youngmon/atlassian-qna huggingface dataset:
How to give Crowd its own domain (separate from CrowdID)?
Asked by Ayron Jungren:

I want my Crowd URLs to be <http://crowd.example.com>, which I want to proxy to [http://localhost:8095/crowd, http://openid.example.com](http://localhost:8095/crowd%2C http://openid.example.com) to proxy to [http://localhost:8095/openidserver, etc.\</p\<\>\>](http://localhost:8095/openidserver%2C etc.%3C/p)

[Is this in any way supported? I tried doing this with plain Apache, but I get redirected to](http://localhost:8095/openidserver%2C etc.%3C/p)[http://crowd.example.com/crowd\<a\< a=""\> href="http://crowd.example.com/crowd,"\>,](http://crowd.example.com/crowd%3Ca) which gives a 404, as it's proxied to [http://localhost:8095/crowd/crowd. I've](http://localhost:8095/crowd/crowd. I%27ve) edited build.properties to change the Crowd URL, and run build.sh (and of course restarted Crowd). So I'm pretty sure all I need is for Crowd to stop tacking on the /crowd, but I'm not sure how to do that, if I can. Same goes for the OpenID server.

EDIT: Sorry, I'm not sure how to stop Answers from hyperlinking everything, I already took the hyperlinks out in the editor. :(


Answers:
author: Frank Febbraro
body: To expand on that even more. I want to have my users openid url be of the form <http://username.mydomain.com> not <http://crowd.mydomain.com/openidserver/user/username> how is this supported?


author: Kimberly McKinnis
body: I think Nginx can help make this work.
Possible concern for making session time control longer?
Asked by Daisuke Niwa:

Hello there,

Is there any possible concern regarding performance or anything when you make the session time control of Crowd extraordinary longer, say, 120 minutes?

The background of this question is some of our users want to stay in the integrated applications (such as JIRA, Confluence) longer than 40 minutes which is the current setting.

Please advise.

Regards,

Daisuke Niwa


Answers:
author: twong_atlassian
body: I don't believe so. It could be a security concern considering unattended sessions would be open significantly longer.

comments: author: Daisuke Niwa
body: Hello Tim,

Thank you for your answer,and sorry for very late response.


Tags: session
LDAP User Object Filter configuration
Asked by Alexandre Basciano:

Hello,

I work with crowd 2.2.7 and I setup a LDAP directory (that works fine).

But when I tried to apply an User Object Filter by using the following character : "!"

I got an the error message below:

No results were found from your search. org.springframework.ldap.InvalidSearchFilterException: Unbalanced parenthesis; nested exception is javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis;

All the others operator \& \| ... works fine

I would like to know if there is a known issue about this specific character "!" ?

Thank you for your help.

Regards,

Alexandre


Answers:
author: Alexandre Basciano
body: Simple error : instead of doing (!myAttribute=myValue) we should do (!(myAttribute=myValue)).


author: Alexandre Basciano
body: First of all thank you for your reply but I correctly wrote my query as (!myAttribute=myValue).


author: Radu Dumitriu
body: So your query looks like

```
(!givenName=FrancescoZappa) - correct
and not 
!(givenName=FrancescoZappa) - incorrect

It is most common mistake. Not an expert though (a poor developer), that's what I remember ...
```


Tags: ldap
Dragon Quest: What's happened with Crowd?
Asked by Daniel Turner:

I've done the dragon quest a few times now to set up a few different instances of the suite.  

I've just come back to do it again but noticed that the Crowd stage (which used to be first) is now completely gone?  

Why is this?


Answers:
author: Jobin Kuruvilla [Adaptavist]
body: This is because crowd is embedded in JIRA 4.3.4. As you can see, the groups and users needed for confluence, bamboo etc are now created in JIRA.

comments: author: Kimberly McKinnis
body: Does that mean that for new installations, we don't need to purchase Crowd anymore? I have a staging setup with old versions and I need to install on my production server finally.


author: Jobin Kuruvilla [Adaptavist]
body: You don't need it if you were using it for JIRAonly. But for single sign on between other apps etc, you might still need it. You can find more details in the Crowd docs.


author: Kimberly McKinnis
body: Jobin: thanks! I don't care about SSO, but I do care about plugging it into LDAP for Confluence and Jira. I'll read up on the new docs.


author: Jobin Kuruvilla [Adaptavist]
body: JIRA and Confluence can share the user base in JIRA which can be connected to LDAP. Yes, documentation is the best place to start :)
Is there a way to display nested Crowd groups as a graphviz (or similar)?
Asked by Andrei [errno]:

nested groups in Crowd is a brilliant feature.

now, when you have dozens of groups - it would be even better if we could see a nested tree. Is there a solution? or is there a SQL query I could run to programmatically generate a tree? thanks


Answers:
author: Andrei [errno]
body: if only i knew enough to write a plugin :)


author: Colin Goudie
body: A nested tree sounds like a great idea for a plugin. Now I wish I could pull some spare time from somewhere ;)


Tags: group
Is Atlassian working on Crowd connector to OSQA?
Asked by Andrei [errno]:

wanted to host internal OSQA site for a while now and seeing Atlassian going the same route helps :) now if Crowd would support SSO with OSQA...   
thoughts?


Answers:
author: TylerA
body: Right now, we use a simple LDAP authenticator against our Crowd instance for Answers authentication. Would that not meet your needs?

\[Edit\]

Unfortunately, I also am unable to release the authenticator code, but from what I understand it's fairly straightforward python to talk to LDAP.


Tags: osqa

sso
Crowd-to-SVN integration - problem with AuthzSVNCrowdAccessFile
Asked by Rafal Habrat:

I tried to configure authorization for an SVN instance that is integrated with Crowd and ran into the following error:

*Invalid command 'AuthzSVNCrowdAccessFile', perhaps misspelled or defined by a module not included in the server configuration*

I'm using CollabNet's SVN that is runnning on Red Hat Linux with Atlassian's Crowd-Apache Connector 2.0. Authentication against Crowd when not using AuthzSVNCrowdAccessFile directive works just fine. Any ideas anyone?


Answers:
author: Zohaib Arshad
body: Please check the version of Red Hat Linux you are using. The error you mentioned usually occurs due to an invalid version of the Crowd Apache Connector relative to your OS. Try rebuilding it using details below mentioned in comment . I hope it will helpful


author: Alexey Kramnyuk
body: after rpm installed, module mod_authz_svn_crowd.so not added into httpd.conf, and configtest not passed

I add him into my subversion.conf, all working perfect (CentOS 5.8):

```
LoadModule dav_svn_module     modules/mod_dav_svn.soLoadModule authz_svn_module   modules/mod_authz_svn.soLoadModule authnz_crowd_module /usr/lib64/httpd/modules/mod_authnz_crowd.soLoadModule authz_svn_crowd_module /usr/lib64/httpd/modules/mod_authz_svn_crowd.so
```


author: Leandro Nunes
body: No other idea, sorry :S


author: Leandro Nunes
body: Hi Rafal,

I'm afraid it won't work with version 5.3, at least if you use rhel5.5. I've seen this error before. Nevertheless, I didn't try to rebuild from the source, I believe it's a good shoot.

Cheers!

comments: author: Rafal Habrat
body: Leandro,

Any idea what the root cause is? Like I said, I also tried with CentOS 5.5 which is rhel5.5 and it did not work...


author: Leandro Nunes
body: Hi Rafal,

Please, check what version of version of Red Hat Linux you're using. The error you mentioned usually occurs do to a Crowd Apache Connector invalid version (regarding the version of your OS). Please, try to rebuild this using the following documentation:

<http://confluence.atlassian.com/display/CROWD/Installing+the+Crowd+Apache+Connector+on+Red+Hat+Enterprise+Linux>

Cheers!

comments: author: Rafal Habrat
body: Thanks Leandro,

I've actually tried it on both Red Hat 5.3 and CentOS 5.5 and hit the problem on both machines. I've used rhel5.5/mod_authnz_crowd-2.0.1-1.x86_64.rpm on both. I had no problems with installation - I only hit the problem when trying authorization. Do you think rebuilding from source can fix it?


Tags: svn
Automation Reminder
Asked by Berat Altunhan:

Hello,

When requests come to us, we have a process where we send them for approval and while they are waiting for approval, they are in "waiting for approve" status. If the relevant person approves this request, it becomes "approved" and if not, it becomes "rejected". But sometimes users forget to approve it, so I want to send them a reminder mail through the automation as follows.

1. First reminder 1 day after status waiting for approve.

2. 2 days after the status is waiting for approve, we plan it to be the second reminder.

How do I realize this on automation. I would appreciate if you can help.


Answers:
author: bduncan
body: You could set up a second automation that uses JQL to find issues that are in waiting to approve and have been for 2 days.

```
PROJECT = ZZZ AND STATUS = "Waiting to approve" AND (STATUS CHANGED BEFORE -2d)
```


Tags: cloud

jira-service-management

jira-service-management-cloud
Do Answers and My.Atlassian.com use Crowd?
Asked by justindowning:

Do answers.atlassian.com and my.atlassian.com use Crowd for user management/authentication? If so, why do I have to log in seperately?


Answers:
author: Steve Smith
body: A bit of background on the Crowd setup at Atlassian...

My.atlassian.com authenticates against a Crowd instance, and this is used for SSO across a couple of other sites such as our plugins and translations tools.

However Crowd is backed by an LDAP server (specifically OpenLDAP), and there is the option to bypass Crowd and talk to this server directly. For a number of sites this is preferable; internally we're increasingly moving to a distributed architecture and LDAP's ability to transparently replicate gives us greater scalability and removes a single point-of-failure, as we can give each application its own read-only LDAP slave that syncs from a master server.

Answers.atlassian.com is one of the sites that talks to LDAP directly, hence your login is shared with MAC but you need to login to each site separately. We do have an ongoing internal project to unify the logins across more systems (e.g. support), but there are a number of logistical issues to doing so due to the large number of existing users.

Re: releasing the connector; the code is somewhat Atlassian specific, as it needs to treat staff and customers differently, and overrides the registration process to use my.atlassian.com for signup. However I should really do a developer-blog post about the module as it may be useful to others.


author: TylerA
body: \[Edited\]

Answers uses my.atlassian.com's Crowd for authentication, however it does not use Crowd itself nor support Single-Sign-On (SSO), which means that you have to log in at least once for each location. (Cookies can handle the rest.)

Perhaps we will provide SSO for our various sites, but that would also require consolidating all users to a single system (which is a fairly great undertaking) as well as adding a Crowd version of Python (for Answers).

comments: author: Bruno BLAISE
body: Are you planning to publish this crowd authenticator for Answers ?


author: TylerA
body: Likely no, as it's really only an LDAP authenticator running against our Crowd instance.


author: Justin Shapiro
body: I just set up an OSQA instance and I used <https://bitbucket.org/sannies/django-crowd-backend/wiki/Home> to connect to crowd. Seems to work well.

comments: author: Jake Robinson
body: Any more specifics on how you set this up with OSQA?


Tags: community
How can I open an issue collector popup/form using react button?
Asked by Pavithra Kandula:

![Jira.png](https://community.atlassian.com/t5/image/serverpage/image-id/334639iDE9C6A9FBD59D8E0/image-size/large?v=v2&px=999 "Jira.png")Hello,

I am trying to use the JavaScript code snippet that is generated for embedding issue collector in our react code, but I am facing UI positioning issue on my website when I do that.

So, I want to know instead of on click of trigger button opening an issue collector popup which is provided by JIRA can I implement the same using react button.

Please let me know if it is possible.

Thank you!


Answers:
author: Christopher Yen
body: Hi Pavithra,   

Are you looking to use your own button to bring up the issue collector?  

This article might help <https://support.atlassian.com/jira-cloud-administration/docs/customize-the-jira-issue-collector/>

In the way they did their example it seems like you can apply your own CSS to the button for positioning.

comments: author: Pavithra Kandula
body: Hello [@Christopher Yen](/t5/user/viewprofilepage/user-id/5051689) ,

Thank you for your suggestion, it worked perfectly for our use case.

Thank you!


Tags: cloud

jira-service-management

jira-service-management-cloud
How do I get the subtasks of a ticket to reflect the SLA of that of the parent ticket?
Asked by bunny:

I have a parent task that is 56 hours overdue (show in SLA) but it has some attachments and I converted the name of the attachments to subtasks. Of course, because I created the subtasks today, it doesn't show that the subtasks are 56 hours are overdue as the parent ticket. Anyway to navigate this?

Sub-task SLA:

![subtask sla.png](https://community.atlassian.com/t5/image/serverpage/image-id/334643iE8BD54EB800E03E9/image-size/large?v=v2&px=999 "subtask sla.png")

Parent issue SLA:

![parentsla.png](https://community.atlassian.com/t5/image/serverpage/image-id/334641i9F7EA77BDEF6E181/image-size/large?v=v2&px=999 "parentsla.png")

Do I need to have admin access for this?


Answers:
author: Callum Carlile _Automation Consultants_
body: Hi [@bunny](/t5/user/viewprofilepage/user-id/5540652) , welcome to the Atlassian Community!

There is not a quick and easy way of doing this, as the SLAs are only triggered from the SLA settings.

I would also question the logic behind this decision. Subtasks should be used as a way of breaking down a parent task into smaller sections, and any SLAs on the parent task usually encompass all subtasks beneath it (I haven't seen this requirement to copy SLAs from the parent to subtasks very frequently)...

If this is a firm requirement however, you may be able to do this through some custom automations - e.g. If your subtasks used the same workflow as the parent, you could create automation rules which sync the subtask statuses whenever the parent is transitioned, which would then also act as the trigger for the SLA (assuming your subtask issue types fall within the JQL in the SLA settings).

Hope this helps!

comments: author: Callum Carlile _Automation Consultants_
body: Ah apologies I've just seen you've edited your original question.

For this requirement, you could create an automation which copies the SLA remaining on the parent into a custom field on any newly created subtasks. This custom field could then be used within the JQL in the SLA settings that would trigger when your subtasks are created - though you would need to create 'batches' of JQLs within your SLA settings, e.g**:**

custom field \<2h  
custom field \>=2h and \< 4h  
custom field, custom field \>=4h and \< 6h  
etc.


Tags: jira-service-desk-unknown-hosting-type

jira-service-management

jira-service-management-unknown-hosting-type

sub-task
Organization for issues created by employees
Asked by adam:

Hi everyone,

we are relatively new to working in the cloud and with JSM and have the following problem. When our employees create an issue for a JSM customer project, the organization is not a mandatory field and we often forget to set it. The customer then does not see such an issue on his JSM screen. If the customer creates an issue via the JSM screen, the organization is automatically filled in and everything is fine.

It looks like the organization cannot be set as a mandatory field here either. Is there another way to add the organization from the project to the issue if it has been forgotten there? We usually only have one organization per project for customer projects.

Thank you \& best regards


Answers:
author: Dave Mathijs
body: Hi [@adam](/t5/user/viewprofilepage/user-id/5448277)

When you agents create issues/support requests on behalf of customers, it is best practice to do this ++via the portal++ instead of the Create button.

When you raise the request on behalf of \<customer name\> and that customer is a member of an Organization, it will appear in the issue.

comments: author: adam
body: Hi [@Dave Mathijs](/t5/user/viewprofilepage/user-id/2662590)

thanks for the reply.

That surprises me now, we don't tend to do that. Since the normal Jira issue view, in contrast to the portal view, contains the complete fields and workflow buttons, we actually always use it to record the processes - even if they are for customers of a jsm project.

In the meantime, however, we have found a workaround and were able to add a "field requiered validator" with a condition (projecttype=servicedesk) in the workflow, in the confirmations when creating the issue. This way, at least we don't forget to fill it in.


Tags: jira-service-desk-cloud

jira-service-management

jira-service-management-cloud
Some projects not loading
Asked by Albert Ashkhatoyan:

Hi Jira I have setup a couple projects and now cant access to some of them Jira redirects me to Projects page I have recreated the projects, checked with different browser, and clear cash and cookie but nothing helps, interesting thing that some of users can access to Project but Admin and other users cant.I can share a video of issue if needed


Answers:
author: Walter Buggenhout
body: Hi [@Albert Ashkhatoyan](/t5/user/viewprofilepage/user-id/5524289) and welcome to the Community!

To view a project, you need to have specific access to it. Being an administrator does not automatically allow you to access all projects, although someone with admin permissions can always check and adjust these settings.

Depending on your project type (team or company managed) permissions to a project are set differently. [This support article](https://support.atlassian.com/jira-software-cloud/docs/next-gen-permissions/) explains the access rights to **team managed** projects. For more details on **company managed** projects - where users need the *browse project permission* to access the project - you can check out [this support article](https://support.atlassian.com/jira-cloud-administration/docs/permissions-for-company-managed-projects/).

To review permissions for a project you can't access, a Jira administrator can locate the project from *Jira Admin \> Projects* and edit the project settings there.

Hope this helps!


author: Hans Polder
body: [@Albert Ashkhatoyan](/t5/user/viewprofilepage/user-id/5524289) , I think a video would be helpful if you could share it!

Also, can you share how you've setup the Permission Scheme for this project?

I assume you can see the newly created project in the Projects overview? Can you verify and let me know if this is the case? Is my assumption correct that there is no 'star' sign in front of it?


Tags: cloud

jira-cloud

jira-service-management

jira-service-management-cloud

project
Virtual Agent API
Asked by Francisco Gomez Balastegui:

Hi, we want to use Virtual Agent with Google Channel.

It is there any API that we can use with Virtual Agent to create our custom Channel?

Thanks


Answers:
author: Marc - Devoteam
body: Hi [@Francisco Gomez Balastegui](/t5/user/viewprofilepage/user-id/2380890)

There is not API in relation to Virtual Agent.

Virtual Agent can currently only be used with Slack.

There is an open request in relation to Google Chat, see [JSDCLOUD-13232](https://jira.atlassian.com/browse/JSDCLOUD-13232)


author: Bertrand Lafforgue
body: Hello,

Konverso is an Atlassian partner with a GenAI virtual agent that runs with JSM, Jira, Confluence, and Google chat. Please visit the marketplace for more details. Koji -- Chatbot powered by Generative AI

Best regards,

Bertrand

comments: author: Miguel ?ngel P?rez Montero
body: Hi,

Thanks for your answer but in the documentation of Koji I can't find information about connect with Google Chat

<https://konverso.atlassian.net/wiki/spaces/KAJSM/overview?homepageId=2165244015>

Regards


Tags: cloud

jira-service-management

jira-service-management-cloud

virtual-agent
How to connect service management with software development
Asked by Ondrej Holubovsky:

Hi everyone,

How can we connect two different projects? The idea is to create issues in Service management and duplicate them in project development so we can cooperate with other users who are not part of the service project.


Answers:
author: Walter Buggenhout
body: Hi [@Ondrej Holubovsky](/t5/user/viewprofilepage/user-id/5540470) and welcome to the Community!

First of all, be aware that users with a Jira license (not JSM) can already see the issues in JSM if you add them to the Service Team role in your JSM project. They will be able to add internal comments to tickets to support the Service Desk Agents if they have questions.

If you want to go a step further and duplicate tickets in another Jira project, you can use automation to do so. Automation has a **clone issue** action that lets you copy an issue. If you make sure to include a link to the original JSM ticket, you can use that to later on keep the Jira and JSM tickets in sync. [This template rule](https://www.atlassian.com/software/jira/automation-template-library#/rule/1371671) illustrates how you can sync updates across linked issues.

Hope this helps!


Tags: cloud

jira-service-management

jira-service-management-cloud
new Jira SM and create incident management workflow with 3rd party applications.
Asked by josh_sung:

Hi,

I am curious what others have done or if I could get Atlassian's experts' advice on trying to make my set up as efficient as possible. Others are able to chip in their set ups and how their 3rd party apps talk to each other.

Currently, we have:

* Jira Software
* Jira SM
* Incident.io.
* Site24x7
* PagerDuty.

There are integrations between all of these but I want to make them work together or simplify the process without causing too much disruption.

What thoughts do people have in your own environments? Have you made multiple apps integrate well and work? Or do you have ideas on how to approach the problem?


Answers:
author: Jeroen Poismans
body: Hi there and welcome to the Community!

Quite a broad question but I can give you one possible way to make these work together, depends on your needs of course.

Have a look at Adaptavist Scriptrunner Connect (I do not work for Adaptavist):  
<https://www.scriptrunnerhq.com/atlassian-apps/jira/scriptrunner-connect>

Their platform has managed API's (connectors) for everything Atlassian related (and some non-atlassian products) and offers a platform to talk to everything with an API with a generic connector.

Basically you set up connections to all your third party apps and write logic how a trigger in 1 app should do something in any or multiple of the other connected apps.

Have a look!

comments: author: josh_sung
body: Thanks jeroen, although, I first wish to attempt this all without another 3rd party tool, especially since I know they all have jira integration of some sort.


Tags: cloud

jira-service-management

jira-service-management-cloud