youngmon/atlassian-qna huggingface dataset:
Crowd Directory Sync settings improvement
Asked by Hans Pesata:

Hi!  

[Crowd](https://www.atlassian.com/software/crowd/) Version: 3.7.0 (Build:#1270 - 2019-10-03)  

We configured a Generic Directory Server which syncs User via LDAP.  

There are about 50000 users and the sync takes 45 minutes.  

Crowd always perfoms a full sync on the directory and I wonder how I could improve the sync time ?   

I am currently using paged results, but from what I understand it can only deliver chunks of 1000 entries ?  

Any hints would be greatly appreciated!  

Regards,  
Hans


Answers:
author: Marcin Kempa
body: Hi [@Hans Pesata](/t5/user/viewprofilepage/user-id/613670)

Thank you for this question. Do you have any additional details from logs that could help to understand where Crowd spends most of the time? Is ti due to networking or is it perhaps in database?

Among those users are you also synching groups? Are you using nested groups as well?

Best Regards,

Marcin Kempa

comments: author: Hans Pesata
body: Hi Marcin!  

I have a more detailled description within my question:  

<https://community.atlassian.com/t5/Crowd-questions/Crowd-Full-LDAP-Directory-Sync-running-2-times/qaq-p/1255207>  

We are only syncing users but no (nested) groups.

I tried to use diffent page sizes from 200 to 999, but the sync is always pretty slow.  

Also the fact, that Crwod seems to sync twice enhances the sync time.  

Thanx for any hints on how to improve the sync!  

Regards,  
Hans
Is there a way to automatically deactivate a user after X days?
Asked by Matthew Mallard:

Like most larger companies, we have a policy that requires a users to change their password every 90 days. Is there a way to automatically deactive a user account if they have not changed their password within the last 90 days? Alternatively, is there a way to deactivate their account if they have not logged into crowd within the last 90 days?


Answers:
author: Marcin Kempa
body: Hi [@Matthew Mallard](/t5/user/viewprofilepage/user-id/1921128)

Unfortunately there is no such functionality yet implemented. There is a feature request for that and Crowd team is still gathering feedback about it. Here is the request <https://jira.atlassian.com/browse/CWD-4751>, we would appreciate if your could provide your feedback there.

Just one more question to your setup and use-case. Are your users stored in Crowd's internal directory or you would like this feature to work also for other types of directories?

Best Regards,

Marcin Kempa

comments: author: Matthew Mallard
body: "Just one more question to your setup and use-case. Are your users stored in Crowd's internal directory or you would like this feature to work also for other types of directories?"  

To answer your question, use-case would only be for Crowd internal directories. Also, I voted on the issue you linked in your comment. Hopefully it gets some traction.
Unable to install crowd service in windows.
Asked by Amar:

Hi All,

We are installing crowd 3.4.0 on windows server along with JIRA.

We are able to install crowd with and run as tomcat service how ever we are unable to install crowd as windows service [These](https://confluence.atlassian.com/crowd/installing-crowd-as-a-windows-service-82870454.html "These") and we are getting below error:

1. Tomcat8.exe file was not found.

2. Catalina_home environment variable is not define correctly.

My settings are as below.

- JAVA_HOME and JRE_HOME are added in system variables.

-Running 64bit JVM and 64 bit operating system so I didnt change tomcat.exe files([change](https://confluence.atlassian.com/crowd/installing-crowd-and-crowdid-191862.html "Change tomcat") )

- as JIRA is also running didn't add Catalina_Home variable in system variable.

Please help to install crowd as windows service.

Regards

Amar


Answers:
author: Marcin Kempa
body: Hi [@Amar](/t5/user/viewprofilepage/user-id/1140977) ,

I would be good if you could share more information from your logs? Or perhaps the whole process does not start?

Regards,

Marcin Kempa

comments: author: Amar
body: [@Marcin Kempa](/t5/user/viewprofilepage/user-id/671367)

Thanks you for reply.

windows service process is not staring at all after following [These](https://confluence.atlassian.com/crowd/installing-crowd-as-a-windows-service-82870454.html?_ga=2.119078217.1517947331.1576831928-1929136338.1575029985 "These") gets below error :

1. Tomcat8.exe file was not found.

2. Catalina_home environment variable is not define correctly.

My question is :

Do we need to define separate Catalina_home path for crowd in setenv.bat file ?  

I cant set Catalina_home as system path as we are having JIRA on same server.

Regards,

Amar Ghag
I am unable to connect to Microsoft active directory with crowd 3.4
Asked by Amar:

Hi Folks,

I am unable to connect Microsoft AD with crowd.

Crowd Version : 3.4

Settings are as follows :

Connector : Microsoft Active Directory

Hostname : ldap.gslb.internal.xxx.com

Port : 636

SSL : None

Result : test failed

There was a problem communicating with LDAP server. ldap.gslb.internal.xxx.com:636;socket closed;nested exception is javax.naming.ServiceUnavailableException:ldap.gslb.internal.xxx.com:636;socket closed

==========================================

Able to ping Microsoft directory server (ldap.gslb.internal.xxx.com) from crowd server.

Is issue with LDAP or in Crowd?

Regards,

Amar


Answers:
author: Marcin Kempa
body: Hi [@Amar](/t5/user/viewprofilepage/user-id/1140977)

It seems to me that you are trying to connect over LDAPS (secure ldap protocol, port number indicates that), however you've entered hostname as:

```
ldap.gslb.internal.xxx.com
```

What happens if you enter there:

```
ldaps://ldap.gslb.internal.xxx.com
```

or

```
ldap.gslb.internal.xxx.com
```

but with SSL set to: LDAPS?

If that also does not work can you verify that AD is configured to use LDAPS and this port is visible for Crowd?

Are you able to connect on 389 non secure port using standard ldap protocol (ldap://ldap.gslb.internal.xxx.com)

In order to check if LDAPS is up and running on AD (Windows Server) side you can do:

1. In Windows click on Start and search ldp.exe
2. In ldap window select Connection menu and fill following parameters:
   1. Server - this is your host name (I assume this would be \`ldap.gslb.internal.xxx.com\`)
   2. port: 636
   3. Select 'ssl' checkbox
3. Click ok. You should see information about established connection

Let me know if that helps,

Best Regards,

Marcin Kempa

comments: author: Amar
body: Thanks Marcin Kempa

it worked for me :)

Added below line in Hostname and set SSL :)

```
ldaps.gslb.internal.xxx.com
```

Thank Again


Tags: ldap
Issue with going over license user number
Asked by NGA SAM Office:

I have a 50 user Crowd license. We went over the 50 users and were locked out. I got a temp license and got us back up and going - assuming that once we reduced the head count under 50 I could reinsert the old key and it would work. My old key is good until 6/2020

I am getting an "invalid or expired license key" error when I place my old key back into the system - I have 48 users listed currently.

Any ideas what I should do next?


Answers:
author: NGA SAM Office
body: Fixed - please disregard

comments: author: Marcin Kempa
body: Hi [@NGA SAM Office](/t5/user/viewprofilepage/user-id/2945601) !

I am glad that you were able to resolve this issue. Would it be possible to share here what the issue was about when applying old, but still valid, license key again in Crowd? I am asking mainly because there might be users running in similar situation and your solution might work for them.

Thanks!

Marcin Kempa
crowd openldap connector ignores password policy of openldap
Asked by franz.ofner:

Hi there,

we want to use openldap connector of crowd to connect all our applications to openldap.

Now i have a problem that crowd connector ignores password policy settings of openldap.

The reason i think is that the connector identify itself to openldap with root dn e.g. cn=admin,dc=example,dc=com and per openldap definition password policy will be ignored by root dn.

Is there a way to change this, so password policy of openldap will be considered ?

Thanks,

Franz


Answers:
author: Nic Brough -Adaptavist-
body: Password policies in LDAP apply to people logging into systems via LDAP.

The connector to an LDAP service do not password policies applied to them because they are not logging into a system via LDAP, and you usually don't want them to have the policy applied - you don't want things like having your entire estate of servers needing reconfiguration every x weeks, or just stop letting people log in.

comments: author: franz.ofner
body: Hi Nic,

thanks for your detailed answer.

Do you know can i configure a user directory e.g. in confluence to connect directly to LDAP server using each user of confluence itself ?

Regards, Franz
Unable to use crowd
Asked by Saquib Fraz:

Hi,

I'm new to crowd and have just finished the installation part on my ec2 instance.

I'm able to browse this home URL - <http://18.223.24.152:8093/openidserver/> however its asking me to login. I don't know have any username \& password.

I just found over internet about "Running Crowd as an Unprivileged User" under this post I was able to create a init.d file but again not sure how to create a symbolic link.

Now, i don't know how to proceed further. please suggest


Answers:
author: Saquib Fraz
body: this has been fixed. :)

comments: author: Marcin Kempa
body: Hi [@Saquib Fraz](/t5/user/viewprofilepage/user-id/3663559)

I am glad that you've resolved you problem. Would you be able to post what was the issue, just so that others that run into similar problem could learn how to resolve it as well.

Also maybe you have some feedback to Crowd's docs that could have helped you to resolve problem faster?

I've noticed you are using openId Server rather than Crowd itself. Would you mind sharing you use case here?

Best Regards,

Marcin Kempa


author: Saquib Fraz
body: Hi [@Marcin Kempa](/t5/user/viewprofilepage/user-id/671367)

That was the issue actually; the use of openid server .

Here is the issue:-

Hi,

I'm new to crowd and have just finished the installation part on my ec2 instance.

I'm able to browse this home URL - <http://18.223.24.152:8093/openidserver/> however its asking me to login. I don't know have any username \& password.

I just found over internet about "Running Crowd as an Unprivileged User" under this post I was able to create a init.d file but again not sure how to create a symbolic link.

Intead of using <http://18.223.24.152:8093/openidserver/> I should use [http://18.223.24.152:8093/crowd](http://18.223.24.152:8093/openidserver/)

Easy fix!
Is there a way to manually synchronize CROWD with LDAP directory?
Asked by Luc O.:

I'm using CROWD 3.4.4 and have a connector directory defined to connect to LDAP. Our email domain has just changed and I would like to synchronize all user accounts. Is there a way for me to do this manually?

I've seen a few posts that refer to synchronize option under the Connector tab of the Directory configuration but I don't have such an option.

Thanks for your help and time!


Answers:
author: Luc O.
body: I have figured out a way... not sure if this is the best way but it works. I started by doing a select in the CROWD database to get all my user ids. I then took that list and I simply did a curl call the CROWD REST API to the following URL:

`/rest/usermanagement/1/session?validate-password=false`

comments: author: Marcin Kempa
body: Hi [@Luc O.](/t5/user/viewprofilepage/user-id/508734)

If you have a connector directory there should be a button called 'Synchronize now' on the details tab in directory configuration. If you don't see that button perhaps you have a delegated authentication directory?

The reason the URL you've mentioned worked is that you've simulated a login event for each user which fetched the data from the remote directory (this happens normally on each user login). Note that if you were interested in updating memberships this approach would only work if you had option 'Synchronize group memberships when logging in' set to \`Every time a user logs in'

This update also happens when user logs in to application.

Just to clarify for others, that may be using your approach the call had to be HTTP POST with Basic-Authentication and credentials for that authentication should be as for one of the applications that is connected to Crowd. Also I am guessing you had to provide \`authentication-context\` a json body with username and \`validation-factors\`, correct?

Best Regards,

Marcin Kempa


author: Luc O.
body: Hi [@Marcin Kempa](/t5/user/viewprofilepage/user-id/671367) ,

I don't have a button called 'Synchronize now'.

Here is the command I used with the above URL:

```
curl --basic -u "<applicationId>:<applicationIdPassword>" -k -X POST -H "Accept: application/json" -H "Content-type: application/json" --data '{"username":"aUserName"}' <CROWD base url>/rest/usermanagement/1/session?validate-password=false
```

In order to be able to do all users, I simply did the following query in the CROWD database (Oracle in my case):

```
  SELECT user_name
    FROM cwd_user
   WHERE directory_id = <aDirectoryId>
ORDER BY user_name;
```

After doing this SQL, I saved the output to a file and ran the following in a bash shell:

```
for u in `cat userList.txt`; do echo $u; curl --basic -u "<applicationId>:<applicationIdPassword>" -k -X POST -H "Accept: application/json" -H "Content-type: application/json" --data '{"username":"'$u'"}' <CROWD base url>/rest/usermanagement/1/session?validate-password=false; done
```
Role of the customer
Asked by Adrian Goliasz:

Hi,

how can i move the customer to the group of the clientsAfter we gave him more permissions has been made "new" account and now he can't see his old requests and from the others members in group.

The new invitation does not work.


Answers:
author: Rilwan Ahmed
body: Hi [@Adrian Goliasz](/t5/user/viewprofilepage/user-id/5482277) ,

Each account will have new ID and there is no way at the moment to merge data for multiple Atlassian accounts.

**Workaround:** Modify the reporter of old tickets using bulk edit and update reporter with new user account name.

comments: author: Adrian Goliasz
body: Thanks. Is there a chance to move a user to the particular group of clients?


Tags: cloud

jira-service-management

jira-service-management-cloud
CRM functionalities in JSM
Asked by Abdelrahman Alfawaier:

Hi,

Is there any way/add in app that can provide me with CRM functionalities in JSM Data center?


Answers:
author: Dave Mathijs
body: Hi [@Abdelrahman Alfawaier](/t5/user/viewprofilepage/user-id/5479058)

You can either use Jira's native features for basic CRM tasks:

* Create a customer portal where customers can raise support request
* Create custom fields for storing customer-related information details
* Make use of organizations and customers in JSM
* Create a specific project for:
  * Leads and opportunities
  * Accounts and contacts
  * Sales pipeline and forecasting
  * Tasks and activities like follow-up calls, meetings, etc.
  * Marketing campaigns (email, social media, advertising)
* Use boards, reports and dashboards to track performance, conversions, interactions, sales, etc.

There are also third-party apps and integrations available in the Atlassian Marketplace:

* CRM for Jira
* CRM Salesforce integration for Jira
* Elements Connect - external data fields for Jira (for integration with your own CRM-tool)

comments: author: Abdelrahman Alfawaier
body: Hi [@Dave Mathijs](/t5/user/viewprofilepage/user-id/2662590)

Thank you for your reply.

Will this make JSM utilized as much as possible in a CRM way?


Tags: jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-service-management-server

server
Form for request for Jira administrators
Asked by Vera Valshonok:

Hi community,

Does anyone has an example of a successfully working form for requests to be opened for jira administrators (to make work process more effective)?

I'd appreciate if you will share if there is any structure form that works for you ( fields structure, any automations).

Thanks!


Answers:
author: Vijay Dadi
body: Hello,

Can you please provide more details on the usecase?

Vijay


Tags: cloud

jira-service-management

jira-service-management-cloud
Replying to tickets via email is broken
Asked by Khuram Khalil:

Hi All,

Today, everytime someone replies to an email which was used to log the ticket in Jira, it is now creating a new ticket with the reply?

This has never been an issue until today and no changes have been made on our tenant.

Anyone else experiencing this or may know the cause?


Answers:
author: Manoj Gangwar
body: Hi [@Khuram Khalil](/t5/user/viewprofilepage/user-id/5334524)

Jira recognizes that an email relates to an existing issue when the Subject of the email includes the Jira Issue Key. Have you tried adding the Issue Key for the created issue into the email subject of your first reply?

If the issue key is in the subject line then check the "Add Comments" permission for the project.

comments: author: Khuram Khalil
body: Hi Manoj,

Users will send an email to our "logging address"

These emails dont show any issue keys and never have, which used to work fine before yesterday.

here is an example of logs today, replied to his email in the mailbox, with the "logging email" cc'd which should then add the reply as a comment usually

![Screenshot 2024-09-11 112813.png](https://community.atlassian.com/t5/image/serverpage/image-id/346799iA214784A93A5BB0C/image-size/large?v=v2&px=999 "Screenshot 2024-09-11 112813.png")


Tags: cloud

jira-service-management

jira-service-management-cloud
Implementing SMS and Email notifications
Asked by Abdelrahman Alfawaier:

Hi community.

Is there any way to have SMS and email notifications in Jira service management, the following to be included:

1- Sending emails/SMS to customers

2- in case of failed emails/SMS they will be resent.

3- status of the sent email/messages (read, delivered, etc..)

4- conditional email/sms messages based on screen fields values.


Answers:
author: Mohamed Saad Taha
body: HI,

for Email it is already OOB you just need to modify your notification schema if you have certain requirments,

for SMS you can create webhook to conect to your SMS provider once the condition is met

aslo you can create automatin rule to send to webhook to send SMS


Tags: jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-service-management-server

server
How to add the same set of variables multiple times in a form?
Asked by Meliha Ergincan:

I am creating a new request type. The form has 10 fields (of different types), and the user should be able to create as many of these 10 fields as they want. We can think of this as a table structure. In columns we have the fields, and the user should be able to add as many rows as they want, filling out these 10 fields in each row.

According to my research, we cannot achieve this without an additional tool. Could you help me finding out alternatives? I need to be able to dynamically access each cell in the table (to use as smart values). Thank you in advance.


Answers:
author: Nikola Perisic
body: Welcome to the community [@Meliha Ergincan](/t5/user/viewprofilepage/user-id/5589548)

This would be partly achiaveable in the software project, because the service projects do not have the Lists feature. With this feature, you would be able to add the columns, but instead of using the fields from the forms, you would have to create custom fields and apply them to the screen of your project.

comments: author: Meliha Ergincan
body: Thanks for the reply! Which template under the software project should I choose?


author: Nikola Perisic
body: Either template is fine. More important is the project type which is either Scrum or Kanban.


author: Daphne Colson
body: You could consider a workaround with sections and conditional fields, Meliha. Create a section with your 10 fields and allow users to duplicate the section as needed. It's not dynamic rows, but might be an option!

comments: author: Meliha Ergincan
body: That is a good alternative, thanks Daphne! Unfortunately if a user wants to duplicate the section 20 times, there is a lot of scrolling and it's hard to navigate.


Tags: cloud

jira-service-management

jira-service-management-cloud
How to get the Reporter Group
Asked by Mar Angelo L_ Tareno:

How can I get the reporter group so I can add the condition in automation?

I create a 2 group in Atlassian admin and a people on the group.

is there smart value or other way to check the reporter group so I can proceed it

on different condition.

this is what I did and did not work.

![ss.png](/t5/image/serverpage/image-id/346757iB89E79C28C598B9C/image-size/large?v=v2&px=999 "ss.png")


Answers:
author: Manon Soubies-Camy
body: Hi [@Mar Angelo L_ Tareno](/t5/user/viewprofilepage/user-id/5544846),

The user condition allows you to filter based on the reporter's group:

![usercondition.png](https://community.atlassian.com/t5/image/serverpage/image-id/346761iB31E59CEE87CB3E4/image-size/large?v=v2&px=999 "usercondition.png")

Hope this helps!

- Manon

comments: author: Mar Angelo L_ Tareno
body: if the reporter doesn't have group is automatically register as customer?


author: Manon Soubies-Camy
body: I'd rather rely on the "is a customer" condition:

![userconditioncustomer.png](https://community.atlassian.com/t5/image/serverpage/image-id/346774iC8BA73E643222AC9/image-size/large?v=v2&px=999 "userconditioncustomer.png")


author: Rilwan Ahmed
body: Hi [@Mar Angelo L_ Tareno](/t5/user/viewprofilepage/user-id/5544846) ,

At present, there is no smart value function for groups. Already there is an suggestion request with Atlassian. Vote and watch for updates

<https://jira.atlassian.com/browse/AUTO-312>


Tags: cloud

jira-service-management

jira-service-management-cloud
License renewal
Asked by Mohammed Alqawaeen:

Hi,

We have a Jira service management data center version that will soon expire. Is it possible to extend its licenses for six months instead of a year? Is a monthly renewal possible?


Answers:
author: Trudy Claspill
body: Hello [@Mohammed Alqawaeen](/t5/user/viewprofilepage/user-id/5550291)

According the the Data Center Licensing FAQ, the licenses are based on annual subscriptions.

For more information you should contact Atlassian's billing and licensing team at:

<https://www.atlassian.com/company/contact/purchasing-licensing#/>

Or if you using a license vendor contact that vendor.


Tags: jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-service-management-server

server
Do we have any hide option user request type fields in create screen
Asked by Sreenivasulu:

![Screenshot 2024-09-11 115219.png](/t5/image/serverpage/image-id/346739i8268DDB37E03AE3E/image-size/large?v=v2&px=999 "Screenshot 2024-09-11 115219.png")

when i am creating the ticket i don't want the above highlighted option could you please guide me


Answers:
author: Manoj Gangwar
body: Hi [@Sreenivasulu](/t5/user/viewprofilepage/user-id/5571166) ,

I don't think it is possible to hide that option.

comments: author: Sreenivasulu
body: HI Manoj,

do we have permanent disable option in the backend.


Tags: cloud

jira-service-management

jira-service-management-cloud