Uploaded image for project: 'Atlassian Cloud'
  1. Atlassian Cloud
  2. CLOUD-8029

Cannot enable/install plugins due to Atlassian Connect error with password policies

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Low
    • None
    • None

    Description

      Summary

      After the latest release, some add-ons are failing to start correctly. This is due to:

      1. The 'Prevent password reuse' policy not set as 'Never' or
      2. The 'Password expiry' policy to set as 'Never'

      Steps to Reproduce

      1. In User Management, change 'Prevent password reuse' from 'Never' to 'Users cannot reuse any of their last' and enter any number of passwords greater than 0.
        • Alternatively, change 'Password expiry' from 'Never' to 'Expire after' and enter any number of days greater than 0.
      2. Find a plugin with a free trial period
      3. Try to start free trial

      Expected Results

      Trial is started

      Actual Results

      Trial is not started. This error is generally found in the logs:

      2015-09-18 12:30:36.270630500 com.atlassian.upm.spi.PluginInstallException: com.atlassian.crowd.exception.OperationFailedException: Error from Crowd server propagated to here via REST API (check the Crowd server logs for details): The credentials should not be encrypted for the unique password check
      2015-09-18 12:30:36.270632500 	at com.atlassian.plugin.connect.plugin.installer.ConnectUPMInstallHandler.installPlugin(ConnectUPMInstallHandler.java:105)
      2015-09-18 12:30:36.270632500 	at com.atlassian.upm.core.install.DefaultPluginInstallationService.execute(DefaultPluginInstallationService.java:118)
      2015-09-18 12:30:36.270634500 	at com.atlassian.upm.core.install.DefaultPluginInstallationService.install(DefaultPluginInstallationService.java:92)
      2015-09-18 12:30:36.270636500 	at com.atlassian.upm.install.UpmPluginInstallationService.install(UpmPluginInstallationService.java:97)
      2015-09-18 12:30:36.270637500 	at com.atlassian.upm.core.rest.resources.install.InstallTask.installFromFile(InstallTask.java:156)
      2015-09-18 12:30:36.270637500 	at com.atlassian.upm.core.rest.resources.install.InstallRemotePluginTask$1.apply(InstallRemotePluginTask.java:78)
      2015-09-18 12:30:36.270638500 	at com.atlassian.upm.core.rest.resources.install.InstallRemotePluginTask$1.apply(InstallRemotePluginTask.java:66)
      2015-09-18 12:30:36.270639500 	at com.atlassian.upm.api.util.Either$Right.fold(Either.java:160)
      2015-09-18 12:30:36.270639500 	at com.atlassian.upm.core.rest.resources.install.InstallRemotePluginTask.executeTask(InstallRemotePluginTask.java:65)
      2015-09-18 12:30:36.270640500 	at com.atlassian.upm.core.rest.resources.install.InstallTask.run(InstallTask.java:81)
      2015-09-18 12:30:36.270641500 	at com.atlassian.upm.core.async.AsynchronousTaskManager.executeTask(AsynchronousTaskManager.java:124)
      2015-09-18 12:30:36.270642500 	at com.atlassian.upm.core.async.AsynchronousTaskManager$1.call(AsynchronousTaskManager.java:102)
      2015-09-18 12:30:36.270642500 	at com.atlassian.upm.core.async.AsynchronousTaskManager$1.call(AsynchronousTaskManager.java:99)
      2015-09-18 12:30:36.270644500 	at com.atlassian.sal.core.executor.ThreadLocalDelegateCallable.call(ThreadLocalDelegateCallable.java:42)
      2015-09-18 12:30:36.270645500 	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      2015-09-18 12:30:36.270645500 	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      2015-09-18 12:30:36.270645500 	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      2015-09-18 12:30:36.270650500 	at java.lang.Thread.run(Thread.java:745)
      2015-09-18 12:30:36.270651500 Caused by: com.atlassian.plugin.connect.api.usermanagment.ConnectAddOnUserInitException: com.atlassian.crowd.exception.OperationFailedException: Error from Crowd server propagated to here via REST API (check the Crowd server logs for details): The credentials should not be encrypted for the unique password check
      2015-09-18 12:30:36.270653500 	at com.atlassian.plugin.connect.crowd.usermanagement.EmbeddedCrowd.updateUserCredential(EmbeddedCrowd.java:144)
      2015-09-18 12:30:36.270653500 	at com.atlassian.plugin.connect.crowd.usermanagement.ConnectCrowdBase.createOrEnableUser(ConnectCrowdBase.java:53)
      2015-09-18 12:30:36.270654500 	at com.atlassian.plugin.connect.crowd.usermanagement.CloudAwareCrowdService.createOrEnableUser(CloudAwareCrowdService.java:89)
      2015-09-18 12:30:36.270657500 	at com.atlassian.plugin.connect.crowd.usermanagement.CrowdAddOnUserService.createOrEnableAddOnUser(CrowdAddOnUserService.java:93)
      2015-09-18 12:30:36.270657500 	at com.atlassian.plugin.connect.crowd.usermanagement.CrowdAddOnUserService.getOrCreateUserName(CrowdAddOnUserService.java:62)
      2015-09-18 12:30:36.270658500 	at com.atlassian.plugin.connect.plugin.installer.ConnectAddonManager.enableConnectAddon(ConnectAddonManager.java:290)
      2015-09-18 12:30:36.270659500 	at com.atlassian.plugin.connect.plugin.installer.ConnectAddonManager.installConnectAddon(ConnectAddonManager.java:262)
      2015-09-18 12:30:36.270660500 	at com.atlassian.plugin.connect.plugin.installer.DefaultConnectAddOnInstaller.install(DefaultConnectAddOnInstaller.java:128)
      2015-09-18 12:30:36.270660500 	at com.atlassian.plugin.connect.plugin.installer.ConnectUPMInstallHandler.installPlugin(ConnectUPMInstallHandler.java:95)
      2015-09-18 12:30:36.270662500 	... 17 more
      2015-09-18 12:30:36.270662500 Caused by: com.atlassian.crowd.exception.OperationFailedException: Error from Crowd server propagated to here via REST API (check the Crowd server logs for details): The credentials should not be encrypted for the unique password check
      2015-09-18 12:30:36.270664500 	at com.atlassian.crowd.integration.rest.service.RestCrowdClient.handleCommonExceptions(RestCrowdClient.java:1507)
      2015-09-18 12:30:36.270665500 	at com.atlassian.crowd.integration.rest.service.RestCrowdClient.updateUserCredential(RestCrowdClient.java:213)
      2015-09-18 12:30:36.270666500 	at com.atlassian.crowd.directory.RemoteCrowdDirectory.updateUserCredential(RemoteCrowdDirectory.java:287)
      2015-09-18 12:30:36.270667500 	at com.atlassian.crowd.directory.DbCachingRemoteDirectory.updateUserCredential(DbCachingRemoteDirectory.java:559)
      2015-09-18 12:30:36.270667500 	at com.atlassian.crowd.manager.directory.DirectoryManagerGeneric.updateUserCredential(DirectoryManagerGeneric.java:447)
      2015-09-18 12:30:36.270668500 	... 3 filtered
      2015-09-18 12:30:36.270668500 	at java.lang.reflect.Method.invoke(Method.java:497)
      2015-09-18 12:30:36.270669500 	at com.atlassian.plugin.util.ContextClassLoaderSettingInvocationHandler.invoke(ContextClassLoaderSettingInvocationHandler.java:30)
      2015-09-18 12:30:36.270669500 	at com.sun.proxy.$Proxy200.updateUserCredential(Unknown Source)
      2015-09-18 12:30:36.270670500 	... 3 filtered
      2015-09-18 12:30:36.270671500 	at java.lang.reflect.Method.invoke(Method.java:497)
      2015-09-18 12:30:36.270671500 	at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:317)
      2015-09-18 12:30:36.270673500 	at org.eclipse.gemini.blueprint.service.importer.support.internal.aop.ServiceInvoker.doInvoke(ServiceInvoker.java:56)
      2015-09-18 12:30:36.270673500 	at org.eclipse.gemini.blueprint.service.importer.support.internal.aop.ServiceInvoker.invoke(ServiceInvoker.java:60)
      2015-09-18 12:30:36.270674500 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
      2015-09-18 12:30:36.270677500 	at org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
      2015-09-18 12:30:36.270677500 	at org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
      2015-09-18 12:30:36.270678500 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
      2015-09-18 12:30:36.270679500 	at org.eclipse.gemini.blueprint.service.util.internal.aop.ServiceTCCLInterceptor.invokeUnprivileged(ServiceTCCLInterceptor.java:70)
      2015-09-18 12:30:36.270680500 	at org.eclipse.gemini.blueprint.service.util.internal.aop.ServiceTCCLInterceptor.invoke(ServiceTCCLInterceptor.java:53)
      2015-09-18 12:30:36.270680500 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
      2015-09-18 12:30:36.270682500 	at org.eclipse.gemini.blueprint.service.importer.support.LocalBundleContextAdvice.invoke(LocalBundleContextAdvice.java:57)
      2015-09-18 12:30:36.270683500 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
      2015-09-18 12:30:36.270683500 	at org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
      2015-09-18 12:30:36.270685500 	at org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
      2015-09-18 12:30:36.270685500 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
      2015-09-18 12:30:36.270686500 	at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:207)
      2015-09-18 12:30:36.270687500 	at com.sun.proxy.$Proxy2782.updateUserCredential(Unknown Source)
      2015-09-18 12:30:36.270687500 	at com.atlassian.plugin.connect.crowd.usermanagement.EmbeddedCrowd.updateUserCredential(EmbeddedCrowd.java:139)
      2015-09-18 12:30:36.270688500 	... 26 more
      2015-09-18 12:30:36.270688500 Caused by: com.atlassian.crowd.integration.rest.service.CrowdRestException: The credentials should not be encrypted for the unique password check
      2015-09-18 12:30:36.270691500 	at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.throwError(RestExecutor.java:656)
      2015-09-18 12:30:36.270692500 	at com.atlassian.crowd.integration.rest.service.RestExecutor$MethodExecutor.andCheckResponse(RestExecutor.java:561)
      2015-09-18 12:30:36.270692500 	at com.atlassian.crowd.integration.rest.service.RestCrowdClient.updateUserCredential(RestCrowdClient.java:202)
      2015-09-18 12:30:36.270693500 	... 58 more
      

      Workaround

      1. Change 'Prevent password reuse' to 'Never'
      2. Change 'Password expiry' to 'Never'
      3. Enable the plugin
      4. Change the password policies back

      Attachments

        Activity

          People

            Unassigned Unassigned
            jsilveira Jaime S
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: