youngmon/atlassian-qna huggingface dataset:
Component administration based off group membership
Asked by Nelson Ngamsuntikul:

Hello, is it possible to assign a group to administer a particular component(s)? sd ; is there a way to assign certain components for that Oracle group to administer?

I've tried searching through the documentation but was unable to find a way to assign a component to a user group?

I created an Oracle group

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/329824i9FE74F52A6FC040D/image-dimensions/259x206?v=v2 "image.png")

Would like the Oracle group to manage the 2 Oracle components

![image.png](/t5/image/serverpage/image-id/329822i57F3494544ED648F/image-dimensions/366x160?v=v2 "image.png")


Answers:
author: Egor
body: Hey Nelson,   
Thanks for reaching out to Atlassian Community!  

Currently, there is no direct way to assign specific components to be managed by certain user groups within Statuspage. The permissions model in Statuspage allows you to assign team members different roles (Admin, Viewer, etc.), but these roles apply to the entire page, not specific components.

For your use case, you might need to manage this outside of Statuspage by setting clear internal processes and guidelines for the different groups and their responsibilities, or by using multiple pages for different groups if the separation is critical.  

Best Regards,  
Egor

comments: author: Nelson Ngamsuntikul
body: Thanks Egor, for the reply; is there a reason for why it's designed this way? Are there some resources to guide me on the 'outside' processes/guidelines others use in my situation? Thanks again

StatusPage Newbie,

Nelson


author: Egor
body: Hey Nelson,

Statuspage's design aims for simplicity and security, ensuring that only designated team members have control over the entire page to maintain consistency and prevent misuse of permissions.  

**Guidelines for Outside Processes:**

1. **Documentation:** Maintain a shared document to track which team members manage specific components.

2. **Internal Communication:** Use tools like Slack or Teams to set reminders for component owners.

3. **Automation:** Implement custom scripts or use automation tools to notify owners of their responsibilities.

Thank you,  
Egor


Tags: cloud

statuspage-cloud
Scheduled maintenance gone?
Asked by support:

I scheduled a maintenance, but nothing happened when the scheduled time was reached - and logging back into Statuspage, the Maintenance is nowhere to be found; like I never made it.


Answers:
author: Egor
body: Hello There and thanks for reaching out to Atlassian Community!  

May I ask you please to reach out to us using the following link, so that we can assist you better? <https://support.atlassian.com/contact/>   

Thank you,

Egor


Tags: cloud

statuspage-cloud
How to add time stamp at the bottom of the page on last updated information
Asked by pchae:

Currently we have a status page where we hide out historical incidents.

We would like to show on the date/time the page was last updated. (ex. when an incident was last created/resolved. Excluding updates from maintenance)

Has anyone done this before?


Answers:
author: Jesse Klein
body: Hello there,

This is Jesse from the Statuspage support team. Thanks for reaching out about adding a last updated time to Statuspage. Welcome to the community. It's likely possible to accomplish this but I don't really have any specific information on what you would need to do.

One thing I found is that the last update from an incident is shown on the

\<div class="incident-data incident-container"\>

Maybe you can utilize that in your custom code similar to how you might have removed incidents altogether. Beyond that, though, I don't have any practical way to accomplish this with custom code. Hopefully, this points you in the right direction.

Regards,  
Jesse


Tags: cloud

statuspage-cloud
Scheduled Messages
Asked by Neil Atkin:

I want to display a message on status page at the same time every day, but only then.

Scheduled Maintenance will immediately display a message about the maintenance thats ahead so thats not suitable.

Is there a way to do this?


Answers:
author: Emma Kelly
body: Hi all

I have the same question, but the error I am getting is different! I am looking forward to solve this problem.


author: Kevin Patterson
body: Hi Neil,

is the message you are looking to display static text?

If it is a static message One way to solve this would be to leverage the Customize HTML/CSS feature of statuspage. Using this method you will need to add the static message to the custom html header section of the page, it can looks something like below:

*\<div id="timedMessage" style="display:none; text-align:center; padding: 10px; background-color: #ffffff;"\>*

*"Your display message here"*

*\</div\>*

Next you will need to add a javascript that will handle the visibility of the message inside of your timedMessage div above into the custom footer HTML section of the screen. This should give you what you are looking for.
StatusPage emails fail DMARC, go to spam
Asked by Liam Hennessy:

I have subscribed to email notifications on the status pages of several users of StatusPage. Recently, their messages are going to my Gmail spam folder. I think that this is because they fail the DMARC check.

Here's an example taken from Gmail's "Show Original" feature. When DigitalOcean created an incident in StatusPage, StatusPage sent an email to subscribers via an email service (SendGrid).

Who has something configured incorrectly, StatusPage, SendGrid, or DigitalOcean?

--------------

Message ID \<yzl464rhsqrg-1jtk2n4psdv7-2q4d9zst0q7g@statuspage.io\>  
Created at: Wed, May 29, 2024 at 5:47 AM (Delivered after 1 second)  
From: noreply@statuspage.io  
To: \<redacted\>  
Subject: DigitalOcean Incident - Kubernetes and App platform access for new user sign up. - 29 May 2024  
SPF: PASS with IP 167.89.65.53 Learn more  
DKIM: 'PASS' with domain sendgrid.net Learn more  
DMARC: 'FAIL' Learn more


Answers:
author: John M
body: Hi [@Liam Hennessy](/t5/user/viewprofilepage/user-id/403550) ,

Since SPF and DKIM both pass individually, the issue likely lies in domain alignment. The DKIM is passing with Sendgrid, but the 'from' address is statuspage.io - which is likely causing a DMARC failure due to the misalignment.

If you can reach out to DigitalOcean and have them contact Statuspage support, we can look deeper into the matter, with their account access.

comments: author: Liam Hennessy
body: Thanks John, I'll do that.


Tags: dmarc
Unable to Activate my Statupage
Asked by ATUL VERMA:

I am an **Admin** **(** and we are only 2 admins here**)** trying to activate my Statuspage, but I encounter an error whenever I attempt to activate the page (see the attached screenshot for details).  

Additionally, I do not want to add any **subscribers** to my StatusPage. Is it possible to activate the Statuspage without requiring any subscribers?  

What steps can I take to resolve the activation error? Any guidance or troubleshooting tips would be greatly appreciated.  

**Or is it possible to activate my page free of cost? If yes can I activate without any subscriber (now or in the future I didn't want any subscriber)?**   

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/327449i65D5F55F454F0C84/image-dimensions/518x186?v=v2 "image.png")


Answers:
author: Jesse Klein
body: Hi Atul,

Thanks for reaching out. I can't see into your org structure but it looks like this is related to the fact that you're not a billing admin: <https://support.atlassian.com/subscriptions-and-billing/docs/understand-billing-administration/>

It's possible you're a product admin but not a billing admin. I would take a look at the above and see if that helps you. If not, please reach out to support.atlassian.com and open a billing issue and our customer advocate team can help you understand why you're not showing up as an admin. Hopefully, that helps!

Regards,  
Jesse


Tags: activate

administration

cloud

help

statuspage-cloud
Cambio en el biling de jira
Asked by Jorge Armando Rodr?guez bonilla:

Buen dia a todos,  
Por favor me pueden ayudar con la siguiente duda actualmente soy el administrador de sistemas en la empresa donde estoy laboro, Debido al nuevo cambio en el biling de jira la cantidad de usuarios subi? de 66 activos a 236 aunque todos se encuentran activos alguno de ellos no cuentan con accesos a los productos tengo esta duda porque anteriormente no me mostraba esa cantidad de usuarios , No se si esto afectaria la nueva facturaci?n de la empresa o que otros cambios pueden afectar.  


Answers:
author: Chris DeGidio
body: Hi, [@Jorge Armando Rodr?guez bonilla](/t5/user/viewprofilepage/user-id/5441001), this is a very specific problem related to your account. So that we can properly pull up all details and information please submit a support ticket at support.atlassian.com. Please select the billing option.

Thanks so much!

- Chris


Tags: cloud

statuspage-cloud
How to connect to crowd via api
Asked by SBotalov:

Hi

I am trying to automate some tasks using Python script. And I need to connect to our company's Crowd application. I use the following pies of code to connect to Crowd.

But every time it returns 401 response.  
I am in the crowd-administrators group.  
Could you please advise on what I am doing wrong.  

Thanks!  

```
import requests

import json

crowd_url = 'https://*******.com/crowd'

username = '*********'

password = '***********************'

auth_url = f'{crowd_url}/rest/usermanagement/1/session'

auth_data = {'username': username, 'password': password}

auth_headers = {'Content-Type': 'application/json'}

auth_response = requests.post(auth_url, data=json.dumps(auth_data), headers=auth_headers)





```


Answers:
author: SBotalov
body: resolved the problem via browser_cookie3 python library which takes cookies of the current session from the browser. so I passed cookies with post request

cookies = browser_cookie3.chrome(domain_name='lp-uat.luxoft.com') #get current cookies from the browser  
cookies_dict = requests.utils.dict_from_cookiejar(cookies) #convert cookies to dict

r = requests.post(crowd_url, json=payload, cookies=cookies_dict)
Inquiries about crowd linkage
Asked by jihwan Park:

We are planning to integrate user directories between Crowd 4.2 and Bitbucket 8.8.2. Crowd is a server product and Bitbucket is a data center product. Would it be possible to use them without any issues when integrating the two solutions?


Answers:
author: Craig Castle-Mead
body: Hi [@jihwan Park](/t5/user/viewprofilepage/user-id/4345009)

Assuming that you're talking about adding a standard Crowd Directory in Bitbucket's User Directory setup, then yes, Crowd on a server license and BB on DC should work fine (this assumes that the Bitbucket instance can talk to the Crowd server and all the other standard setup/network questions) - there should be no issues based on the different license types.

CCM


Tags: server
Can I restrict a specific AD groups from 1 of my directories in crowd (!(cn=AD Group)
Asked by Dawn Cooper:

I have the need to allow just 1 AD Group in 1 of my directories to authenticate and automatically add the users to a specific local group in Crowd to map to Jira. Then that same AD group I need to restrict from everything else to prevent any crossover.

(!(cn=ADGroupname)

would this work in my object category configuration to filter them out and prevent authentication and access that way when I must check the box to authenticate against all directories otherwise?

Crowd v 4.3.5

Jira v8.13.18


Answers:
author: Craig Castle-Mead
body: Hi [@Dawn Cooper](/t5/user/viewprofilepage/user-id/734102)

"Then that same AD group I need to restrict from everything else to prevent any crossover." - can you give any more context about what "everything else" is?

Your proposed LDAP filter would/should block that group from being exposed to Crowd, you can only implement LDAP filters on a per directory basis in Crowd, so if you wanted to let users in ADGroupname to authenticate to Jira, you would either need to have two Crowd directories (on excludes this group, one includes only this group), and then map those directories to the relevant application(s), or - depending on what "everything else" is - let's say you've got Confluence and Bitbucket connected to the same Crowd server and you don't want these users using either of those apps, you'd leave the "allow all users to authenticate" option unchecked on the Conf+BB Crowd Application pages, and then select the relevant group(s) of users that represent "the rest" of the company.   

CCM


author: Dawn Cooper
body: I figured out a plan, I will use different local groups in Crowd with auto assignment based on an AD group and then apply the local groups in my permissions schemes.


Tags: active-directory

jira

server
Crowd cannot send test email because of socket read timeout error
Asked by Dai Zhang:

I configured Crowd outgoing mail with UI or JNDI method. However both didn't work.

The logs are listed below:

\`\`\`

DEBUG: setDebug: JavaMail version 1.6.2 DEBUG: getProvider() returning javax.mail.Provider\[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Oracle\] DEBUG SMTP: useEhlo true, useAuth true DEBUG SMTP: trying to connect to host "smtp.test.cn", port 587, isSSL false 220 n212-142-139 ESMTP ready DEBUG SMTP: connected to host "smtp.test.cn", port: 587 EHLO 75ef36adabd8 250-n212-142-139 250 STARTTLS DEBUG SMTP: Found extension "STARTTLS", arg "" STARTTLS 220 2.0.0 Start TLS EHLO 75ef36adabd8 250-n212-142-139 250 AUTH PLAIN LOGIN DEBUG SMTP: Found extension "AUTH", arg "PLAIN LOGIN" DEBUG SMTP: protocolConnect login, host=smtp.test.cn, user=crowd@test.tech, password= DEBUG SMTP: Attempt to authenticate using mechanisms: LOGIN PLAIN DIGEST-MD5 NTLM XOAUTH2 DEBUG SMTP: Using mechanism LOGIN DEBUG SMTP: AUTH LOGIN command trace suppressed DEBUG SMTP: AUTH LOGIN succeeded DEBUG SMTP: use8bit false MAIL FROM:

250 2.0.0 Roger, accepting mail from RCPT TO:

250 2.0.0 I'll make sure gets this DEBUG SMTP: Verified Addresses DEBUG SMTP: mail@test.tech DATA 354 2.0.0 Go ahead. End your data with .

QUIT DEBUG SMTP: exception reading response, THROW:

java.net.SocketTimeoutException: Read timed out

at java.base/java.net.SocketInputStream.socketRead0(Native Method)

at java.base/java.net.SocketInputStream.socketRead(SocketInputStream.java:115)

at java.base/java.net.SocketInputStream.read(SocketInputStream.java:168)

at java.base/java.net.SocketInputStream.read(SocketInputStream.java:140)

\`\`\`

according to the \[suggestions online\](<https://stackoverflow.com/questions/71272796/javamail-sends-no-content-with-smtp-sends-quit-and-hangs>), I switched the javamail to version 1.6.4 or 1.6.5 or downgraded it to 1.6.1. However, the mail still cannot be sent out.

How to fix it. Thanks.


Answers:
author: Dai Zhang
body: contacting the backend smtp service provider, and they said the connection broke when sending 6 bytes in DATA stage. The mail server side could only read out 6 bytes then wait until timeout.

comments: author: Dai Zhang
body: It seems the crowd application does not send the SMTP commands correctly. How to debug it and fix it.


author: Rinat Vafin
body: Hello. Have you find solution for this issue? I'm getting same behavious on using gmail smtp (and some other public relays).


Tags: smtp
Crowd integration with Oracle IDCS
Asked by Rodrigo Kondo Fernandes:

Hi folks!

Can we connect Oracle IDCS to Crowd in order to sync users?

If so, how to do it?

Regards,  
Rodrigo Kondo Fernandes


Answers:
author: Ashwini_More _miniOrange
body: Hey [@Rodrigo Kondo Fernandes](/t5/user/viewprofilepage/user-id/3524692),

You can use **[miniOrange SCIM App for Crowd](https://marketplace.atlassian.com/apps/1229918/mo-scim-provisioning-user-group-sync-for-crowd?hosting=datacenter&tab=overview)** to sync users in the crowd from Oracle IDCS. Oracle IDCS supports SCIM Protocol, which is used to set up the provisioning.

The app allows you to create, update and deactivate crowd users as per changes in the user's profile in Oracle IDCS. You can also add or remove group membership in the crowd as permissions/groups change in Oracle IDCS.

You can evaluate the app from Atlassian Marketplace directly or reach out to the miniOrange Support Portal **[here](https://miniorange.atlassian.net/servicedesk/customer/portal/2)**for demo/setup support.

ps: I work for [miniOrange](https://marketplace.atlassian.com/vendors/1213308/miniorange), one of the top SSO vendors in Atlassian Marketplace.


Tags: integration

oracle

user
Connecting local crowd to upstream crowd
Asked by colorfingers:

How do I connect our Crowd to an upstream crowd without it locking us out of our license? The corporation has a network and their crowd is connected to the AD. We have a separate Crowd server that connects to it so that users of the network can logon to our services in the same domain.

We are a subset of the domain and only want logged on users to be cached in our Crowd. After a few minutes of being connected to the upstream crowd we get locked out with the message we have gone over our license and need to puchase a new one. Nobody is logging on at the time but me.


Answers:
author: Craig Castle-Mead
body: Hi [@colorfingers](/t5/user/viewprofilepage/user-id/5175910)

Theres quite a lot of detail missing from your explanation, so the below may not be relevant for your org/setup, but some thoughts:

* Crowd licenses are about users in a directory - not just who has logged in.
* assuming you downstream Crowd server is using a Remote Crowd directory to pull users from the Upstream Crowd server, you can limit the users who are being exposed between the two instances by adjusting the "Who can login" options for the upstream Crowd application that the downstream Crowd directory uses. You would have to uncheck the "anyone can authenticate" checkbox and then add group(s) that represent your subset of users. You then need to set "All groups, but only users with access rights" option as per [https://confluence.atlassian.com/crowd/syncing-users-based-on-their-access-rights-1085203681.html#:\~:text=When%20you%20map%20a%20user,is%20redundant%20in%20most%20cases](https://confluence.atlassian.com/crowd/syncing-users-based-on-their-access-rights-1085203681.html#:~:text=When%20you%20map%20a%20user,is%20redundant%20in%20most%20cases). This would only expose the users in the selected groups to your downstream Crowd server.

CCM
Need to help to integrate Crowd with Jira.
Asked by Mayur Jadhav:

Hello Team,

I hope all are doing well.

We have Jira, Confluence, and Crowd cluster setup and has load balancer i.e., deployed on Alibaba Cloud and We have already integrated Crowd with Azure AD to SSO and user provisioning purpose. We tried to integrate Crowd with Jira and we followed the all the steps, but at the final steps when we create user directory i.e., Crowd SSO directory in Jira and when pass the actual crowd URL i.e., crowd.xyz.io it shows the below error with IP.

![image.png](/t5/image/serverpage/image-id/243869iC0ABD51F519D76F2/image-dimensions/1026x56?v=v2 "image.png")

and the IP is frequently changing per request, but when we passed Private IP (Internal IP) of the crowd i.e. (http:ip:8095) the connection is successful, but as I mentioned we have two nodes for Crowd in the configuration we can only pass the one IP and we will also loose the Cluster functionality.

Looking forward for answer from all the experts here to troubleshoot and fix the issue.

Regards,  
Mayur


Answers:
author: Mahesh Shinde
body: Hi [@Mayur Jadhav](/t5/user/viewprofilepage/user-id/4290135) ,

Could you please answer below queries:

* The IP address which is mentioned in the error, is it Load Balancer IP address of Jira?
* did you add IP or hostname of Jira's LB into Crowd configuration in Applications -\> app -\> Remote Addresses ?

This will provide you some background on this.

As you have Crowd DC setup with 2 nodes, then you have to use Crowd URL in user directory config in Jira that URL should be link with LB and LB should redirect traffic based on the parameters which is present in configuration.

Here is the reference article: <https://confluence.atlassian.com/enterprise/load-balancer-configuration-options-935383760.html>

Regards,

Mahesh Shinde

comments: author: Mayur Jadhav
body: Hello [@Mahesh Shinde](/t5/user/viewprofilepage/user-id/2230848) ,

Thanks for your response!!

The IP address which is mentioned in the error is not load balancer IP of Jira.

Yes, I have added and tested it, but still the same.

Yes, want the same configuration but unable to do it.

Regards,  
Mayur


author: Mahesh Shinde
body: Hi Mayur,

The error message is corresponding to that the crowd is not authorizing the request coming from the IP 1 for "jira-app", it means this IP is corresponding any of the application.

* Do you have any idea about this IP, to which application it has, I think it is public IP
* Have you tried to add this IP (in error message) in Crowd configuration in Applications -\> app -\> jira-app -\> Remote Addresses ?

Regards,

Mahesh Shinde


author: Mayur Jadhav
body: Hello [@Mahesh Shinde](/t5/user/viewprofilepage/user-id/2230848) ,

This Ip is frequently changing and even I have added and sometime the connection got successful and when I click in save and test then it again fails.


author: Mahesh Shinde
body: Hi Mayur,

I think, you have to add hostname or URL of that IP as its changing frequently.

Regards,

Mahesh Shinde


Tags: integration

jira

sso
"XSRF check failed" exception occurs in some REST APIs after HTTPS is used
Asked by lamella:

We are testing using crowd as the center to perform SSO login of jira, confluence and other systems, and using nginx for URL forwarding. Most of the pages can be accessed normally, but when we try to edit SSO in the crowd application, the page as a whole has an "XSRF check failed" exception.  
We use docker to deploy crowd, jira and other systems. In the environment configuration of crowd, we set ATL_PROXY_NAME to 192.168.0.40 and ATL_PROXY_PORT to 443, but this does not seem to have any effect, but makes the default port 8095 unable to access normally up.  
So, does anyone know what to do in this situation? I refer to crowd configuration tomcat to ssl mode, and replace the server.xml file mapping of tomcat, but they cannot be accessed normally.


Answers:
author: lamella
body: This is the configuration of nginx

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/243589i7C2DC942C940CD80/image-size/large?v=v2&px=999 "image.png")

And this is the server.xml configuration in crowd's docker container

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/243590iACE5845B16A7DD25/image-size/large?v=v2&px=999 "image.png")

And this is the rest api where crowd has "XSRF check failed" exception

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/243591i3C1836AA50829FE0/image-size/large?v=v2&px=999 "image.png")
Crowd Server still shows old OS version and Old Java version even after the OS upgrade
Asked by Shraddha Sudheendra:

We have performed In -place upgradation of OS of the system where crowd is hosted from Win server 2012 to Win server 2022. The Java version was also upgraded from 1.7 to 1.8.

The upgrade was successful.

However, in the crowd server -\> administration -\> system info, the OS is shown as 'Windows Server 20126.2'

Even the Java version is displayed as per the older version.

Why is it not getting updated? Am I missing out anything?


Answers:
author: Nic Brough -Adaptavist-
body: Did you restart the server?


Tags: server