youngmon/atlassian-qna huggingface dataset:
Error when loading the audit log in crowd.
Asked by Patrick Wolf:

After migrating from crowd 3.1.4 to 3.2.0, viewing the audit log fails with the message:
> "**Error when loading the audit log.** See error logs for details.".

But the logs don't show any errors. Even after a fresh install of the 3.2.0 version, the error occurred.

We use Postgresql 9.5, OpenJDK 1.8 and run crowd behind an nginx reverse proxy. The OS we use is ubuntu 16.04

Any ideas would be greatly appreciated!


Answers:
author: Gaurav
body: Hi [@Patrick Wolf](/t5/user/viewprofilepage/user-id/621036),

Adding to [@Marcin Kempa](/t5/user/viewprofilepage/user-id/671367) 's answer, you can try capturing the HAR requests while you are on Audit Log View.

Here's the way how to generate HAR files

<https://confluence.atlassian.com/kb/generating-har-files-and-analyzing-web-requests-720420612.html>

Once you generate HAR files, it would be helpful to search for the reason since the tables exist in database.

comments: author: Patrick Wolf
body: Hi [@Gaurav](/t5/user/viewprofilepage/user-id/1177576),

while capturing the HAR requests I noticed, that requests against '/auditlog/query' endpoint resulted in 401 errors, due to XSRF protection. I followed the recommended changes from <https://confluence.atlassian.com/kb/cross-site-request-forgery-csrf-protection-changes-in-atlassian-rest-779294918.html>.

Now the audit logs are displayed correctly!

Thanks for your support!


author: Marcin Kempa
body: HI [@Patrick Wolf](/t5/user/viewprofilepage/user-id/621036),

You've mentioned that there are no errors in the log, but is it only at the time which correlates with admin accessing the Audit Log? Can you double check if there are no ERRORS at the time when the upgrade happened?

As Audit log was not present in Crowd 2.1.4, I believe it might be an issue with creating DB tables for audit log itself. Can you check in the DB if following tables were created:

* cwd_audit_log_changeset
* cwd_audit_log_entity
* cwd_audit_log_entry

Thanks

Marcin Kempa

comments: author: Patrick Wolf
body: Hi [@Marcin Kempa](/t5/user/viewprofilepage/user-id/671367)

Sorry, it was version 3.1.4 from where I migrated. In this version the audit log page worked as expected.

I double-checked the logs and there appeared no error messages neither during the upgrade step, nor while accessing the audit log.

All three audit log tables exist in our database, although cwd_audit_log_entity does not contain any data.
Using Jira server v7.5.1, Confluence server v6.3.4 and Crowd v2.6.5 and looking for upgrade.
Asked by Gaurav Kaushik:

Hi,  
We are currently using Jira server v7.5.1, Confluence server v6.3.4 and Crowd v2.6.5  
**Mysql version:** 5.6.34.

and looking for upgrade.  
Every plugin we are using with the trio is up to date   
Please guide us what would be the suitable versions of the above since, we are planning to upgrade.  
Also, if there could be some risks involved in the same.


Answers:
author: Mirek
body: The decision to which version you want to go it is up to you. Based on what I see here upgrade should be pretty straightforward. But my words are not guarantee since you might got something in you system that would break. I suggest to set up a test system that would be a copy of your production, on which you would step by step check if the upgrade process is fine. You should read all the release notes and upgrade notes to be up to date with all changes and also check plugin compatibility in new versions. If you need a suggestion I would start with Crowd (since it is the oldest version) then check if everything is working and do JIRA and Confluence.


Tags: confluence

jira-software
confluence
Asked by bharath polavarapu:

![crowd error.PNG](/t5/image/serverpage/image-id/27167i164A59F7B00245F3/image-size/large?v=v2&px=999 "crowd error.PNG")


Answers:
author: bharath polavarapu
body: hi this is bharat i am facing 500 error during my crowd installation .please look after it and provide me the details.

comments: author: Andreas
body: Hello [@bharath polavarapu](/t5/user/viewprofilepage/user-id/1650783) and welcome to the community.

In the situation at hand it would probably be better to contact Atlassians Support directly via <https://support.atlassian.com/contact/>

Fill out the form there and provide as much detail as possible. This will create a support request ticket and Atlassians team will get back to you.


Tags: atlassian-support
Number of discovered users
Asked by Uzo:

Hi,

Currently we have a Crowd license for 50 users on our AD exchange system , however the system discovers more than 1300 users. Hence makes the crowd system inactive.

How can this be resolved so that Crowd can be activated for 50 users on the system.

Thanks and Regards,

Uzo


Answers:
author: Mirek
body: I think you might want to look at this documentation - <https://confluence.atlassian.com/crowdkb/how-are-crowd-users-counted-towards-the-application-user-limit-246481311.html>

Hope it helps :)


Tags: active-directory
What is the purpose of Jira and Confluence Directory in Crowd?
Asked by Alex Moozhayil:

I am installing Crowd, Jira and Confluence on my server and during the Jira/Confluence integration to Crowd setup I come across this step.

The JIRA application will need to locate users from a directory configured in Crowd. You will need to set up a directory in Crowd for JIRA. This directory may be any Crowd-configured directory, such as an LDAP directory hooked up to Crowd or a Crowd internal...........

[Click here to see instructions](https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-jira-192625.html)

My question is, what if I just add the Jira-administrators, developers, users, etc. etc. to the Crowd Server Directory? Would I still need to create a Jira and/or confluence directory?

Thanks!


Answers:
author: AnnWorley
body: When you set up the Confluence and Jira applications in Crowd you will choose a Crowd directory to use with each one ([Adding an Application](https://confluence.atlassian.com/crowd/adding-an-application-18579591.html)). You may use the existing Crowd internal directory for all the applications but you will have less control over each application's setup and less ability to make changes to one without impacting the others. For example, when you synchronize Confluence's user directory with Crowd, if you use the same Crowd directory for Jira, the Jira groups and users will be synchronized to Confluence because they are in the same directory.

The recommended procedure is to create a dedicated directory for each application. This will make your configuration easier to support and make changes to.

comments: author: Alex Moozhayil
body: Thank you Ann!


author: AnnWorley
body: Happy to hear it helped!


author: Al Johnson
body: I thought the point was to have one directory so you don't have to maintain multiple accounts for each user for each application. So, with one directory for Jira and another for Confluence, one user would need to be entered into both directories for access to both apps, right? If so, would that not be extra work for admins?
no initial password provided
Asked by Adrian Badulescu:

Hi all,

If no initial password was provided for **<https://crowd.labcollab.ne>**t, can I reset my password in order to create it ?

Thank you!


Answers:
author: AhmadDanial
body: Hi, Adrian.

I am trying to understand the question that you have here. Do you mean that you did not configured any password when you set up Crowd for the first time?

If yes, may I know if you have tried to check on the official documentation on the steps to reset the password here - [Resetting Forgotten Passwords](https://confluence.atlassian.com/crowd/resetting-forgotten-passwords-152043794.html)? If that does not help, it will be good if you can provide more context on this so we can see how we can tackle this concern. Thank you.


Tags: password
How do you configure EnvoyProxy with a default (catch-all) route for traffic?
Asked by no_longer_in_sudoers_file:

See <https://www.envoyproxy.io/docs/envoy/latest/api-v2/api/v2/route/route.proto#envoy-api-msg-route-routematch>

Assuming you want to have one 'catch-all' or default route in your Envoy Proxy, how do you configure Envoy? The docs are a bit sparse on exactly what you could do here.


Answers:
author: no_longer_in_sudoers_file
body: Let's assume you have two virtual machines on your dev laptop: serviceProxy and proxyTarget.

You can use the following envoy.conf to achieve the goal.

```
# serviceProxy: 192.168.127.10:{10000,9901}
# proxyTarget: 192.168.127.11:80
#
admin:
 access_log_path: /tmp/admin_access.log
 address:
 socket_address: { address: 0.0.0.0, port_value: 9901 }

static_resources:
 listeners:
 - name: catch_all_proxy_rule
 address:
 socket_address: { address: 0.0.0.0, port_value: 10000 }
 filter_chains:
 - filters:
 - name: envoy.http_connection_manager
 config:
 stat_prefix: ingress_proxyTarget
 route_config:
 name: default_route
 virtual_hosts:
 - name: default_vhost
 domains: ["*"]
 routes:
 - match: { prefix: "" }
 # route: { host_rewrite: proxyTarget.local, cluster: proxyTarget }
 route: { cluster: proxyTarget }
 http_filters:
 - name: envoy.router
 clusters:
 - name: proxyTarget
 connect_timeout: 0.12s
 type: LOGICAL_DNS
 # Comment out the following line to test on v6 networks
 dns_lookup_family: V4_ONLY
 lb_policy: ROUND_ROBIN
 hosts: [{ socket_address: { address: 192.168.127.11, port_value: 80 }}]

```


Tags: proxy
should I update Crowd 2.11 to 3.X?
Asked by Joe Ben Clark:

Is there any performance improvements in updating Crowd to 3.X? My test environments are connected to the Production version of CROWD and i would not be able to back out of the update. unless someone has a suggestion on how to rollback a production update of crowd. So I want to be sure there is value in the effort.


Answers:
author: Craig Castle-Mead
body: The Crowd upgrade process for us has been very reliable - have been using Crowd for 5-6 years and can't think of one time the upgrade has failed (disclaimer: personal experience only, your mileage may vary etc etc).

backing up crowd before an upgrade is pretty straight forward either using the XML option Ann mentioned, or a DB and file system backup. Rolling back is then pretty painless.

in terms of benefits of 3.x over 2.x, it's always good to keep relatively up to date as the more distance between upgrades the riskier they can get, security updates (unsure if there's any CVEs in the version you're on), but in terms of features a recent version now has a great audit log functionality (with a much more useful audit log search than Jira and Confluence) and a big help for us (but possibly not even noticed by some), whenever a drop down list of directories is displayed, they're now sorted alphabetically! With 15 directories, this is a big help for us. There was a change (possibly between 2.x and 3.x) where the UI no longer uses the REST API for its own calls instead using its own background access which for us has given a nice speed improvement for administration.

In summary, I'd vote yes.

CCM


author: AnnWorley
body: Hi Joe,

There have been a lot of changes between Crowd 2.11 and 3.2. Please check out all the Crowd 3.x bug fixes and features on the [Crowd 3.0 Release Notes](https://confluence.atlassian.com/crowd/crowd-3-0-release-notes-934719586.html).

More changes are documented here: [Crowd 3.0 Upgrade Notes](https://confluence.atlassian.com/crowd/crowd-3-0-upgrade-notes-905088628.html)

You can roll back an upgrade by installing the old version and then importing an XML backup from your pre-upgrade instance. However, I recommend that you stand up a Crowd 2.11 to connect your test environment to, in order to test the upgrade safely and avoid surprises in Production. Crowd 2.11 does not reach [end of life](https://confluence.atlassian.com/support/atlassian-support-end-of-life-policy-201851003.html) until Jan 12, 2019 so you have some time.

Options for upgrading Crowd are described in [Upgrading Crowd](https://confluence.atlassian.com/crowd/upgrading-crowd-22544441.html).

Thanks,

Ann


Tags: rollback

upgrade
Can't log in in Crowd after adding trusted proxies
Asked by Henrik Karlsson:

Hi,

I've set up Crowd to run behind Apache HTTP and to get Crowd to use the IP address from the calls from applications (Jira, BitBucket, etc). I added 127.0.0.1 and

0:0:0:0:0:0:0:1 as trusted proxies. After doing so all calls from the applications works just fine, but when I can't no longer log in to Crowd as a user or admin. Then I enter username and password I just gets redirected to the log in page again with no error message. This is what appears in the log when I try to authenticate with my user 'heka':

2018-07-10 11:29:34,238 http-nio-8095-exec-17 DEBUG \[crowd.manager.application.ApplicationServiceGeneric\] Trying to authenticate user heka in directory Crowd server (163841) for application crowd

2018-07-10 11:29:34,240 http-nio-8095-exec-17 DEBUG \[crowd.manager.application.ApplicationServiceGeneric\] User heka does not exist in directory Crowd server (163841), continuing

2018-07-10 11:29:34,240 http-nio-8095-exec-17 DEBUG \[crowd.manager.application.ApplicationServiceGeneric\] Trying to authenticate user heka in directory Pulsen AD (557057) for application crowd

2018-07-10 11:29:34,315 http-nio-8095-exec-17 DEBUG \[crowd.manager.application.ApplicationServiceGeneric\] Authenticated user heka in directory Pulsen AD (557057) for application crowd

2018-07-10 11:29:34,324 http-nio-8095-exec-17 DEBUG \[crowd.manager.application.ApplicationServiceGeneric\] Located user 'heka' in directory 557057 'Pulsen AD'

2018-07-10 11:29:34,350 http-nio-8095-exec-17 DEBUG \[crowd.manager.application.ApplicationServiceGeneric\] Storing user attributes for user \<heka\> and application \<crowd\>

2018-07-10 11:29:34,402 http-nio-8095-exec-17 DEBUG \[crowd.manager.application.ApplicationServiceGeneric\] Located user 'heka' in directory 557057 'Pulsen AD'

As I can't access the GUI I managed to remove the trusted proxies from the database and after restarting crowd I can log in again, but then all request from applications fail...

Regards,

Henrik Karlsson


Answers:
author: AnnWorley
body: Hi Henrik,

If you have SSO enabled the resolutions in this article may help: [Redirected to the login screen with no errors when attempting to log in to any Atlassian applications](https://confluence.atlassian.com/crowdkb/redirected-to-the-login-screen-with-no-errors-when-attempting-to-log-in-to-any-atlassian-applications-376834420.html)

It says the most common cause of the behavior is browser caching so please clear your browser cache first.

The article mentions this symptom which is similar to yours:
> No errors thrown in the application's logs or Crowd's logs, or in the UI. In fact, based on the logs, authentication should be successful  

This entry you posted looks like a successful login to Crowd from an external Active Directory user directory:

```
Authenticated user heka in directory Pulsen AD (557057) for application crowd
```

Thanks,

Ann
Query on Customizing JSM Issue Notifications to Include Description for a Specific Reporter
Asked by Danielle David:

Hello,  
I'm trying to understand if the following scenario is achievable. Currently, when a Jira Service Management (JSM) issue is created, an email notification is sent to all our employees, but it does not contain the ticket's Description field. We would like to modify this so that the Description is included in the notifications sent only to one specific reporter. Is this feasible?


Answers:
author: Mark Higgins
body: Hi [@Danielle David](/t5/user/viewprofilepage/user-id/4577696)

I've had a look at this, and by no means does that mean its definitive.

In Notifications, you can add a notification, that is for a specific user.

![Screenshot 2024-08-27 154633.png](https://community.atlassian.com/t5/image/serverpage/image-id/343999iE5C30A742693C71B/image-size/large?v=v2&px=999 "Screenshot 2024-08-27 154633.png")

So in my example every time an issue is created, I would receive a notification, if I created it or not (wouldn't that NOT be fun).

Then you have Customer Notifications in the Project, that allows you to create templates, but unless you could get hold of the reporter, inside the HTML.

Such as this:

![Screenshot 2024-08-27 155520.png](https://community.atlassian.com/t5/image/serverpage/image-id/344001i99B8AA4261B51E45/image-size/large?v=v2&px=999 "Screenshot 2024-08-27 155520.png")

![Screenshot 2024-08-27 155243.png](https://community.atlassian.com/t5/image/serverpage/image-id/344000i1AA013DD47452F87/image-size/large?v=v2&px=999 "Screenshot 2024-08-27 155243.png")

My last suggestion would be to use automation, and replace the Customer Notification.

So, in Customer Notifications, turn that off, like this:

![Screenshot 2024-08-27 155748.png](https://community.atlassian.com/t5/image/serverpage/image-id/344002i09175FC71C90D5FD/image-size/large?v=v2&px=999 "Screenshot 2024-08-27 155748.png")

Then create an automation on Create, where you can check for the reporter, and if it matches you send Notification A, and if not send Notification B?

![Screenshot 2024-08-27 160107.png](https://community.atlassian.com/t5/image/serverpage/image-id/344003i1513010580A02B5A/image-size/large?v=v2&px=999 "Screenshot 2024-08-27 160107.png")

Hope that helps :-)

Mark


Tags: cloud

jira-service-management

jira-service-management-cloud
Documentation innacurate. How to setup custom email for Jira service desk?
Asked by James Moffat:

I've set up a Jira Service Management product and documentation is leading me to a dead end.

Can you provide step by step instructions on how to do this:

customer emails help@company.com

ticket created in jira

replies can be made to the user from within Jira and they are sent out via help@company.com


Answers:
author: James Moffat
body: resolved


Tags: cloud

jira-service-management

jira-service-management-cloud

jira-software
Crowd 3.2.3 extremely slow after upgrade from 2.7.2
Asked by Aleks G:

A few days ago we upgraded our Crowd installation from 2.7.2 to 3.2.3. After this upgrade, application performance us terrible. It takes close to 10 seconds to log in, any searching or listing operations takes an awful long time. Simply clicking on "Directories" to get a list of directories takes more than 30 seconds.

Looking a the dev tools waterfall, I can see that it takes browse.action taking 18.49 seconds, after which batch.css and batch.js respectively taking 11.08 and 12.03 seconds.

This is definitely not normal, 2.7.2 was lightning fast compared with this. Any help resolving this issue is greatly appreciated.


Answers:
author: AnnWorley
body: Hi Aleksander,

To get started, please:

1. Under **Admin** \> **Logging \& Profiling** in Crowd:
   * Change the com.atlassian.crowd package to DEBUG.
   * Enable profiling.
2. Replicate the performance issues you are seeing in Crowd (e.g. log out and log in, browse users, etc.)
3. Post the resulting errors from `CROWD_HOME_DIRECTORY/atlassian-crowd.log` on this thread (Crowd Home is specified in the following file: \<crowd_install_directory\>/crowd-webapp/WEB-INF/classes/crowd-init.properties)
4. List the directories and applications active in your Crowd instance.
5. Provide rough estimates of the number of users and groups that are available in each LDAP directory configuration.
6. Provide information about the network location of any LDAP servers in respect to the Crowd server (e.g. same subnet, different networks, different states).
7. If using Active Directory, is SSL enabled?

Please let us know if there were any other changes to the database, network, server, proxy or other infrastructure corresponding with the upgrade.

Thanks,

Ann

comments: author: Aleks G
body: Thanks for your reply. I can't find how to attach the log - any pointers? Here are the rest of the details:

1. Directories - one internal (with one admin user) plus 4 Active Directory ones. There are approximately 2500 users across the 4 active directories, however only about 50 or os are authenticating

2. Of the ADs, one is located in the same physical data centre, the other ones are in other locations connected by dedicated 1GB links to the one where Crowd is hosted - different subnets on the same larger networks (e.g. 172.19/16, 172.20/16, etc.)

3. Connected applications are: Jira, Confluence, Bitbucket, Crowd, Google-Apps, Crowd-OpenID-Server

4. SSL is enabled on Active Directories

Thanks,  
-Aleks


author: AnnWorley
body: Hi Aleks,

We cannot attach files here, though we can put log snippets in code quotes using the Format menu.

However, we would like to take a closer look and ask for more logs and configuration files. I opened a support request in your name for this purpose, you should hear from me on that via email shortly. After we resolve the issue I will circle back to let the Community know what we found.

Thanks,

Ann
User Move direktory issue
Asked by DKB Service GmbH:

Hi,

in our Crowd

we have a LDAP directory with user Accounts from company A

we have a LDAP directory with user Accounts from company B

example:

User John Doe get group-, Projekt- permissions; create in Jira (Issues, comments etc) and in confluence (sites, likes, comments etc); has space Permissions...

now we have the case that a user move from Company A to Company B.

-\>credentials form Company A will be deletet

--\>new credentials from company B

But if the same User (only with new credentials from Company B) log in into Jira/Confluence\> he is a new user with nothing.

is there a Way to assign the "new User" to the Old informations?


Answers:
author: AnnWorley
body: If the two LDAP directories use the same naming conventions for usernames then your user would retain content, permissions, etc from the existing account.

If the username will change when the user changes directories, then you may enable an alias in Crowd for each application authenticating through Crowd. In this case you would set the alias for the Directory B username to the name the user had in Directory A.

Details on how to enable aliasing for an application are in this doc:[Specifying a User's Aliases](https://confluence.atlassian.com/crowd/specifying-a-user-s-aliases-194805921.html)

comments: author: DKB Service GmbH
body: hi,

thats our problem. the username ist different in each LDAP directories.

i allready saw the alias function, but if the user change to new LDAP directorie and will be deleted in the old LDAP directorie, the alias will not longer work, or?


author: AnnWorley
body: The alias would be on the new account, as a property of the Application in Crowd. It wouldn't rely on the user account existing in Directory A, it would just allow the user to keep using the same username in Confluence: [Specifying a User's Aliases](https://confluence.atlassian.com/crowd/specifying-a-user-s-aliases-194805921.html):
> When logging in to a specific application (e.g. Confluence), Arthur must use the specific username (alias) for that application, e.g. 'arthur'.
How to add organization name in Jira email notification subject
Asked by Noman khan:

We have lots of customers configured as Organizations in Service Desk. Jira sends email notifications in format e.g  

**\[JIRA\] (DS-3414) Products add to manual collection not working**   

I want to update it and add Organization in the prefix like below so the team can filter out their emails and focus on only those customers who are associated with them  

**\[JIRA\] \[Organization Name Here\] (DS-3414) Products add to manual collection not working**


Answers:
author: Trudy Claspill
body: Hello [@Noman khan](/t5/user/viewprofilepage/user-id/5577113)

Welcome to the Atlassian community.

Do you fill in the Organization field for each request? If so, you may be able to include that information in the email using the variable

${issue.Organizations.name}

I have not tested that. I am extrapolating from documentation I've found that it might work.

A user could belong to multiple Organizations, so relying just on the Requester information may be unreliable.


Tags: cloud

jira-service-management

jira-service-management-cloud