.doFilter(PrincipalFilter.java:27)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(DelegatingPluginFilter.java:62)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(IteratingFilterChain.java:37)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.lambda$doFilter$0(DelegatingPluginFilter.java:57)
at org.techtime.easysso.ntlm.statemachine.strategy.AbstractAllUploadedStrategy.doX509Filtering(AbstractAllUploadedStrategy.java:146)
at org.techtime.easysso.x509.X509Filter.doFilter(X509Filter.java:27)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(DelegatingPluginFilter.java:62)
...
at java.lang.reflect.Method.invoke(Method.java:498)
at org.techtime.easysso.ntlm.NtlmFilterComponent.invokeMethod(NtlmFilterComponent.java:649)
at org.techtime.easysso.ntlm.NtlmFilterComponent.doFilter(NtlmFilterComponent.java:596)
at org.techtime.easysso.ntlm.statemachine.strategy.FullyEnabledStrategy.doNTLMFiltering(FullyEnabledStrategy.java:62)
at org.techtime.easysso.ntlm.JespaFilter.doFilter(JespaFilter.java:47)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.doFilter(DelegatingPluginFilter.java:62)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(IteratingFilterChain.java:37)
at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter.lambda$doFilter$0(DelegatingPluginFilter.java:57)
...
atlassian-confluence.log
2022-07-25 15:40:28,166 WARN [AtlassianEvent::CustomizableThreadFactory-1] [applinks.internal.capabilities.DefaultRemoteCapabilitiesService] getApplinkSafe Exception trying to get Applink for manifest with ID e154d593-6c41-3466-8ca0-1689bdd022b1
-- url: /rest/applinks/3.0/applicationlinkForm/manifest.json | traceId: 9a3c11ec53e97e5c | userName: jperun | referer: https://confluence-sbx.bottomline.tech/plugins/servlet/applinks/listApplicationLinks
2022-07-25 15:40:42,630 ERROR [https-jsse-nio2-8443-exec-2] [core.rest.ui.CreateApplicationLinkUIResource] tryToFetchManifest Exception thrown while retrieving manifest
-- referer: https://confluence-sbx.bottomline.tech/plugins/servlet/applinks/listApplicationLinks | url: /rest/applinks/3.0/applicationlinkForm/manifest.json | traceId: 3ab2630190388774 | userName: jperun
java.net.URISyntaxException: Expected scheme-specific part at index 6: https:
at java.net.URI$Parser.fail(URI.java:2848)
at java.net.URI$Parser.failExpecting(URI.java:2854)
at java.net.URI$Parser.parse(URI.java:3057)
at java.net.URI.<init>(URI.java:588)
at java.net.URL.toURI(URL.java:946)原因
Confluence from version 7.11 introduced a RemoteIPValve configuration element in server.xml of the Tomcat server:
server.xml
...
<!-- http://tomcat.apache.org/tomcat-9.0-doc/config/valve.html#Remote_IP_Valve -->
<Valve className="org.apache.catalina.valves.RemoteIpValve" />
...This valve replaces the proxy IP in the request with the client IP and this is causing issues with EasySSO IP Filtering when you are trying to filter by the proxy IP.
ソリューション
You can choose one of the following solutions:
- Upgrade the EasySSO app to a newer version when available; or
- Disable the EasySSO app and create the Application Links
最終更新日 2023 年 4 月 7 日
Powered by Confluence and Scroll Viewport.