Keep getting redirected to login page after logging in (User's login token got rejected upon logging in)
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
サーバー*製品のサポートは 2024 年 2 月 15 日に終了しました。サーバー製品を利用している場合は、アトラシアンのサーバー製品のサポート終了のお知らせページにて移行オプションをご確認ください。
*Fisheye および Crucible は除く
問題
When Jira users login into the instance, it redirects them back to the login page.
環境
Jira Server/Data Center on any version from 8.0.0.
診断
The following appears in the file atlassian-jira-security.log:
2015-12-24 17:13:19,709 Navlink Plugin Executor:thread-5 anonymous Setting JIRA Auth Context to be 'XXXXX'
2015-12-24 17:13:19,709 Navlink Plugin Executor:thread-5 anonymous Setting JIRA Auth Context to be 'XXXXX'
2015-12-24 17:13:20,005 http-bio-8080-exec-15 XXXXX 1033x416x1 - XXX.XX.XX.XXX,127.0.0.1 / There is no cookie header.
2015-12-24 17:13:20,005 http-bio-8080-exec-15 XXXXX 1033x416x1 - XXX.XX.XX.XXX,127.0.0.1 / The request has arrived WITHOUT a JSESSIONID cookie
2015-12-24 17:13:20,413 http-bio-8080-exec-1 XXXXX 1033x417x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/MyJiraHome.jspa There is no cookie header.
2015-12-24 17:13:20,413 http-bio-8080-exec-1 XXXXX 1033x417x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/MyJiraHome.jspa The request has arrived WITHOUT a JSESSIONID cookie
2015-12-24 17:13:20,414 http-bio-8080-exec-1 XXXXX 1033x417x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/MyJiraHome.jspa HttpSession created [1sor81a]
2015-12-24 17:13:20,839 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa There is no cookie header.
2015-12-24 17:13:20,839 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa The request has arrived WITHOUT a JSESSIONID cookie
2015-12-24 17:13:20,841 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa HttpSession created [yp7jig]
2015-12-24 17:13:20,842 http-bio-8080-exec-3 XXXXX 1033x418x1 - XXX.XX.XX.XXX,127.0.0.1 /secure/Dashboard.jspa Gadget login called with lastLoginResult : null
2015-12-24 17:13:21,877 http-bio-8080-exec-6 XXXXX 1033x419x1 - XXX.XX.XX.XXX,127.0.0.1 /rest/helptips/1.0/tips There is no cookie header.
2015-12-24 17:13:21,877 http-bio-8080-exec-6 XXXXX 1033x419x1 - XXX.XX.XX.XXX,127.0.0.1 /rest/helptips/1.0/tips The request has arrived WITHOUT
原因
The instance is serving both HTTP and HTTPS. However, the secure parameter in SSL connector is set to TRUE.
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"/>
ソリューション
Only set secure = "true" when JIRA instance is serving HTTPS ONLY. If JIRA serves both HTTP and HTTPS, then remove the secure parameter secure = "true"
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https"
clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"/>