youngmon/atlassian-qna huggingface dataset:
What are the reasons other products then Crowd needs to be upgraded?
Asked by Kim Slotte:

*This question is in reference to Atlassian Documentation: [Crowd Security Advisory 2016-10-19](https://confluence.atlassian.com/pages/viewpage.action?pageId=856697283)*

What are the reasons other products then Crowd needs to be upgraded? Does these products have similar issues with LDAP or is it some type of compatibility thing?


Answers:
author: Nic Brough -Adaptavist-
body: They have their own "embedded" Crowd which shares a lot of the code with Crowd Server, and presumably the vulnerability is in code that is common to the two systems.


author: Kim Slotte
body: Take for example JIRA 7.2.1 that was released for a month ago. That version should be safe from this vulnerability. The issues listed on that release include no references to any LDAP issues. Is there an official explanation to this?


Tags: cve

documentation
How to uninstall crowd in centOS?
Asked by Suresh:

Hi All,

How uninstall crowd, unfortunately i have installed 2.10.1 instead of 2.9.1.

How to uninstall 2.10.1

and install atlassian-crowd-2.9.1.tar.gaz

Regards,


Answers:
author: Nic Brough -Adaptavist-
body: Stop crowd if it is running, delete (or rename, just in case) the directories you've installed it in, create a new database and setup the older version. There is no downgrade option in case you're wondering, you'll need to start fresh.

Also, why? 2.10 is better than 2.9, there's no reason to downgrade that I know of, unless you're doing security testing (2.9 has a big security flaw in it)

comments: author: Suresh
body: Hi Nic,Thank you for the suggestion.

I have deleted installation folder and data folder.

And I have run stop-crowd.sh and then i have unzip the atlassian-crowd-2.9.1.tar.gaz.

And then start the server start-crowd.sh. The setup wizard not coming up while i am accessing url <http://localhost:8095/crowd.>

The 2.9.1 version i would like to point to the same old database.

Did I'm missing any thing here.what else I am missing.

Once the issue resloved we will surly use 2.10.1.


author: Suresh
body: Hi Nic,Thank you for the suggestion.

I have deleted installation folder and data folder.

And I have run stop-crowd.sh and then i have unzip the atlassian-crowd-2.9.1.tar.gaz.

And then start the server start-crowd.sh. The setup wizard not coming up while i am accessing url <http://localhost:8095/crowd.>

The 2.9.1 version i would like to point to the same old database.

Did I'm missing any thing here.what else I am missing.

Once the issue resloved we will surly use 2.10.1.


author: Nic Brough -Adaptavist-
body: Er, you need to do a new installation, you can't use the database for 2.10, as it's been upgraded. I don't know what changes were made to the database (if any), but if you look at the log file, I suspect you'll find it's saying it can't run against data from a newer system


author: Suresh
body: Ok, we will re-install 2.10.1,  
May know the process, can I connect to thesame db.  
I have deleted installation and data folders.  
Ok, we will re-install 2.10.1,  
May know the process, can I connect to same db.  
I have deleted installation and data folders.can it overright and runs on same old port


author: Nic Brough -Adaptavist-
body: Install it clean, with an empty database, then stop it, change the settings file to point at the old database, or copy the old database into the empty one and then restart it.


author: Suresh
body: thank you nic, it worked


Tags: crowd-administration
Is the path after -keystore right?
Asked by Teamnet GmbH:

<https://confluence.atlassian.com/crowd/configuring-an-ssl-certificate-for-microsoft-active-directory-63504388.html>

Under UNIX paragraph 2.

Is the path after -keystore right?

For me it was -keystore ./lib/security/cacerts -file


Answers:
author: Jonas Andersson
body: That is a relative path that might unfold wrong if the software using it have another path in mind. Try to use absolute paths like /opt/atlassian/crowd.x.y.z/jre/security/cacerts will protect you from this, i.e goto the folder in the cli and type "pwd"


Tags: crowd-administration
Does this work with Crowd?
Asked by Brian West:

<https://marketplace.atlassian.com/plugins/com.pawelniewiadomski.jira.jira-openid-authentication-plugin/server/pricing>


Answers:
author: Bruno Vincent
body: According to the vendor's response to one of the reviews, the plugin doesn't seem to work with Crowd:

openid_review.png

But you might want to ask the vendor for confirmation.  
[](https://community.atlassian.com/t5/Crowd-questions/Does-this-work-with-Crowd/qaq-p/66417?attachment-id=9693){#link_1159732b453bc1}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/300/1/openid_review.png){#display_1159732b453bc1_0}


Tags: crowd-administration
Error in Crowd: The proxy server could not handle the request POST /crowd/console/j_security_check.
Asked by Chris:

We have had Jira, Confluence and Crowd set up on our server for about a year and it has all been working well.

I went to log into JIRA today and it was not recognising my password.

The proxy server received an invalid response from an upstream server.

The proxy server could not handle the request *[POST /crowd/console/j_security_check](http://4cast.com.au/crowd/console/j_security_check)*.

Reason: **Error reading from remote server**

I am certain we have not changed the proxy/reverse proxy settings.

We are running behind Apache and use the urls

/JIRA

/wiki

/crowd.

I have no idea where to go with this one.

Any pointers would be very much appreciated.


Answers:
author: Bruno Vincent
body: As far as I can tell, you tried to log onto the Crowd console since */crowd/console/j_security_check* is the form action url of the Crowd console login page. So you should take a look at Crowd's logs (*apache-tomcat/logs/catalina.out*). It actually looks like your Crowd server faces some issues (is the database ok?). I'm not sure this has anything to do with your reverse-proxy settings.

comments: author: Chris
body: Thanks.

Of course. Check the logs.

I must have been in a strange space when I posted that question.

BTW, the log tells me the database does not exist. Now for some more detective work.

Thanks again for pointing me in the right direction.


author: Bruno Vincent
body: You're welcome, good luck on your detective work :wink:


Tags: crowd-administration
inactivate users in jira if not available in ldap
Asked by maarten breesnee:

Hi we have crowd connected to JIRA and it gets its users via an ldap connection. If the user has a JIRA user ad group, then it will be added to the JIRA user group in jira. This is working. Now I want it to work if we remove the ad group from that user (or from JIRA perspective) The user is not available in that group. The user in JIRA must become inactive. Same for confluence and bamboo and sonar and stash.


Answers:
author: WilliamD
body: Crowd has an inactive user setting... deactivate the user in Crowd, the id will become inactive on the next directory sync to JIRA and/or Confluence.


Tags: bitbucket

confluence

jira
Is CROWD capable of user notification prior of password expiration?
Asked by Luis Quintero:

Need to have the ability to notify users before this password expires.

Can CROWD do that ?


Answers:
author: Bruno Vincent
body: As of today, no. At least not out of the box. But you can use a simple script such as the one attached to the corresponding feature request: <https://jira.atlassian.com/browse/CWD-1765>


Tags: crowd-administration
Crowd login error
Asked by Tukaram Bhukya:

When i try to launch url  

[http://localhost:8095/](https://answers.atlassian.com/questions/11441618/httplocalhost8095crowdconsole-404-error) its working but {#toc-hId-1875326506}
========================================================================================================================================================

when i use  
<http://localhost:8095/crowd/> then it throwing 404 error.  
Please help me.  
[](http://localhost:8095/crowd/)


Answers:
author: Tukaram Bhukya
body: Thanks for reply, we didn't remove context path.


author: Jobin Kuruvilla [Adaptavist]
body: Is the context path removed?

<https://confluence.atlassian.com/crowd/removing-the-crowd-context-from-the-application-url-223217080.html>


author: Bruno Vincent
body: Hi Tukaram,

What do you get in *apache-tomcat/logs/catalina.out*?


Tags: crowd-administration
Crowd upgrade from 2.7.2 to latest version
Asked by Sindhu:

Hello every one,

Kindly provide the pre-upgrade and post upgrade steps for Crowd upgrade to latest version.


Answers:
author: Nic Brough -Adaptavist-
body: See <https://confluence.atlassian.com/crowd/upgrading-crowd-22544441.html>


author: Sindhu
body: We have upgraded Crowd 2.7.2 to 2.9.1

After restarting Crowd we are getting 404 error

we are getting below error .Kindly suggest on this

org.apache.catalina.LifecycleException: Failed to start component \[StandardEngine\[Catalina\].StandardHost\[localhost\].StandardContext\[/crowd\]\]

Thanks,

Sindhu


Tags: crowd-administration
How can I specify a User DN that contains a space?
Asked by Wex Help:

When configuring a Directory's User Configuration in Crowd that's connecting to Active Directory and I specify a User DN without a space (e.g. London) the test succeeds. But when I provide a User DN with a space (e.g. New York) I receive the following error:
> No results were found from your search. org.springframework.ldap.NameNotFoundException: \[LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of: 'DC=foo,DC=com' \]; nested exception is javax.naming.NameNotFoundException: \[LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of: 'DC=foo,DC=com' \]; remaining name 'OU=New York,dc=foo,dc=com'

Since both OU=New York and OU=London exist in AD, how can I use an OU with a space in its name?


Answers:
author: Bruno Vincent
body: Strange. Works for me. Did you check that the username you defined in the connector tab is allowed to browse the New York OU?

comments: author: Wex Help
body: When I specify the top level OU everything works, but if I specify a nested one I get the error above (my apologies if this isn't the right terminology, I don't work with LDAP much). For example:

DC=foo,DC=com

-- OU=Bar Users

---- OU=London

---- OU=New York

I can specify OU=London or OU=Bar Users and the search on the Configuration tab works, but if I specify New York it fails. I've verified that the user on the Connector tab can browse OU=New York.


author: Bruno Vincent
body: I have just done the exact same test and it worked again for me. I must be missing something here. Here is what you should have:

* Connector tab \> Base DN: *DC=FOO,DC=COM*
* Configuration tab \> User DN: *OU=New York,OU=Bar Users*


author: Wex Help
body: Ah, ok. The error was in my understanding, I didn't know how to construct the path and my OU=London was matching a top level OU of London, but there was no top level OU of New York. I changed the configuration to match your suggestion and the search works.


Tags: crowd-administration
connecting to Crowd or Another JIRA
Asked by jet:

*This question is in reference to Atlassian Documentation: [Adding an Application Link](https://confluence.atlassian.com/pages/viewpage.action?pageId=370705802)*

Ask your question here...


Answers:
author: Nic Brough -Adaptavist-
body: Yes, you can.


Tags: documentation

jira

jira-administration

user-management
Crowd LDAP Connector - Getting Group without its Members
Asked by lilachFeit:

Hi

I've been connecting my Crowd to the Organization AD,

All our groups in the LDAP created under OU=Groups and all the users are spread in different OU's and in the "Users" ou.

I define my connector to bring a specific group From the "Groups" OU, that group have 5 members.

i can see the group but when clicking on "direct members" i'm getting nothing,

Please advise.

Thanks.


Answers:
author: Barry St.John
body: Did you ever get this solved? I was having the same issue. It seems the attribute name for the group members was not spelled correctly in the LDAP config. And it appears to be case sensitive, as well.

Also, if you have caching enabled, you will need to manually synchronize with your directory service in order to see your changes, or else wait for the next synchronization polling cycle.


Tags: crowd-administration
Crowd install fails on base url
Asked by Marcin Beczynski:

Hello all,  
Wen I try to install crowd server got a error unable to connect base url. Hosts at server ate filed out with domain

Thanks in advice for all help

Crowd version : 2.9.1

Server OS Ubuntu 16.01.1 LTS

Database Postgres SQL

<br />

<br />

Capture-crowd.PNG\\

Capture-crowd-host.PNG  
[](https://community.atlassian.com/t5/Crowd-questions/Crowd-install-fails-on-base-url/qaq-p/264968?attachment-id=7450){#link_11597403e31679}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/1196/1/Capture-crowd.PNG){#display_11597403e31679_0}  
[](https://community.atlassian.com/t5/Crowd-questions/Crowd-install-fails-on-base-url/qaq-p/264968?attachment-id=7451){#link_11597403e31679_0}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/1196/2/Capture-crowd-host.PNG){#display_11597403e31679_2}


Answers:
author: Jonas Andersson
body: I assume you are using a rewrite proxy to terminate SSL? A few thing i would check if i was you:

* Do you see anything in catalina.out of crowd? Specifically SSL errors (unknown certificate). Show us them too, this might help.
* If crowd is ran as root you might be able to run it on port 443, but if not you most likely have a rewrite proxy in front of it. Make sure that apache/xingng's vertificate is included in the keystore of all applications that will connect to the crowd instance.
* If you are running it as a none-root users, attempt to set the application url to the native port (8095 if not changed). If that works you can be sure it's a SSL issue.


Tags: crowd-administration

install
How do you auto-provision users to applications with Crowd?
Asked by Mark Montminy:

In the past, I've tied the various Atlassian apps directly to AD/LDAP, using the "add to group on first login" feature. This worked well for our needs, as it allowed the apps to "see" all users in the corp directory, for mentions and such, yet only consume licenses when the user actually logged in, thus becoming a member of the "can use" group for that app.

I'm trying to re-create this behavior in Crowd, and so far, have been unsuccessful.

I see that there's an option to auto-add users to groups upon authentication at the directory level. It seems that if I were to use that though, I would be provisioning a user for multiple apps when they first login to any of the apps. That's not what I want.

Searching on answers I found a few responses around using a directory per application approach, which each directory pointing to the same backend (AD in our case) source. It's my impression that in doing so though, you break SSO. It also seems horribly inefficient and confusing.

I certainly don't want to be a gatekeeper to users gaining access to the tools and information they need by manually provisioning and adding users to groups all the time. We want everyone to automatically have access to the various "general use only" content across the tools without tickets and requests for access.

It's also very important that Confluence and others support the notion of mentioning users regardless of their "can use" status in the apps. We're trying to foster collaboration, and expect mentions to draw people in.

I feel like I'm missing something, because Crowd seems to be making this harder than going direct to AD, and I was under the impression I'd have more control, not less.


Answers:
author: Bruno Vincent
body: Hi Mark,

Unfortunately the default groups memberships upon successful authentication actually works at the directory level in Crowd. If not already done, you might want to vote for this improvement request: <https://jira.atlassian.com/browse/CWD-3726>

comments: author: Mark Montminy
body: I've seen a few pointers that suggest that, and I was hoping it was either stale data, or I was just misunderstanding things.

As far as I can tell, if you use Crowd, you lose:

* the ability to mention users who've never logged in
* the ability to auto-provision users per application

but gain:

* centralized (albeit manual/scripted) user management
* SSO

The centralized user management can be mitigated if the various apps are all tied into AD/LDAP.

I'm not sure I'm seeing SSO as enough of a benefit to negate auto provisioning and mentions.

This is really disappointing, as Crowd was to be a key component in our new deployment. We may have to re-think this.


Tags: crowd-administration

user-management
Can we automate jira login with crowd without using any other plugin's?
Asked by Tukaram Bhukya:

Please help me in below query

Can we automate jira login (SSO) with crowd without using any other plugin's ?


Answers:
author: Steven F Behnke
body: Crowd **only** supports Cookie-based SSO. Once you login ++through Crowd++, you won't have to log in again until you expire.

Anything else requires custom code or plugins.


author: Nic Brough -Adaptavist-
body: Basically, no, you need add-ons or code change to enable SSO variants. Ideally, stick to well maintained and well known add-ons such as the one Bruno mentions.


author: Bruno Vincent
body: It depends on what you mean by "automate JIRA login". If you mean that your users should not have to enter any credentials to log onto Jira, you will actually need a Kerberos plugin such as IWAAC (Integrated Windows Authentication for Apps using Crowd): <https://marketplace.atlassian.com/plugins/com.cleito.iwaac/server/overview>

[](https://marketplace.atlassian.com/plugins/com.cleito.iwaac/server/overview)(Disclaimer: I work at the vendor of the IWAAC plugin. You might also want to have a look at other Kerberos plugins on the Atlassian Marketplace: <https://marketplace.atlassian.com/search?q=kerberos>)


Tags: crowd-administration
included a list for ordering Catering on a portal
Asked by Marco Brundel:

Hi,

At a customer of us they have included a list for ordering Catering on a portal (not Jira).  

A user can then enter a number per item. For example, 3 beer and 2 wine.

Now I am asked if this can also be realized in Jira Service Management Portal DataCenter.  

Does anyone know a way to realize this in Jira Service Management Portal DataCenter?  

<br />

Regards,  
Marco  

<br />

![image (3).png](https://community.atlassian.com/t5/image/serverpage/image-id/341009iCB6717738996D3B1/image-size/large?v=v2&px=999 "image (3).png")


Answers:
author: Christopher Yen
body: Hi [@Marco Brundel](/t5/user/viewprofilepage/user-id/1162861)

Using forms in a service management project you could technically get that formatting but if there are any calculations of totals shown on the form for the customer as they are filling it out I'm not sure if that's possible (maybe with scriptrunner?) is the last column the sum of the quantities?

<br />

![2024-08-09 10_35_28-Window.png](https://community.atlassian.com/t5/image/serverpage/image-id/341033iA278512D7F1B9DF4/image-size/large?v=v2&px=999 "2024-08-09 10_35_28-Window.png")

comments: author: Marco Brundel
body: [@Christopher Yen](/t5/user/viewprofilepage/user-id/5051689)

Thanks for your suggestion.

I am now looking at ProForma Forms and also Bundled Fields from Deviniti Extension app to see if I can make it happen with one of these 2.


author: Marco Brundel
body: Hi,

The ProForma app gets me a long way, but the free text from the form is not displayed in the PDF that is created from the form.  

First screenshot is the PDF and second is a part of the form.  

??????

regards, Marco  

![Screenshot 2024-08-29 at 16.25.22.png](https://community.atlassian.com/t5/image/serverpage/image-id/344573iA61AC15998CDF898/image-size/large?v=v2&px=999 "Screenshot 2024-08-29 at 16.25.22.png")![Screenshot 2024-08-29 at 16.24.52.png](https://community.atlassian.com/t5/image/serverpage/image-id/344574iC841A46F6F27F154/image-size/large?v=v2&px=999 "Screenshot 2024-08-29 at 16.24.52.png")


Tags: jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-service-management-server

server
The usage fee was charged twice. I would like to request a refund.
Asked by ????:

I signed up to use it for free, but I was busy so I couldn't use it, but I was charged money today. It's absurd. Please refund me. I don't think charging like this would be a good image for users.

I signed up to use it for free around June, but I was so busy that I didn't use the site. However, the money was taken out of the account on July 17th, and was charged again on August 9th (today). Two paid payments... If it had been paid, I wouldn't have used it. I couldn't use it because I was busy. I think it's right to pay when you want to use it properly. Is it fair to automatically pay customers when they don't want to? This is absurd. Please refund me. I don't think this kind of charging will leave a good image to users.


Answers:
author: Joseph Chung Yin
body: [@????](/t5/user/viewprofilepage/user-id/5564917) -

Welcome to the community. You need to contact Atlassian Support directly to address your issue.

In the community, we don't have any control on user's billing inquiries for his/her Atlassian account.

Best, Joseph Chung Yin


author: Victor Law
body: Hi [@????](/t5/user/viewprofilepage/user-id/5564917)

I would suggest you contact Atlassian directly via the following portal:

<https://www.atlassian.com/company/contact/purchasing-licensing#/>

The community does not have to control, manage, and refund the bill for Atlassian users.

Thank you.


Tags: jira-service-desk-unknown-hosting-type

jira-service-management

jira-service-management-unknown-hosting-type
Assist Bot permission needed to install in Teams?
Asked by Sven M_:

Hi,

our Microsoft Teams is managed by 3rd party. When I try to setup "Chat", I need to approve the installation of Assist Bot in Microsoft Teams, but do not have sufficient permissions.

I was already granted Cloud Admin rights but still cannot approve Assist Bot.

Which permissions are required in Microsoft Entra to be able to install the Assist Bot in Teams?


Answers:
author: Fabian Lim
body: Hi [@Sven M_](/t5/user/viewprofilepage/user-id/4297516)

Ideally you will need to be the admin on both jira and teams to make the integration go smoothly. However, if you are not the MS Team admin, you can request approval and they can approve it for you. It would be best if you work together in a call to have it configured 100%.

Regards,

Fabian

comments: author: Sven M_
body: I am already granted "Cloud Admininstrator" permission, but still I cannot approve the Assist Bot myself. So what is missing?

It is impractical to request approval for each channel that the Assist Bots needs to be added to. In our case that are more than a dozens approvals. And as the MS Team admin is not inhouse, this would take days or even weeks to complete.

Also the approval request is not send to MS Teams admin at all and I cannot copy any valid link as the links shown ("copy this link") are redirecting to MS Teams again.

Regards,

Sven


Tags: cloud

jira-service-management

jira-service-management-cloud
Satisfaction Report Issues
Asked by apanda17:

When selecting the link for the Satisfaction report, nothing happens. The url does pop up in the browser window but it never resolveds It just spins. Tried a background re-index and a system re-index and did not fix the issue. No errors in log. Any suggestions would be greatly appreciated! Thank you!


Answers:
author: Carla Ann Rowland
body: which browser are you using? Are other Team items loading like Workload?

comments: author: Carla Ann Rowland
body: [@apanda17](/t5/user/viewprofilepage/user-id/700095) check if the feature is turned on; if it is off it will not load a report.


Tags: jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-service-management-server

server