youngmon/atlassian-qna huggingface dataset:
Crowd and Jira Integration
Asked by Charlie:

I need to get these two tools talking properly, while I work on that, I also need to start creating projects and user accounts in Jira, I have too many users waiting for this. Can I let users work on the projects while using individual accounts in Jira and implement Crowd at a later time?

Both applications are installed on the same server.

Thanks.


Answers:
author: Marcin Kempa
body: Hi [@Charlie](/t5/user/viewprofilepage/user-id/1167543)

I assume that you are creating users manually in Jira or you've enabled public signup. In both cases you can run only Jira and later on start on using Crowd for user management.

Once you are ready with Crowd setup you will be able to import users from Jira directory to Crowd and use Crowd for user management. It would require changing the user directory in Jira from Jira Internal Directory to remote Crowd directory.

[Here](https://confluence.atlassian.com/crowd/importing-users-from-atlassian-jira-30736459.html) you may find more information about importing users,

[here](https://confluence.atlassian.com/adminjiraserver071/connecting-to-crowd-or-another-jira-application-for-user-management-802592354.html) is information about how to setup remote Crowd directory in Jira.

Hope that helps, let me know if you need more information

Marcin Kempa

comments: author: Charlie
body: Hi Marcin,

Thank you for your reply. Yes I am creating users manually in Jira, but I'm not sure I know what public signup is, how do I enable this? Is it necessary to enable it before creating users?

thank you


author: Marcin Kempa
body: Hi,

The public signup means that you allow everyone to create an account in Jira. You may find out more about it [here](https://confluence.atlassian.com/adminjiraserver075/enabling-public-signup-and-captcha-935391028.html).

Please note that enabling this may have an impact on the **security** of your instance as everyone who can access your Jira instance would be allowed to create an account.

You do not need to enable it before creating users, it is just an option for users to be able to create accounts for themselves. However as I said before, and as mentioned on the page I linked this has an impact on the security.

Best Regards,

Marcin Kempa
How to install crowd in EC2 instance
Asked by Daniel Knutsson:

Hi,

Trying to install crowd in a a amazon ec2 instance. But are not able to access the setup wizard http://ip:8095/crowd/console.

Just gives me a 404. I have changed the property file.

Any suggestion? Have someone installed in a amazon ec2 instance?

Kindly recive suggestions on what can be the problem.

/Daniel


Answers:
author: Bruno Vincent
body: Hi [@Daniel Knutsson](/t5/user/viewprofilepage/user-id/802678)

My guess is that this might have nothing to do with Amazon EC2. What do you get in *apache-tomcat/logs/catalina.out*?
Crowd with internal directory and delegated authentication directory license count user mismatch
Asked by Terry Harple:

The number of users in the internal directory is 75 the number of licenses used is 90? 15 are missing?

Suggestions?


Answers:
author: Bruno Vincent
body: Hi [@Terry Harple](/t5/user/viewprofilepage/user-id/1127053)

As a complement to [@Marcin Kempa](/t5/user/viewprofilepage/user-id/671367)'s answer, you can go to *Settings icon \> Licensing* and click *Recalculate your user total* under *Current Users*.

comments: author: Terry Harple
body: Yes, I have done this repeatedly.


author: Marcin Kempa
body: Hi [@Terry Harple](/t5/user/viewprofilepage/user-id/1127053)

Which version of Crowd are you using? License counting was improved in Crowd 2.11 as described [here](https://confluence.atlassian.com/crowd/crowd-2-11-release-notes-867183140.html).

Do you have multiple directories or is this the only one?

Please also note that the license usage is updated in Crowd every 6 hours.

Best Regards,

Marcin Kempa

comments: author: Terry Harple
body: Powered by [Atlassian Crowd](https://www.atlassian.com/software/crowd/) Version: 2.12.0 (Build:#751 - 2017-04-25)


author: Marcin Kempa
body: I just noticed that in the title of this question, you've mentioned the delegated directory. Is this directory mapped to any of your applications in Crowd?

How many users are in this directory? as in the internal one there are 75 of them as you've mentioned.

Best Regards,

Marcin Kempa


author: Terry Harple
body: All application share 2 directories configured as described here:

<https://confluence.atlassian.com/crowd/configuring-a-delegated-authentication-directory-128287004.html>

This means that you can have your users authenticated via an external LDAP directory while managing the users and groups in Crowd.

So we have 100s of users in LDAP/AD directory but they are only used for authentication. They are never stand alone users.
Add multiple recipients to "Server alert email" field in Crowd?
Asked by Charlie Misonne:

The Crowd *Mail configuration* page has a field called **Server alert email.**

The email address in this field will get notifications about approaching the license limit.

Does anyone know whether Crowd will send an email to multiple recipients when adding a couple of comma-separated emails in that field?

It does accept multiple values what doesn't mean it will actually work..


Answers:
author: AnnWorley
body: [@Charlie Misonne](/t5/user/viewprofilepage/user-id/502263) Maybe you could work around the issue by creating a distribution list and using that email address for the alerts.

comments: author: Charlie Misonne
body: Yes I thought about that. I wanted to make sure it's not supported first


author: Marcin Kempa
body: Hi [@Charlie Misonne](/t5/user/viewprofilepage/user-id/502263)

Unfortunately at the moment there is no possibility to define multiple email addresses as a **Server alert email**.

I've created a Jira ticker for tracking this improvement here: <https://jira.atlassian.com/browse/CWD-5018>

Please add your comments there and vote for this issue if you are interested in having this in future Crowd versions.

Thanks,

Marcin Kempa

comments: author: Charlie Misonne
body: Alright thanks.

I'll upvote ;)


Tags: crowd-administration
Crowd Server Not Starting ( Status 404 )
Asked by Varsha Kumari:

Hi,

We are facing a critical Sev 1 issue and unable to use the Crowd server anymore, we have raised the issue on this thread earlier but havent got any response. Please suggest how we can resolve this issue.

Here is the link to the issue description on the atlassian community forum : <https://community.atlassian.com/t5/Crowd-questions/Crowd-giving-404-v-3-0-1/qaq-p/694482#M2667>

Regards,  
Gaurav


Answers:
author: AnnWorley
body: Hi Varsha,

I opened a support request for Gaurav based on the other post you linked, and added you as a participant. You should see an email from the support portal shortly.

Thanks,

Ann
Crowd access from the Internet
Asked by Aaron Catt:

Hello,

We are wanting to utilise Crowd for SSO with Azure AD, does this application need to be placed in a DMZ for customers to access? Or does only the service desk and confluence servers need access to this Crowd application?

Many thanks

Aaron


Answers:
author: Bruno Vincent
body: Hi [@Aaron Catt](/t5/user/viewprofilepage/user-id/1174539)

In your use case, only your applications (JSD, Confluence etc.) will need to connect to Crowd so there's no need to place Crowd in a DMZ.

You usually place Crowd in a DMZ when users have to connect to Crowd's console to have their password reset. But since Azure AD connector is **read-only** it does not make much sense here.


author: AnnWorley
body: If you don't need [users managing their own accounts in Crowd](https://confluence.atlassian.com/crowd/user-guide-152043702.html) then only administrators need access to log into the Crowd console. If admins have access to browse to the server then there is no reason to make Crowd available on the internal network. The applications that use Crowd for authentication will obviously need to be able to connect to Crowd.

This may come in handy: [Configuring Azure Active Directory](https://confluence.atlassian.com/crowd/configuring-azure-active-directory-935372375.html)

comments: author: Bruno Vincent
body: [@AnnWorley](/t5/user/viewprofilepage/user-id/502040)

Users couldn't make changes to their accounts here as Azure AD connector is read-only :-)

<https://confluence.atlassian.com/crowd/configuring-azure-active-directory-935372375.html>

*"If you need to make any changes to your users, make them directly in Azure AD. You can't edit your Azure AD users in Crowd."*


author: AnnWorley
body: Nice catch - I learn something every day on this forum! :)


author: Bruno Vincent
body: [@AnnWorley](/t5/user/viewprofilepage/user-id/502040)

I guess we all do, that's the great thing about it! :-)


author: Lars Olav Velle
body: Hi [@Aaron Catt](/t5/user/viewprofilepage/user-id/1174539)

With Kantega Single Sign-on you do not need Crowd.

Simply sync users and groups directly into the applications:

[https://marketplace.atlassian.com/plugins/no.kantega.kerberosauth.kerberosauth-plugin/server/overview](https://marketplace.atlassian.com/plugins/no.kantega.kerberosauth.kerberosauth-plugin/server/overview?)

(Disclaimer: I work for Kantega Single Sign-on :) )

-Lars

comments: author: Lars Olav Velle
body: If you want a demo or help setting it up, you can reach out to atlassian.support@kantega.no

Cheers!
Crowd giving 404 ( v 3.0.1 )
Asked by Gaurav Sharma:

Hi All,

We've had a running instance of crowd that suddenly stopped working. I've gone over all related posts but there is nothing that I could spot similar to our issue. When crowd boots up the process is running however we are getting HTTP 404 page. The only information I could dig from the logs is the following

```
2017-12-22 23:59:49,755 localhost-startStop-1 WARN [springframework.context.support.PropertySourcesPlaceholderConfigurer] Could not load properties from URL [file:${crowd.openid.home}/jdbc.properties]: ${crowd.openid.home}/jdbc.properties (No such file or directory)
2017-12-22 23:59:49,755 localhost-startStop-1 WARN [springframework.context.support.PropertySourcesPlaceholderConfigurer] Could not load properties from URL [file:${crowd.openid.home}/crowd.properties]: ${crowd.openid.home}/crowd.properties (No such file or directory)
2017-12-22 23:59:49,755 localhost-startStop-1 WARN [springframework.context.support.PropertySourcesPlaceholderConfigurer] Could not load properties from URL [file:${crowd.openid.properties}]: ${crowd.openid.properties} (No such file or directory)
2017-12-22 23:59:50,131 localhost-startStop-1 INFO [server.manager.site.ApprovalWhitelist] Using file as a site approval whitelist: /opt/atlassian/crowd/atlassian-crowd-3.0.1/crowd-openidserver-webapp/WEB-INF/classes/crowdid.approval-whitelist
2017-12-22 23:59:50,200 localhost-startStop-1 WARN [org.openid4java.server.RealmVerifier] RP discovery / realm validation disabled;
2017-12-22 23:59:51,503 openid-spray-akka.actor.default-dispatcher-2 INFO [spray.server.servlet.Boot] v2 configuration: OpenIdServerConfig(baseUri=http://localhost:8095/openidserver/v2, cookieConfig=CookieConfig(crowd.token_key), crowdRestConfig=CrowdRestConfig(baseUri=http://localhost:8095/crowd, applicationName=crowd-openid-server, applicationPassword=*****, timeout=Timeout(10 minutes)), sessionRoutes=ServletSessionRoutes(http://localhost:8095/openidserver?returnToUrl=${RETURN_TO_URL}), isRelyingPartyAuthorised=<function1>)
```

The following is what we've verified as well :

* Correct permission granted to all the files ( jdbc.properties / crowd.properties ) for openserver
* No recent file change (none in the last 1 month )
* Checked the configuration files are fine.
* No other instance of crowd is running on the server
* Our proxy is pointing to the correct instance
* JVM is 1.8

Please suggest if we've missed out on anything.

Regards,  
Gaurav


Answers:
author: AnnWorley
body: Hi Gaurav,

I opened a support request so I could examine materials that we shouldn't post publicly. You should see an email from the support portal soon.

After we resolve the issue we can circle back to this thread to let the Community know what we did.

Thanks,

Ann
[Crowd client] how to get list crowd user include password field value?
Asked by tai nguyen:

Hi guys,

I am using Crowd client java library. Now I need to import users from Crowd server to other application.

But when I get list of user by using searchUsers function, it return a list of user without password.

Is there any way to get list of user include password field?

Thanks in advance.


Answers:
author: Bruno Vincent
body: Hi [@tai nguyen](/t5/user/viewprofilepage/user-id/1170560)

As far as I know, no you can't, at least with the usual API. If you actually try to retrieve the password hash with Crowd REST API with a simple GET on

```
http://localhost:8095/crowd/rest/usermanagement/1/user/password?username=test
```

You will get a 405 response code (Method not allowed). The password field is actually write-only here.

The only way I see to get the password hash of your users is to go to Crowd's console \> General \> Backup. This will export everything in Crowd's database including your users passwords hashes (if we're talking about an internal directory, you could obviously not get them for remote directories).

comments: author: tai nguyen
body: I got it.

Thank you so much for the answer.


Tags: crowd-development
Wrong URL in Reset Password
Asked by IT Vissim:

Hi,

we are using domain atlassian.vissim.no for accessing our on-premise Crowd.

Before there was also hades.vissim.no domain in use for some plugins but we have removed those unsused subdomains.

After that Password Reset is not working - in the URL to reset password, there is hades.vissim.no domain.

Where can I check why is crowd using hades. instead of atlassian.

Thank you


Answers:
author: Bruno Vincent
body: Hi [@IT Vissim](/t5/user/viewprofilepage/user-id/1168380)

If you're running Crowd 2.x, please change Crowd's base URL in the crowd.properties file as detailed on this page: <https://confluence.atlassian.com/crowdkb/change-password-email-have-wrong-base-url-245827274.html>

If you're running Crowd 3.x, there's no crowd.properties file anymore so you need to go to Crowd's administration console \> General \> General Options and change the Base URL.

comments: author: IT Vissim
body: Hi,

we are running 2.x

In property file there is :

crowd.server.url @CROWD@/services/

I don't knw where is defined @CROWD@@


author: Bruno Vincent
body: That's because you're looking at the wrong crowd.properties file. You're actually looking at etc/crowd.properties instead of the crowd.properties file in your crowd.home directory.

crowd.home directory is defined in

crowd-webapp/WEB-INF/classes/crowd-init.properties

Make also sure to change or add the crowd.base.url property, not crowd.server.url.


author: IT Vissim
body: I'll try crowd.base.url

thank you


author: IT Vissim
body: That is good point - I've found right crowd.properties and yes there is that wrong URL.

Thank you a lot
Running Crowd 3.1 as a service under a non-privileged user account on Linux?
Asked by OneTech IT:

Is there a way, similar to JIRA and Confluence, to run Crowd 3.1 as a service using a non-privileged user account (i.e. 'crowd')? And how can I configure Crowd 3.1 to automatically start with the OS, after reboots?

I am running Crowd on CentOS 7.x


Answers:
author: Bruno Vincent
body: Please follow Crowd's documentation instructions: <https://confluence.atlassian.com/crowd/setting-crowd-to-run-automatically-and-use-an-unprivileged-system-user-on-unix-211649189.html>

comments: author: OneTech IT
body: I have looked at these instructions but there are somewhat vague. Do I need to manually create a local user and local group before modifying the BASH environment variables described on that page?

As compared to the Atlassian instructions for JIRA or Confluence, the level of instructional details for Crowd leave much to be desired.


author: Bruno Vincent
body: Yes, you need to manually create a local user and local group (*crowd* / *crowd* in the documentation's example).
How to start a crowd after installation (CROWD3.1.1)
Asked by Ayesha Karunaratne:

I tried following two links unable to invoke crowd application after installation. Installation completed successfully.

*http://localhost:8095/crowdtest/*

*http://SOHCROWDT:8095/crowdtest/*

SOHCROWDT - is the server on which crowd is installed. I tried from the server and outside the server using above links.

I get 'This page can't be displayed' message.

Appreciate any help.

Cheers

Ayesh


Answers:
author: Marcin Kempa
body: Hi [@Ayesha Karunaratne](/t5/user/viewprofilepage/user-id/1163505)

I am glad that you was able to install Crowd using setup wizard.

As for your current problem, by default Crowd should be accessible on 8095 port and context root /crowd. For example:

```
http://localhost:8095/crowd
```

Did you modify the context path in the

```
<Crowd-Install>/apache-tomcat/conf/server.xml
```

?

Or maybe did you modify Base URL in the setup wizard?

Right now it is hard for me to understand why so you expect Crowd to be running on /crowdtest context path.

Please note that by only changing the base url in the Crowd's setup wizard you actually do not change the url you would normally access Crowd's console in the web browser.

The base url defined in the setup wizard, which can also be changes in Crowd console config, is used for things like for example generated links for user's password reset.

I hope that this helps!

Marcin Kempa

comments: author: Ayesha Karunaratne
body: while using the wizard I change the crowd link to

http://SOHCROWDT:8095/Crowdtest. I tried accessing

with above link and http://localhost:8095/crowd.

I get 'This page can't be displayed' message.

I did not change the server.xml. Server.xml is attached herewith

Any assistance in solving this issue is appreciated.

Thanks

Ayesha K,

![apache-tomcat-conf-server-xml.png](https://community.atlassian.com/t5/image/serverpage/image-id/11116iF009C06ADF89C73B/image-size/large?v=v2&px=999 "apache-tomcat-conf-server-xml.png")
Crowd DataCenter 3.0.1 on CentOS 7.x, not rendering UI fully?
Asked by OneTech IT:

I have just done a clean install of Crowd 3.0.1 DataCenter on CentOS 7.x While the application appears to have installed properly, when I open the web UI, it is rendering in a "minimal" way (i.e. no inline images, etc.) Image is below:  
![CrowdMinimal.png](https://community.atlassian.com/t5/image/serverpage/image-id/11085i58D0D67B56D8BE99/image-size/large?v=v2&px=999 "CrowdMinimal.png")

Apart from the render issue, the server appears to be working properly. Any idea what might be causing this?

The render issue happens under both Firefox Quantum and the latest Chrome browsers.


Answers:
author: Bruno Vincent
body: This is a known issue: <https://jira.atlassian.com/browse/CWD-4968>

Please upgrade to Crowd 3.0.2 or 3.1.1 or disable compression in *apache-tomcat/conf/server.xml*.
How to explicitly define which JRE for Crowd to use?
Asked by OneTech IT:

I am running a new instance of Crowd 3.0.1.  

I have installed the latest version of Oracle JRE 8 and want to point Crowd to use that specific version. Where so I need to enter the path to this specific JRE?  

I am running on Linux (CentOS 7).


Answers:
author: Bruno Vincent
body: Hi [@OneTech IT](/t5/user/viewprofilepage/user-id/1148638),

A JRE is not enough, you need a full JDK as detailed in the prerequisites paragraph of this page: <https://confluence.atlassian.com/crowd/installing-crowd-and-crowdid-191862.html>

Then set a JAVA_HOME environment variable and point it to your JDK path. You can declare it in *apache-tomcat/bin/setenv.sh* if you don't want to do it in your bash profile.
Getting "user [x] does not exist" message when importing tasks
Asked by Mark Neighbour:

I have a bunch of recurring tasks i import for annual events. One of the fields i import is "assignee". In the past, I have always been able to import this value using username.

Since we switched to cloud-based Jira, i always get the "user \[x\] does not exist" error message. I have tried username and first and last name.

Can someone advise on this?


Answers:
author: John Funk
body: Hi Mark,

Try using either the email address of the user (the one used by Jira) or the Account ID of the user.

comments: author: Mark Neighbour
body: Thanks John, email addresses worked.  

BTW, where do you find account IDs?


author: John Funk
body: Great! Glad to hear that worked.

To see the account ID, go to Settings \> User Management

Select a user. In the URL it is a long string of characters. Something like:

users/60d2431fdeecef006af21c1e

it's the part after users/


Tags: cloud

jira-service-management

jira-service-management-cloud
Rearrange JSM Portal Plug-Ins
Asked by Mathew Lederman:

Is it possible to re-arrange the order that plug-ins appear on the JSM portal? I would like the Actions (2) plug-in (Workflow Actions for Jira Service Desk by Diviniti) to show above the Fields (1) plug-in (Extension for Jira Service Desk by Diviniti). I have asked Diviniti and am awaiting a response, but figured I'd ask here as well.

![CGM-26042.png](/t5/image/serverpage/image-id/342582i24DD6DD7597FCC46/image-size/large?v=v2&px=999 "CGM-26042.png")


Answers:
author: Joseph Chung Yin
body: [@Mathew Lederman](/t5/user/viewprofilepage/user-id/4428557) -

If those area's elements are represented in the issue layout view configuration UI, then you may be able to adjust the ordering. However, since they are all provided by the third party's add-ons, you will have to wait for vendor's response to your ask.

I am not familiar Diviniti add-ons inner working setup/design, but I do know that those two are great add-ons to have and they provide timely feedback from their support teams.

Sorry.

Best, Joseph Chung Yin


Tags: cloud

jira-service-management

jira-service-management-cloud
Slack updates to include more specific information about what has changed
Asked by Grace Aro:

Hi There,

I have set up a slack integration to push updates to a channel when changes are made to incident tickets. The challenge I am running into is that generally the push updates are non-descriptive. They will say things like "John Doe updated the support summary" but does not include an update to what about the support summary was updated. It would be much more useful for these to show "John Doe updated the support summary: Added text "% of impacted users is XX%". This would be more reflective of the updates that come via email to tickets you are watching (which show additions and removals from the ticket fields).

Is there a way to make the slack updates more informative?

Thanks in advance for any help!


Answers:
author: Christopher Yen
body: Hi [@Grace Aro](/t5/user/viewprofilepage/user-id/5571744)

I think you can accomplish getting more information using automation rules and Jira smart values. Have an automation rule trigger whenever a field is edited, you can limit it to specific fields by adding in conditions and then use the slack message action to send a message to a channel

Using smart values I believe you can achieve the example you were looking for like this

```
Field {{fieldChange.field}} changed from {{fieldChange.fromString}} to {{fieldChange.toString}} by {{initiator.displayName}}
```


Tags: cloud

jira-service-management

jira-service-management-cloud