youngmon/atlassian-qna huggingface dataset:
Will removing a user also remove their tickets?
Asked by Angela Deng:

If someone leaves the team and we remove their activation status on JIRA, will we get to keep all of their previous tickets in JIRA for documentation / record keeping?


Answers:
author: Alexey Matveev
body: Hello,

There are two options:

1. To delete a user. You should not delete users.

2. To deactivate a user. You should deactivate users. In this case you will see all user tickets and history and the user will be marked as inactive.


Tags: cloud

jira

jira-cloud
How to effectively deactivate a Jira user with automation ?
Asked by Eddy Fras:

I'm trying to deactivate some selected users but for an unknown reason that does not work.

I used the update SQL request I found here : <https://community.atlassian.com/t5/Jira-questions/Bulk-User-Deactivation-in-Jira/qaq-p/313925>

When I check the DB, active flag is set to 0.

```
# select user_name, display_name, active from cwd_user where user_name = 'test@external.com';
 user_name | display_name | active
-------------------+--------------+--------
 test@external.com | prenom nom | 0
```

But in the user management console, user is still active (not striked through) as shown in screenshot.

![activeuser.PNG](/t5/image/serverpage/image-id/41658iA4F083BBC9E2EA00/image-size/large?v=v2&px=999 "activeuser.PNG")

What do I have to do to get my users really deactivated ?

Thanks,

Eddy


Answers:
author: Kenny Horan
body: One possibility, Hibernate caches data so that row is likely cached in Jira. Restarting Jira would flush it.

comments: author: Eddy Fras
body: Thanks Kenny for your quick answer. Unfortunately, I can't restart Jira for now, I have some users playing with it :)

I'll see if your suggestion is the right one the next time I'll restart it.

Eddy


Tags: jira-server
Does Crowd have a way to remove users who haven't used Crowd after a certain amount of time?
Asked by Ryan Weiss:

Our Crowd instance authenticates into multiple Atlassian tools. We're looking to setup a way to remove users who haven't authenticated into any of the tools for 90 days. Is there a default setting in Crowd for this or any 3rd party options?


Answers:
author: Amith Mathur _Appfire_
body: Hi [@Ryan Weiss](/t5/user/viewprofilepage/user-id/1176461),

Natively, it is not possible in the Crowd and it does not have the option in the UI. However, you can retrieve the list from the Database. [This page](https://confluence.atlassian.com/crowdkb/list-the-last-login-date-for-all-users-in-crowd-218278872.html) has the database queries, which will list the Last Login Date for all Users in Crowd.

Thanks,  
Amith Mathur
Crowd SSO - HomePage
Asked by CenturyX476:

Hello,

I am using bitbucket, jira and confluence all hosted on prem.

I downloaded "Crowd" as a trial and got it working with my bitbucket instance.

What I thought crowd was as a product is you sign into the "Crowd" homepage and you are presented with the "Apps" you have access too, sorta like how OKTA has it.

In OKTA you sign into the webpage and you see all your apps you have permission to view.

Is their a way to implement something like that ?

Is their a product you are offering that can simulate a sign in homepage which then presents to you all the "Apps" you have permission to use ?

Thanks


Answers:
author: Jon Espen Ingvaldsen Kantega SSO
body: You can get such "pre-authenticated app" experience by setting up SSO to the Atlassian products through an identity provider such as [Okta](https://www.okta.com/) and [OneLogin](https://www.onelogin.com/). On Atlassian Marketplace you find [several SSO add-ons](https://marketplace.atlassian.com/search?query=sso) for your on prem products.  

I work for one of these vendors, [Kantega SSO](https://marketplace.atlassian.com/vendors/1211151/kantega-sso). You find our guides for configuring SAML SSO with Okta and OneLogin here:

* <https://docs.kantega.no/display/KA/Okta>
* <https://docs.kantega.no/display/KA/OneLogin>

Please reach out if you need help getting this configured right.  

Cheers,  
Jon Espen


author: Mateusz Miara
body: Siavash,

you can now use Crowd 3.4 to access Jira, Jira Service Desk, Bitbucket, and Confluence with one common login page. See [Crowd SSO 2.0](https://confluence.atlassian.com/crowd/crowd-3-4-release-notes-966041084.html).

Best regards,

Mateusz

comments: author: CenturyX476
body: Hello Mateusz,

Thank you for the info. That is Fantastic news.

Sadly I am using the On-Prem(Server) version of CROWD. And that feature appears to be only for Crowd Datacenter.

Thanks again for the info


author: CenturyX476
body: Looks like Crowd was not what I expected.

Thanks for the info


Tags: sso
Crowd: one user from one Microsoft Active Directory to another Microsoft Active Directory
Asked by DKB Service GmbH:

hi,

in our case we have in crowd two directories (Microsoft Active Directory).

one directory sync userAccounts from Microsoft Active Directory (AD1)

and one directory sync userAccounts from Microsoft Active Directory (AD2)

usersAccounts from AD1 (username: firstname.lastname) can login to Jira/Confluence

usersAccounts from AD2 (username: S111xyz) can login to Jira/Confluence

now we have the case that one user (person) move from AD1 to AD2.

the userAccount in AD1 will be deleted (in Jira/Confluence the user is not avriable, but his "old" content is still avriable)

the same person get a new userAccount in AD2

(userAccount maik.muster is now S111A12 and can login in Jira/Confluence with the new credentials)

BUT

the userAccount from AD2 is in Jira/Confluence new NEW user and get a new userprofile.

we need a solution that the new userAcccount (S111) in J/C match to the old Profile an content.

hope you can help


Answers:
author: Bruno Vincent
body: Hi [@DKB Service GmbH](/t5/user/viewprofilepage/user-id/311149)

I think specifying 'firstname.lastname' as a [Crowd user alias](https://confluence.atlassian.com/crowd/specifying-a-user-s-aliases-194805921.html) for user 'S111xyz' in Jira and Confluence will do the trick.

comments: author: DKB Service GmbH
body: that sound good. i will test it an hope it works ;)

thanks


Tags: active-directory

confluence

confluence-server

jira

jira-server

server
How to remove deactivated user from Confluence Page
Asked by Mark Frampton:

I have an old account on our Confluence Cloud instance that is the original author of some pages. The account has been deactivated. Can I edit/remove them from the byline at the top of the confluence pages (see attached)?![Confluence Deactivated User.PNG](/t5/image/serverpage/image-id/41595iEDF3C1D8D41E7FEE/image-size/large?v=v2&px=999 "Confluence Deactivated User.PNG")


Answers:
author: Amith Mathur _Appfire_
body: Hi [@Mark Frampton](/t5/user/viewprofilepage/user-id/1797680),

If you have deactivated/disabled the user, then it will show as seen from the attached screenshot. The user can not be deleted because he or she has authored content in one or more spaces.

[This page](https://confluence.atlassian.com/doc/delete-or-disable-users-138318.html) describes the options when you want to remove the access for the user.

Thanks,  
Amith Mathur

comments: author: Mahalie Stackpole
body: This question is not about access for the user, it's about ownership of page/space. The creator is given a great deal of prominence and it would be great to be able to reassign the page to a different person, or easily dupe and delete.   


author: Schuuudi
body: I would also like to get an answer to this question. We have the same problem: a Team Lead has left us and now we want to transfer the ownership of the pages to the new Team Lead. Does anyone have an idea how this can be done? You can't search for the deactivated Team Lead, nor for his created pages. So I don't see any way to filter by the content to the old Team Lead to make it easier for the new Team Lead to maintain the pages.

Does anyone have an idea how to solve the problem?


author: Melanie Niven
body: [@Schuuudi](/t5/user/viewprofilepage/user-id/4338662) You can click the three dots next to the owner and click Manage Owner \> Then Change Owner. The deactivated person's profile image still appears but you will now be the author. If you can't do this, you need to Administrator to do this or have your permissions changed.
New System setup of Crowd using SQL database has setup issues that cause installation to fail
Asked by Toby Pittman:

Atlassian Crowd - Database configuration

The following required plugins are not available: \[Crowd REST API, Atlassian Plugins - Web Resources - Implementation Plugin, Atlassian UI Plugin, Atlassian Soy - Plugin\]. See Crowd server logs for details. The setup process cannot continue until the problem has been solved. If you require further assistance, you can contact Atlassian support.


Answers:
author: Yoga Reddy {Appfire}
body: Hi [@Toby Pittman](/t5/user/viewprofilepage/user-id/2501273)

Please verify the following [community link](https://community.atlassian.com/t5/Crowd-questions/I-can-t-install-crowd/qaq-p/794151) as they have discussed the same issue.  

And also please verify the crowd [Supported Platforms](https://confluence.atlassian.com/crowd/supported-platforms-191851.html) and hardware requirements for Crowd 3.3.

Thanks  
Yoga  

comments: author: Toby Pittman
body: Thank you..., loading Java JDK 8 fixed the issue. Now having problem with crowd service starting
Problem setting Crowd database, error pluggins not available
Asked by Toby Pittman:

**Database configuration**

Select the type of database you would like to use with Crowd.

Top of Form

The following required plugins are not available: \[Crowd REST API, Atlassian Plugins - Web Resources - Implementation Plugin, Atlassian UI Plugin, Atlassian Soy - Plugin\]. See Crowd server logs for details. The setup process cannot continue until the problem has been solved. If you require further assistance, you can contact Atlassian support.

**The database contains existing data.**

Embedded

The embedded database will allow Crowd to operate without an external database. This is useful when evaluating Crowd and **not recommended** for production systems.

JDBC connection

Connect to an external database using a JDBC connection.

JNDI datasource

Connect to an external database through a datasource managed by the application server.

Database required -- Select a database -- PostgreSQL MySQL Oracle 12c Microsoft SQL Server Unsupported Database

Select a database preconfiguration.

Driver class name required

The class name of the database driver. Ensure that this class is in your application server's class path.

JDBC URL required

The JDBC URL to access the database.

Username required

The username to access the database.

Password

The password to access the database.

Hibernate dialect required

Only modify the Hibernate dialect if you require a variant dialect for your database type.

Overwrite existing data

Overwrite any existing data in the database for a clean installation of Crowd.


Answers:
author: J Schlafer
body: If you are running JDK newer than v8 try downgrading to v8. Set your JAVA_HOME variable to v8 location and restart your services.


author: Craig Castle-Mead
body: Hi Toby,

It looks like this is just a copy / paste of a Crowd error/setup screen. If you can provide some background info (is this a new or existing install, what were you trying to do etc) then the community may be able to assist.

CCM

comments: author: Toby Pittman
body: New installation- received error when going through SQL DB setup. See below

Atlassian Crowd - Database configuration The following required plugins are not available: \[Crowd REST API, Atlassian Plugins - Web Resources - Implementation Plugin, Atlassian UI Plugin, Atlassian Soy - Plugin\]. See Crowd server logs for details. The setup process cannot continue until the problem has been solved. If you require further assistance, you can contact Atlassian support.
AD user unable to authenticate to crowd
Asked by Reneesh Kottakkalathil:

I've just completed a new installation of crowd 3.3 and configured the AD connector. I'm able to pull groups and users from active directory, but Crowd is failing to authenticate when trying to login with AD user.


Answers:
author: Reneesh Kottakkalathil
body: Issue has been resolved after moving the LDAP directory to above the Delegated LDAP directory


author: Bastian Stehmann
body: Hi [@Reneesh Kottakkalathil](/t5/user/viewprofilepage/user-id/1202532),

Are there any error messages shown? Did you check the Crowd-Logs If there are any messages that might help?

comments: author: Reneesh Kottakkalathil
body: Hi Bastian,

Here is error:-

```
2018-12-21 21:20:33,932 http-nio-8095-exec-20 INFO [crowd.console.action.Login] The user: 'au1' attempted to login to an unauthorised application: User does not have access to application.2018-12-21 21:20:43,692 http-nio-8095-exec-23 INFO [crowd.console.action.Login] The user: 'au2' attempted to login to an unauthorised application: User does not have access to application.
```


author: Bastian Stehmann
body: Just go to crowd, choose the crowd application, go to the tab application access(or something like that) and select one or more groups that should have access.

If the users are in one of these groups, they should be able to log-in then.


author: Reneesh Kottakkalathil
body: Groups with users is already configured in Directories and Groups tab of crowd application. Still no luck.


author: Bastian Stehmann
body: So you have set up the application access for crowd and the users are trying to authenticate in crowd?

Can you share a screenshot of your application access settings?


author: Reneesh Kottakkalathil
body: Issue has been resolved after moving the LDAP directory to above the Delegated LDAP directory.
Perform Crowd backup and restore programmatically
Asked by Kenny Horan:

I'm working to backup our production environment and restore it in a test environment automatically. Is there a way to initiate the Crowd XML backup or restore from the command line?


Answers:
author: Sid
body: Hi Kenny,

You can backup the database and restore it to dev environment by using a script. Bit there are few manual work you need to be taken care of, restoring the applications from database/xml with prod data will rewrite the license info and all the custom configs like themes banners etc.

I have written a script which take the help of Jenkins job where the db backup is copied to dev env and shutdown all the nodes first after successful shutdown, the script deletes the old db and creates a new database with same name and configs and restore the data from backup. Once done, it will restart the services. Later I will manually update the required configurations.
JIRA not accessible, after changes made in WEB-INF/classes/seraph-config.xml file for enabling SSO
Asked by Nilkamal:

<https://confluence.atlassian.com/crowd/troubleshooting-sso-with-crowd-131466214.html>

After the changes recommended at Steps #2, JIRA service starts, but log shows following error. So JIRA is not accessible...

20-Dec-2018 17:52:30.974 WARNING \[localhost-startStop-2\] org.apache.catalina.loader.WebappClassLoaderBase.checkThreadLocalsForLeaks Failed to check for ThreadLocal references for web application \[ROOT\]  
java.lang.NoClassDefFoundError: org/codehaus/groovy/runtime/GroovyCategorySupport$1  
at java.lang.Class.getDeclaringClass0(Native Method)  
at java.lang.Class.getDeclaringClass(Class.java:1235)  
at java.lang.Class.getEnclosingClass(Class.java:1277)  
at java.lang.Class.getCanonicalName(Class.java:1392)  
at org.apache.catalina.loader.WebappClassLoaderBase.getPrettyClassName(WebappClassLoaderBase.java:1975)  
at org.apache.catalina.loader.WebappClassLoaderBase.checkThreadLocalMapForLeaks(WebappClassLoaderBase.java:1927)  
at org.apache.catalina.loader.WebappClassLoaderBase.checkThreadLocalsForLeaks(WebappClassLoaderBase.java:1867)  
at org.apache.catalina.loader.WebappClassLoaderBase.clearReferences(WebappClassLoaderBase.java:1537)  
at org.apache.catalina.loader.WebappClassLoaderBase.stop(WebappClassLoaderBase.java:1483)  
at org.apache.catalina.loader.WebappLoader.stopInternal(WebappLoader.java:447)  
at org.apache.catalina.util.LifecycleBase.stop(LifecycleBase.java:226)  
at org.apache.catalina.core.StandardContext.stopInternal(StandardContext.java:5473)  
at org.apache.catalina.util.LifecycleBase.stop(LifecycleBase.java:226)  
at org.apache.catalina.core.ContainerBase$StopChild.call(ContainerBase.java:1437)  
at org.apache.catalina.core.ContainerBase$StopChild.call(ContainerBase.java:1426)  
at java.util.concurrent.FutureTask.run(FutureTask.java:266)  
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)  
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)  
at java.lang.Thread.run(Thread.java:748)


Answers:
author: Fabio Racobaldo _Herzum_
body: Hi [@Nilkamal](/t5/user/viewprofilepage/user-id/559290) ,

I don't think that this log is related to your issue. Please could you post portion of seraph-config.xml with your changes?

Fabio


Tags: jira

jira-server

server
localadmin for crowd
Asked by Chris Murphy:

Hello -

Our original JIRA admin left the team and I do not have the original localadmin password for crowd. I was hoping someone could walk me through how to set up or reset the local admin password for crowd administration.

Thanks

Chris


Answers:
author: Bastian Stehmann
body: Hi [@Chris Murphy](/t5/user/viewprofilepage/user-id/1851022),

just have a look here:

<https://confluence.atlassian.com/crowdkb/restoring-passwords-to-recover-admin-user-rights-283642653.html>
Audit logging of changes to users
Asked by Johan Almqvist:

Is there a way to enable audit logging of when users are created, deactivated, deleted, added or removed from groups etc?


Answers:
author: Craig Castle-Mead
body: Hi Johan,

Auditing was release as a native feature in Crowd 3.2 - <https://www.atlassian.com/blog/crowd/improved-audit-log-crowd-3-2> which I believe will do what you're after.

What version are you running now?

CCM

comments: author: Johan Almqvist
body: Nice. We're on 3.0.1 so I'll see where an upgrade takes us!
need to place url when we receive the error you do not have permission to perfom this action.
Asked by Sugumran:

Hi

We are planning to update login error message with URL redirection. how to do that?

ex: if user not part of confluence-users group then user will get an error message saying that "you do not have permission to perform this option" while user tried to login.

This message needs to updated like below

you do not have license to perform this action. Please click this url "Confluence Access"(hyperlink) to get a confluence license.

Regards

R.Sugumar.


Answers:
author: Diego
body: Hello there Sugumran!  
It seems that what you need is a custom login page. With this in mind, I could find another Community post that tackles a situation pretty similar to yours:

**[Crowd HTTP authentication with custom login page](https://community.atlassian.com/t5/Crowd-questions/CROWD-http-authentication-with-custom-login-page/qaq-p/714046)**

Let us know if this thread helps you!
Unable to login to Crowd with name url, only ip address
Asked by jeubank12:

Fresh install of 3.3, but with a server.xml imported from 2.7.2 during the setup.

Setup on default ports. Accessed via reverse proxy in httpd. After import, updated {INSTALL_DIR}/apache-tomcat/conf/server.xml to add proxyPort, proxyName, and scheme.

I am able to login when accessed via IP address, however when accessed via the configured Base URL the login returns to the login page without an error. Browser Network indicates a 302 from j_security_check, but there is no error in the logs. Sometimes (usually before the 'Initiating Jersey' message appears in the log) there is an XSRF failure error.

When logging in through the IP address, various pages will result in an XSRF error in the logs:

```
2018-12-05 11:06:37,298 http-nio-8095-exec-8 WARN [common.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: https://<url>/crowd/rest/webResources/1.0/resources , origin: https://<ip> , referrer: https://<ip>/crowd/console/secure/admin/general.action , credentials in request: true , allowed via CORS: false
```


Answers:
author: jeubank12
body: The login loop was a result of cache/cookies as described in this [KB article](https://confluence.atlassian.com/crowdkb/redirected-to-the-login-screen-with-no-errors-when-attempting-to-log-in-to-any-atlassian-applications-376834420.html)

XSRF is resolved when using the url instead of ip address.


Tags: import

login

proxy

reverse-proxy

xsrf
Issues accessing Service Portal (there's no account creation page)
Asked by Marta:

Hi there,

I've been setting up our company's Service Portal, requests, etc. Initially, we thought we'd want to make it mandatory for our customers to sign-in to use the Portal (this has benefits such as the fact that you know right away who is writing, and all their communications after that are centralized, etc). But I'm running into issues.

These are our current settings:

![Screen Shot 2024-08-30 at 17.43.36.png](/t5/image/serverpage/image-id/344828i5C0D744E0FD4B7C6/image-size/large?v=v2&px=999 "Screen Shot 2024-08-30 at 17.43.36.png")![Screen Shot 2024-08-30 at 17.43.10.png](/t5/image/serverpage/image-id/344829iF963E00BE1833BEE/image-size/large?v=v2&px=999 "Screen Shot 2024-08-30 at 17.43.10.png")

I asked a colleague to check something for me on our Service Portal (which has been published already) before we launch it to external customers, and he isn't prompted the account creation page when he tries to access from the same computer where he uses his corporate account.

![Screen Shot 2024-08-30 at 18.08.43.png](/t5/image/serverpage/image-id/344826iA6EDFE66C7DF4D58/image-size/large?v=v2&px=999 "Screen Shot 2024-08-30 at 18.08.43.png")

However he did get the account creation page when he accessed from his personal computer (and used the same URL I'd given him to access the Service Portal).

Is this a common issue? I'm concerned that our customer might also have trouble accessing.

I also got an email from a customer saying she has trouble seeing my tickets (I don't know exactly to what extend, I've just asked her to find out more), although I think that for the most part, our emails sent from Jira Service are received as normal.

I do see advantages of requiring sign-in, but if it's troublesome, we might go with this "totally open" option... any thoughts, please?

![Screen Shot 2024-08-30 at 18.04.02.png](/t5/image/serverpage/image-id/344825i0362B4DBE82B8CEC/image-size/large?v=v2&px=999 "Screen Shot 2024-08-30 at 18.04.02.png")

Thanks for any help :)


Answers:
author: Samuel Gatica
body: Hi [@Marta](/t5/user/viewprofilepage/user-id/5480818)

It appears that this may be related to a caching issue. When you are logged into Atlassian with one account and attempt to access a new site for which you do not have permissions, you will encounter a "No Access" page. This occurs because you remain logged in with the previous account.

Please attempt to log out of the corporate account and check again. You should be directed to the login page this time, also you can try the same in incognito mode.

Hope this helps!

Best regards

Sam

comments: author: Marta
body: Thanks, Sam! I've asked my colleague to try that :)


Tags: cloud

jira-service-management

jira-service-management-cloud