Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-20958

Confluence features that require password confirmation (websudo, captcha) do not work with custom authentication

XMLWordPrintable

      When user is required to confirm the password, Confluence always checks the entered password against the internally stored user/password. If an instance is configured to use custom authentication which is different from atlassian-user, the password validation will fail.

      Resolution

      This is fixed in Confluence 3.4 and later versions. We check if the Confluence instance is configured to use a non-default seraph authenticator and automatically disable the functionality that relies on password confirmation:

      • web sudo
      • captcha
      • password confirmation on email change

      To overwrite this behavior use password.confirmation.disabled flag. If you set this flag to false than even if you have a custom authenticator, password confirmation will still work as configured and will try to validate the password against the user managment configured through atlassian-user.xml.

      Note that web sudo and other password confirmation screens should probably be disabled if you use an SSO authenticator. Confluence is typically not able to verify a user's password, so we recommend using some other mechanisms for your administrative security.

          Form Name

            [CONFSERVER-20958] Confluence features that require password confirmation (websudo, captcha) do not work with custom authentication

            Katherine Yabut made changes -
            Workflow Original: JAC Bug Workflow v3 [ 2898588 ] New: CONFSERVER Bug Workflow v4 [ 2993184 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2791038 ] New: JAC Bug Workflow v3 [ 2898588 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow [ 2721140 ] New: JAC Bug Workflow v2 [ 2791038 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2400089 ] New: JAC Bug Workflow [ 2721140 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 2299299 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2400089 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2233825 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 2299299 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2195504 ] New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2233825 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 1921128 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2195504 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v3 [ 1724615 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 1921128 ]
            Katherine Yabut made changes -
            Workflow Original: CONF Bug Subtask WF (TEMP) [ 1673118 ] New: Confluence Workflow - Public Facing - Restricted v3 [ 1724615 ]

              Unassigned Unassigned
              akazatchkov Anatoli
              Affected customers:
              3 This affects my team
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: