Uploaded image for project: 'Crowd'
  1. Crowd
  2. CWD-2315

Cannot login to Crowd when IP address is changed

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Low
    • Resolution: Fixed
    • Affects Version/s: 2.1.1
    • Fix Version/s: 3.0.0
    • Component/s: None
    • Labels:
    • Environment:

      Crowd 2.1.1 Standalone, running on JDK 1.6, Mac OS-X

      Description

      When Crowd is installed, by default Applications > Crowd > Remote Addresses lists out the following:

      • Current network IPv6 address
      • Current network IPv4 address (Mine was 172.20.7.230 at time of installation)

      We ensure that the following are also on the list:

      • localhost
      • 127.0.0.1
      • <machine-name>.local

      However, Crowd will not let you login if your IP address changes, as it will think that you are attempting to connect from your network port's IP address without considering localhost or 127.0.0.1. It will display the error message: "Login Invalid".

      The following messages were shown in the log file.

      2011-02-23 15:23:54,729 http-8095-5 INFO [crowd.manager.validation.ClientValidationManagerImpl] Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.
      2011-02-23 15:23:54,770 http-8095-3 INFO [service.soap.client.SecurityServerClientImpl] Existing application token is null, authenticating
      ...
      2011-02-23 15:23:54,848 http-8095-5 INFO [crowd.manager.validation.ClientValidationManagerImpl] Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.
      2011-02-23 15:23:54,854 http-8095-3 ERROR [crowd.integration.springsecurity.CrowdSSOAuthenticationProcessingFilter] Unable to unset Crowd SSO token com.atlassian.crowd.exception.InvalidAuthorizationTokenException: Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.
      ...
      Caused by: org.codehaus.xfire.fault.XFireFault: Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.
      ...
      2011-02-23 15:23:54,898 http-8095-3 ERROR [crowd.console.action.Login] Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.; nested exception is com.atlassian.crowd.exception.InvalidAuthorizationTokenException: Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.
      org.springframework.security.AuthenticationServiceException: Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.; nested exception is com.atlassian.crowd.exception.InvalidAuthorizationTokenException: Client with address "172.20.5.73", and hostname "172.20.5.73" is forbidden from making requests to the application, crowd.
      ...etc
      

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              lpater Lukasz Pater
              Reporter:
              aho@atlassian.com Adrian Ho
              Votes:
              27 Vote for this issue
              Watchers:
              28 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: