Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-74215

Instances using custom authentication plugins might fail to log in users due to corrupt cache

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Highest Highest
    • None
    • 8.22.0, 8.20.8
    • Login

      Issue Summary

      This is reproducible on Data Center: yes 

      Steps to Reproduce

      1. Install any plugin with custom Seraph authenticator implementation(More on custom authentication in Jira here, example here)
      2. Set up your Jira to use the plugin's authenticator
      3. Remove user "x" from user cache on nodeN
      4. Log in as user "x" on nodeN

      Expected Results

      User is able to login and work with Jira in without any errors

      Actual Results

      Login process fails and the below error messages can be seen in the xxxxxxx.log file:

      User does not exist and cannot be created. Creation is disabled for all the users.
      Authentication failed. 

      Workaround

      (Taken from https://jira.atlassian.com/browse/JRASERVER-71483 )

      • Refresh caches by full Jira restart (very painful and requires an outage):
        • Full restart in Data Center is required because nodes with a corrupted cache will replicate it to other starting nodes, this means shutting down all nodes, validating the service is stopped, and starting them back up, a rolling restart will not resolve this issue.
      • Add new directory, then remove it:
        1. Create a brand new User Directory - this directory does not necessarily actually have to work
        2. Delete the newly created directory. This will trigger the user and group caches to be invalidated.
        3. Synchronize the existing User Directory
      • When using SAML Single Sign On plugin and remote directory:
        • Enable the option to fetch users from remote directory. It should refresh user cache on every successful log in.

              755f87a38635 Krzysztof Krysiak
              jreczycki Jakub Reczycki
              Votes:
              8 Vote for this issue
              Watchers:
              15 Start watching this issue

                Created:
                Updated:
                Resolved: