Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-12484

SSO in Bamboo 4.3.x breaks Application links, UPM and the Atlassian support tools plugin

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: High High
    • 4.4
    • None
    • None
    • crowd version 2.5.2 and crowd 2.4.1
      UPM 2.6.1 and UPM 2.7.8

      Once SSO is enabled as per stated in this document the above mentioned components are broken. Please see screenshots below. turn debugging on the package log4j.category.com.atlassian.crowd shows the following error in the logs:

      2012-11-27 16:53:37,267 INFO [qtp1507939013-134] [CrowdAuthenticator] Error while attempting to check if user isAuthenticated with Crowd
      javax.xml.bind.DataBindingException: javax.xml.bind.JAXBException
       - with linked exception:
      [java.lang.ClassNotFoundException: com.sun.xml.internal.bind.v2.ContextFactory not found from bundle [com.atlassian.plugins.rest.atlassian-rest-module]]
      	at javax.xml.bind.JAXB._marshal(JAXB.java:549)
      	at javax.xml.bind.JAXB.marshal(JAXB.java:407)
      	at com.atlassian.crowd.integration.rest.service.RestExecutor.setBody(RestExecutor.java:192)
      	at com.atlassian.crowd.integration.rest.service.RestExecutor.post(RestExecutor.java:164)
      	at com.atlassian.crowd.integration.rest.service.RestCrowdClient.validateSSOAuthentication(RestCrowdClient.java:897)
      	at com.atlassian.crowd.integration.http.CrowdHttpAuthenticatorImpl.isAuthenticated(CrowdHttpAuthenticatorImpl.java:129)
      	at com.atlassian.crowd.integration.http.CacheAwareCrowdHttpAuthenticator.isAuthenticated(CacheAwareCrowdHttpAuthenticator.java:72)
      	at com.atlassian.crowd.integration.seraph.v25.CrowdAuthenticator.isAuthenticated(CrowdAuthenticator.java:204)
      	at com.atlassian.crowd.integration.seraph.v25.CrowdAuthenticator.getUser(CrowdAuthenticator.java:336)
      	at com.atlassian.seraph.auth.AbstractAuthenticator.getUser(AbstractAuthenticator.java:45)
      	at com.atlassian.seraph.auth.AbstractAuthenticator.getRemoteUser(AbstractAuthenticator.java:33)
      	at com.atlassian.sal.bamboo.user.BambooSalUserManager.getRemoteUsername(BambooSalUserManager.java:69)
      	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      	at java.lang.reflect.Method.invoke(Method.java:597)
      	at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
      
      Caused by: javax.xml.bind.JAXBException
       - with linked exception:
      [java.lang.ClassNotFoundException: com.sun.xml.internal.bind.v2.ContextFactory not found from bundle [com.atlassian.plugins.rest.atlassian-rest-module]]
      	at javax.xml.bind.ContextFinder.newInstance(ContextFinder.java:187)
      	at javax.xml.bind.ContextFinder.find(ContextFinder.java:376)
      	at javax.xml.bind.JAXBContext.newInstance(JAXBContext.java:574)
      	at javax.xml.bind.JAXBContext.newInstance(JAXBContext.java:522)
      	at javax.xml.bind.JAXB$Cache.<init>(JAXB.java:87)
      	at javax.xml.bind.JAXB.getContext(JAXB.java:114)
      	at javax.xml.bind.JAXB._marshal(JAXB.java:538)
      	... 143 more
      Caused by: java.lang.ClassNotFoundException: com.sun.xml.internal.bind.v2.ContextFactory not found from bundle [com.atlassian.plugins.rest.atlassian-rest-module]
      	at org.springframework.osgi.util.BundleDelegatingClassLoader.findClass(BundleDelegatingClassLoader.java:103)
      	at org.springframework.osgi.util.BundleDelegatingClassLoader.loadClass(BundleDelegatingClassLoader.java:156)
      	at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
      	at javax.xml.bind.ContextFinder.safeLoadClass(ContextFinder.java:481)
      	at javax.xml.bind.ContextFinder.newInstance(ContextFinder.java:185)
      	... 149 more
      Caused by: java.lang.ClassNotFoundException: com.sun.xml.internal.bind.v2.ContextFactory not found by com.atlassian.plugins.rest.atlassian-rest-module [43]
      	at org.apache.felix.framework.BundleWiringImpl.findClassOrResourceByDelegation(BundleWiringImpl.java:1460)
      	at org.apache.felix.framework.BundleWiringImpl.access$400(BundleWiringImpl.java:72)
      	at org.apache.felix.framework.BundleWiringImpl$BundleClassLoader.loadClass(BundleWiringImpl.java:1843)
      	at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
      	at org.apache.felix.framework.Felix.loadBundleClass(Felix.java:1723)
      	at org.apache.felix.framework.BundleImpl.loadClass(BundleImpl.java:926)
      	at org.springframework.osgi.util.BundleDelegatingClassLoader.findClass(BundleDelegatingClassLoader.java:99)
      	... 153 more
      

      As for the Atlassian Support tools plugin, users will be prompted for authentication which will always fail despite putting the correct credentials.

        1. applinks.jpg
          applinks.jpg
          41 kB
        2. jaxb-impl-2.1.12.jar
          847 kB
        3. plugins.jpg
          plugins.jpg
          121 kB

          Form Name

            [BAM-12484] SSO in Bamboo 4.3.x breaks Application links, UPM and the Atlassian support tools plugin

            Filled PLUG-1021 to avoid the need for a workaround.

            Diego Berrueta added a comment - Filled PLUG-1021 to avoid the need for a workaround.

            The JAXB JAR workaround (in webapp/WEB-INF/lib) appears to work around the problem for me (I was one who reported this issue to Atlassian Support). Fixes authentication issues in plugin / add-on management and with Atlassian Support Tools plugins I was experiencing.

            I had SSO enabled and using Crowd for authentication (passed through to / synchronized with our Mac OS Open Directory server).

            FYI.

            Sherm Gagon added a comment - The JAXB JAR workaround (in webapp/WEB-INF/lib) appears to work around the problem for me (I was one who reported this issue to Atlassian Support). Fixes authentication issues in plugin / add-on management and with Atlassian Support Tools plugins I was experiencing. I had SSO enabled and using Crowd for authentication (passed through to / synchronized with our Mac OS Open Directory server). FYI.

            Sam Hanes added a comment -

            I had trouble finding this via Google, so to aid discovery here are the actual error messages in plain text:

            UPM:
            Unauthorized, reloading page.
            An unexpected error occurred. Please refer to the logs for more information.

            Application Links:
            Client must be authenticated to access this resource.

            Sam Hanes added a comment - I had trouble finding this via Google, so to aid discovery here are the actual error messages in plain text: UPM: Unauthorized, reloading page. An unexpected error occurred. Please refer to the logs for more information. Application Links: Client must be authenticated to access this resource.

            joe added a comment -

            Looks like Plugins exports com.sun.xml.bind.v2 unconditionally from the JDK classes (0217a3508), but there's no mention of com.sun.xml.internal.bind.v2. Adding that to the Plugins exports may mean that the JDK version can be used, which would avoid bundling another library.

            joe added a comment - Looks like Plugins exports com.sun.xml.bind.v2 unconditionally from the JDK classes ( 0217a3508 ), but there's no mention of com.sun.xml.internal.bind.v2 . Adding that to the Plugins exports may mean that the JDK version can be used, which would avoid bundling another library.

            bmccoy added a comment -

            You can workaround the issue by adding the attached library to the class path -> putting it in "WEB-INF/lib" should do

            bmccoy added a comment - You can workaround the issue by adding the attached library to the class path -> putting it in "WEB-INF/lib" should do

              bmccoy bmccoy
              smaiyaki Sultan Maiyaki (Inactive)
              Affected customers:
              7 This affects my team
              Watchers:
              13 Start watching this issue

                Created:
                Updated:
                Resolved: