youngmon/atlassian-qna huggingface dataset:
Customers were not notified of a maintenance window change
Asked by kristine.daniels:

We made an important change to a scheduled maintenance window, but customers were not notified. Is this really by design? Is the only option to cancel it and create a new one?


Answers:
author: Howard Nedd
body: Hi,

I believe there are three different actions you can have automatically done for you.

You'll have the option to:

Notify subscribers immediately about the newly scheduled maintenance

Statuspage sends a reminder notification to email and SMS subscribers 60 minutes before this maintenance is scheduled to start.

You can change the status of the scheduled maintenance from "scheduled" to "in progress" at the specified start of the maintenance period. Additional options include...

Send notifications to email, SMS, and webhook subscribers

Automatically set affected components to "under maintenance" when scheduled maintenance begins

Hopefully that helps

Regards

Howard

comments: author: kristine.daniels
body: If not automatic, is there a way to manually trigger a notification manually if we modify a maintenance window? It seems pretty straightforward that if a window is changed, that customers could be notified of it.

Thanks.


author: Howard Nedd
body: Yes.

Set the notification toggle after updating the window as shown below:

![B51AE82E-2A97-4F22-8FB9-C0A7E1114B8C.png](https://community.atlassian.com/t5/image/serverpage/image-id/230917i8589F26C201886A8/image-size/large?v=v2&px=999 "B51AE82E-2A97-4F22-8FB9-C0A7E1114B8C.png")


author: kristine.daniels
body: Thanks, I looked at my updated maintenance item and see the notification check box is enabled, but I did not receive any emails. I'll see if I can create a test item and try it again. Thank you.


author: Howard Nedd
body: Also check your accounts notification settings. You might have to look at your subscription. Are you subscribed to all services on your statuspage?


author: kristine.daniels
body: Thanks, yes, confirmed all enabled.


author: Howard Nedd
body: [@kristine.daniels](/t5/user/viewprofilepage/user-id/4705899)

Run the maintenance steps and test again.   

<https://support.atlassian.com/statuspage/docs/schedule-maintenance/>

If that does not work I suggest you raise a support request here:

<https://support.atlassian.com/contact/#/>

Regards

Howard


Tags: cloud
Integration with Elastic stack
Asked by Panagiotis Chavariotis:

Is it possible to integrate Elastic stack with Statuspage?

As far as I know, Elastic themselves seem to use Statuspage.io already ([ESS (Public) Status](https://cloud-status.elastic.co/))


Answers:
author: Rafael Meira
body: Hello there Panagiotis! Happy to help :)  
Rafa here from the Statuspage support.  

Yes, Elastic uses the product Statuspage, I could not find anything related to Elastic having integration available with Statuspage, unfortunately.  

Could you check on their side if you could find any useful information on this matter?  

<br />

Best,  
Rafa

comments: author: Nick Drouin
body: [@Rafael Meira](/t5/user/viewprofilepage/user-id/4969383)

I found that you've published the OpenAPI spec for your management endpoint at:

<https://developer.statuspage.io/>  

Would it be possible to get the spec for the Status API? Or at least the json schemas for:

/api/v2/status.json

/api/v2/summary.json   

This would allow my automation to pull dependent systems status into my toolchain, integrate with other tooling, and maybe even publish them back as components with a status to my statuspage.

e.g.:

<https://cloud-status.elastic.co/api/v2/status.json>

<https://cloud-status.elastic.co/api/v2/summary.json>

[@Panagiotis Chavariotis](/t5/user/viewprofilepage/user-id/5101221) , you may also consider this option for those systems for which there is not yet tight integration. I was thinking a simple cron or lambda to pull and publish for all the public services status endpoints.


author: Nick Drouin
body: This pattern is similar to that proposed here:  
<https://community.atlassian.com/t5/Statuspage-questions/StatusPage-Integration-with-StatusPage-Customers-not-on-the/qaq-p/1792194>  

By [@Jesse Klein](/t5/user/viewprofilepage/user-id/3659201) at the time.

I no need for a whole documentation effort, just a download button on the same page as the management api would be fine.
can not login to crowd after restart. License promblem
Asked by ni mingyan:

Hi,

we can not login to crowd after restart.

The warning shows" Your license does not permit the number of users you have configured in crowd. Please upgrade to a new license, or contact Atlassian sales support"

we want to login to check the users we have configured. After that we can determine if we need to upgrade the license now.


Answers:
author: Bruno Vincent
body: Hi [@ni mingyan](/t5/user/viewprofilepage/user-id/2375965)

Please enter an evaluation license as detailed in this [KB](https://confluence.atlassian.com/crowdkb/users-are-unable-to-log-in-after-updating-the-license-223223576.html) to get access to Crowd's console again.
Is it possible to update users details via Crowd REST API?
Asked by Austin Wilburn:

There is a REST API call to update user details in Crowd Documentation, but it seems to want all user details passed in as well.

For example:

I want to update a user's email. I pass in the email as well as the username, but this overwrites all other details such as password, first name, etc because I did not pass them in as well.

Is there a way to update a user's email, without having to also pass in name, first name, password, etc?

If not, is there a way to just call currentPassword or something like that so that it just uses what is already stored on the server?

Thanks


Answers:
author: John Dusenge
body: [@Austin Wilburn](/t5/user/viewprofilepage/user-id/2932408) - Was the above issue got resolved ?   
I am looking for the same as well.  

Thanks,  
John


Tags: api

rest

update

user
Are there instructions on how to install Crowd via CLI?
Asked by Allen Jones:

Are there instructions on how to install cloud via CLI on Redhat? We dont have a graphical interface on our server (and would like to keep it this way if we can)


Answers:
author: Shankar Asam {Appfire}
body: Hi Allen,

On redhat console, you download crowd binaries with wget or curl and modify the config files to change port number (if required), home path, java path and then start the crowd.

To complete further installation, you just bring up browser from your local mac or pc and point it to your redhat server ex: http://redhat-server-ip:port and then complete further installation.

There is no graphical interface is required for above steps.

-Shankar

comments: author: Allen Jones
body: While these were pretty cursory, brief instructions, I was looking for something more step by step. I was disheartened to see that some of the psql/postgresql and java_home/JRE_HOME requirements were not documented in an accessible doc. Instead, I searched the community for answers as I encountered each error. That's a frustrating way to start a project.
Crowd on-premise or just cloud
Asked by James Gross:

Hi,

Just wondering if Crowd is cloud-based only or can be hosted on-premise, thanks


Answers:
author: Daniel Eads
body: Hi James, welcome to the Atlassian Community!

Crowd is entirely server-based. You host the application on the infrastructure of your choosing. This *can* be something like AWS or Azure, but most commonly organizations have deployed Crowd on their on-premise hardware. We don't provide a Cloud option for Crowd, instead we ask people using Atlassian Cloud to take a peek at [Atlassian Access](https://www.atlassian.com/software/access) if they need to apply 2FA or password policies to accounts in their company.

Hope that helps and happy to answer more questions!

Cheers,  
Daniel
Setting up Crowd with HTTPS
Asked by Alexander_Greig-More:

Hi all,

Having issues getting Crowd to use a certificate to enable HTTPS.

I am following this guide:

<https://confluence.atlassian.com/crowd/configuring-crowd-to-work-with-ssl-151520306.html>

I have also referenced this guide:

<https://community.atlassian.com/t5/Crowd-questions/Crowd-SSL/qaq-p/216035>

Nothing has worked so far to get Crowd using my CA signed certificates, the site it'll present is the default 'http://localhost:8095/crowd' and nothing else is working.

Has anyone had any luck getting this going?


Answers:
author: Shankar Asam {Appfire}
body: Hi,

while creating SSL certs for Step 2 in the document that says,

    What is your first and last name?

You should typically use your crowd DNS name for which you are requesting CA certs. ex: crowd.mycompany.com. Make sure this domain's A record to should point to your crowd server.

Once certs were imported you can try accessing them via

```
https://crowd.mycompany.com:8095 
```

or

    https://crowd.mycompany.com:8443/crowd/console

-Shankar


Tags: https

ssl
Use Atlassian Login with AWS resource?
Asked by Andrin Meier:

We are trying to protect a website we host on an AWS EC2 instance using node.js with the respective Atlassian Login (which we use for Jira etc.). We don't self-host the Atlassian services (Jira etc.) but use the cloud offering. Is OpenID, i.e. CrowdID the right way to go about this? Can anyone point me to any tutorials or describe how that can be done on both the Atlassian and AWS side? Thank you.


Answers:
author: Gonchik Tsymzhitov
body: Please, checkout

<https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-saml.html>

<https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml_3rd-party.html>


Tags: aws

openid

sso
how to get the crowd id ?
Asked by Neeraj Singh:

i want get the crowd id as i have forgot my attlassian bamboo username and password.can anyone help me out.

thanks in advance.


Answers:
author: Fabio Racobaldo _Herzum_
body: Hi [@Neeraj Singh](/t5/user/viewprofilepage/user-id/3110818) ,

you can retrieve that information using the DB access. Cwd_user table should contain that info.

Fabio
Deleting inactive users crowd
Asked by Vegard Haneberg:

I would like to delete the five users who have been inactive the longest i Crowd. Is there any way to see wich users that have been inactive the longest?


Answers:
author: Craig Castle-Mead
body: Hi [@Vegard Haneberg](/t5/user/viewprofilepage/user-id/3414805)

if you have access to the database behind Crowd, you can do a left join between cwd_user and cwd_user_attribute

something like this should work (tweaked on my phone from a more complicated query, so may need to be tweaked, and for psql so if you're running my/ms/oracle may need to be adjusted).

SELECT

u.lower_user_name AS username,

FROM_UNIXTIME(ua.attribute_lower_value/1000) AS lastLogin

FROM

cwd_user AS u

LEFT JOIN cwd_user_attribute AS ua ON ua.user_id = u.id AND attribute_name = 'lastAuthenticated'

ORDER BY

ua.attribute_lower_value, u.lower_user_name;

CCM
How do you get the groupId required by the Crowd group-level-admin REST method
Asked by Dale F:

In my environment we create a collection of groups in Crowd to support role based access controls. We recently upgraded to Crowd Data Center and want to take advantage of the ability to distribute administration of groups.

The group-level-admin set of REST methods seems like it supports this, however, all them require groupId, which isn't the name of the group. I've tested the following rest methods, but none of them include the group ID needed by the group-level-admin methods:

* GET /rest/admin/1.0/group/search/{directoryId}
* GET /rest/usermanagement/1/group
* GET /rest/usermanagement/1/search
* POST /rest/usermanagement/1/search
* POST /rest/usermanagement/1/group

The POST /rest/admin/1.0/groups/query method returns the group ID, but this only works if someone is already configured to be an admin of the group, which won't be the case in my environment.

Strangely enough POST /rest/admin/1.0/users/search and GET /rest/admin/1.0/directory/managed return the user ID and directory ID, but the equivalent functionality for groups doesn't.

How can I, through the Crowd REST interface get the group ID of a group if I only know the name of the group and the directory it is in?

If that functionality isn't there, are there any plugins that provide it, or plans to add it in the future? Even through the web interface I couldn't find a way to see the group ID. It seems odd that these REST methods would be added, but not a way to get the information that they require.

Thank you


Answers:
author: Dale F
body: A bit of trial and error it looks like the groupId is \<directory ID\>-\<base 64 encoded group name\>.

Since the Crowd REST documentation doesn't mention this, can anybody comment if this method of creating the groupId is something that can be relied upon?

comments: author: Maximilian Ewert
body: Crazy, but works for us!


author: Joe Jadamec
body: that groupid format worked for me. disappionted this is not mentioned anywhere in the REST API documentation!


author: Heiko
body: [@Dale F](/t5/user/viewprofilepage/user-id/197441)Hey you write in your that yout get the user ID with the POST /rest/admin/1.0/users/search can you show me how, please? i'm searchin since a lot of tim for a solution to get the crowd userId but i just find the a solution to get the user key

comments: author: Dale F
body: Here's a snippet of Python code that will generate the groupid

import base64  
def get_id(directory_id, group_name):  
return ('{}-{}'.format(  
directory_id,  
base64.b64encode(group_name.encode('utf8')).decode(),  
))


author: Heiko
body: Hey Dale thanks for your reply. But that's not what I'm searching for. I wrote an post 2 weeks ago. <https://community.atlassian.com/t5/Crowd-questions/How-to-get-the-userId-of-an-specific-user-for-the-audit-Log/qaq-p/1299406#M5303> maybe you know what i searching for and have a solution for me.


Tags: rest-api
Unable to access crowd & confluence server
Asked by Gaurav Sharma:

We are facing some strange problem, we have a Jira \& Confluence setup that is using Crowd for authentication. When logging from Jira everything works fine but when I try to login via Confluence I am getting 'invalid username / password'.

We tried debugging the issue and even updated one account password manually in crowd database. However, I am able to login using the updated password from Jira but when I try to log in to confluence / crowd I am getting invalid user / password.

Currently we are not able to login using any user defined on confluence / crowd however we are able to work with Jira. Request your expertise to solve this issue.


Answers:
author: Bruno Vincent
body: Hi [@Gaurav Sharma](/t5/user/viewprofilepage/user-id/1173103)

I guess you should check that Confluence is allowed to request your Crowd server. In Crowd's console, please go to *Applications \> Confluence \> Remote addresses* and make sure that all the IP addresses of your Confluence server are listed (I mean IPv4 and IPv6).

You should also check that your user is allowed to log into Confluence. Still in Crowd's console, go to *Applications \> Confluence \> Directories and groups* and make sure that your user belongs to a group that is authorized to authenticate.

If that still does not work, I suggest that you add the following property in *confluence/WEB-INF/classes/log4j.properties* , then restart Confluence and see if you get any useful information regarding this problem in *atlassian-confluence.log*

```
log4j.logger.com.atlassian.crowd.integration = DEBUG
```

comments: author: Gaurav Sharma
body: I am not able to login into both confluence and crowd console itself to validate this information. Can we turn off confluence - crowd information directly in the database ?


Tags: confluence

confluence-server

server
Same Domain in Crowd SSO
Asked by JongBum Lee:

Dear All

I know I can apply crowd sso in the same domain.

I am wondering if the following is treated as the same domain. (Of course, this is the internal domain.)

jira.swportal.domain.com

confluence.swportal.domain.com

crowd.swportal.domain.com

best regards. Thanks


Answers:
author: Bruno Vincent
body: Hi [@JongBum Lee](/t5/user/viewprofilepage/user-id/617958)

Yes, in that case all your applications belong to the same domain so Crowd SSO will work if you set *swportal.domain.com* as your SSO domain in Crowd's console.

Please note that foo.bar.swportal.domain.com would not be considered as belonging to the same domain (and thus Crowd SSO would not work). Quoting [RFC 6265](https://tools.ietf.org/html/rfc6265#section-4.1.2.3):
> The user agent will reject cookies unless the Domain attribute specifies a scope for the cookie that would include the origin server. For example, the user agent will accept a cookie with a Domain attribute of "example.com" or of "foo.example.com" from foo.example.com, but the user agent will not accept a cookie with a Domain attribute of "bar.example.com" or of "baz.foo.example.com"


Tags: crowd-administration
Unable to login to Jira after enabling Crowd SSO
Asked by Armaan Bajwa:

I have a Jira docker image set up to communicate with Crowd. The login with Crowd users works when SSO is disabled, but I cannot login to Jira with any user at all once I enable SSO using Crowd.

Following [this guide](https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-jira-192625.html), I made the following changes to my Jira Docker image:

seraph-config.xml was changed to:

```

<!-- CROWD:START - If enabling Crowd SSO integration uncomment the following SSOSeraphAuthenticator and comment out the JiraSeraphAuthenticator below -->
<authenticator class="com.atlassian.jira.security.login.SSOSeraphAuthenticator"/>
<!-- CROWD:END -->

<!-- CROWD:START - The authenticator below here will need to be commented out for Crowd SSO integration
<authenticator class="com.atlassian.jira.security.login.JiraSeraphAuthenticator"/>
CROWD:END -->
```

I also added a crowd.properties file that contained the following information:

```

application.name jira-8
application.password test
application.login.url http://crowd-url/crowd/console/

crowd.server.url http://crowd-url/crowd/services/
crowd.base.url http://crowd-url/crowd/

session.isauthenticated session.isauthenticated
session.tokenkey session.tokenkey
session.validationinterval 1
session.lastvalidation session.lastvalidation
cookie.tokenkey crowd.token_keyroot@<key>:/opt/atlassian/crowd/client/conf#
```

After I make these changes and restart the Docker container, I'm unable to log in to Jira with any credentials (I tried both Crowd credentials, and Jira local credentials)


Answers:
author: Bruno Vincent
body: Hi [@Armaan Bajwa](/t5/user/viewprofilepage/user-id/1656683)

You cannot login with a Jira internal directory user once Crowd SSO is enabled, it is a known limit as per Atlassian's [documentation](https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-jira-192625.html#IntegratingCrowdwithAtlassianJira-Step2.ConfiguringJiratotalktoCrowd) (see section 2.2).

Regarding Crowd users, this might have something to do with IP addresses consistency or your SSO domain name. I suggest that you set the following property in *atlassian-jira/WEB-INF/classes/log4j.properties* and restart Jira. You will then get more information in *atlassian-jira.log* that should hopefully help you to understand what is going on here.

```
log4j.logger.com.atlassian.crowd.integration = DEBUG
```


Tags: crowd-administration

jira

ldap

login

sso
Execution Cycle Message when attempting to Create an Issue
Asked by Adam Burns:

When in a project on Jira, I've tried to create a couple of issue types, one test scenario and one test case and it's generating an 'Execution Cycle: Execution Cycle is required ' banner message. How can this be resolved?


Answers:
author: Nic Brough -Adaptavist-
body: What app are you using for handling test management in Jira?

comments: author: Adam Burns
body: I'm currently using IE and Edge, but both produce the same message when using Jira to create test cases, etc.


author: Nic Brough -Adaptavist-
body: What app are you using for handling test management in Jira?
How do I reset a Users password?
Asked by Adam Burns:

I have Administartion rights on Jira, but when accessing a user (via 'User Management' drop down menu) - there is no option to 'reset password' on the left hand side of the menu. Please can you advise how to resolve this?


Answers:
author: Armaan Bajwa
body: I'm not sure what Jira version you're using, but on Jira 7.5, you can reset a user's password by going to the user's profile from User Management Screen, and then selecting 'Set Password' option from the Actions drop down menu as shown.

![jirauser.png](https://community.atlassian.com/t5/image/serverpage/image-id/58618i3E456FF13F827088/image-size/large?v=v2&px=999 "jirauser.png")
What version of Apache Tomcat is bundled with Crowd 3.4.5?
Asked by Celeste Plaisance:

Need this info to verify security vulnerabilities.


Answers:
author: Bruno Vincent
body: Go to *\<crowd.install\>/apache-tomcat/lib*

Then

```
java -cp catalina.jar org.apache.catalina.util.ServerInfo
```

Result for Crowd v3.4.5 is:
> Server version: Apache Tomcat/8.5.40
>
> Server built: Apr 10 2019 14:31:19 UTC
>
> Server number: 8.5.40.0
Logging in programmatically for SSO purposes.
Asked by Aakash Lakhotia:

I'd like an SSO-type setup such that when users log into my third party SaaS, called [Impexium](https://www.impexium.com/), hosted on a subdomain, they will also be logged in to their Confluence account.

Is this possible via the Crowd API or other means?

Thanks


Answers:
author: Gaurav
body: Hi [@Aakash Lakhotia](/t5/user/viewprofilepage/user-id/3361676) ,

It is certainly possible, Crowd exposes REST APIs to authenticate users and maintain their SSO sessions, for more details look into [Crowd's REST API Documentation](https://docs.atlassian.com/atlassian-crowd/3.4.0/REST/#usermanagement/1/session)

You would have to develop a plugin or capability in your third party tool to integrate with Crowd REST APIs

Thanks,

Gaurav

comments: author: Aakash Lakhotia
body: Thanks for the info.

I've got the API working in Postman. Once my user logs into the third party app, I can run js to make the required API calls to login their Confluence account.

Could you help point me into the right direction on how to go about doing that?

[@Gaurav](/t5/user/viewprofilepage/user-id/1177576)


Tags: confluence
License downgraded
Asked by Maysa:

Hi,  

We have 100 user licenses, SEN-1, we needed 3 more so we got 50 users, SEN-2 . When activating the new license, the previous one we removed. How do we get our 150 licenses working_


Answers:
author: Nic Brough -Adaptavist-
body: You do not. I am afraid you have misunderstood how Atlassian licences work. They are not cumulative (they were, many years ago, but not now), they are tiered. You can't add them together, if you need more licences than your current tier, you have to go up to the next tier.

Get in touch with Atlassian licence sales right away, they can refund you the 50 users, or manage it so that what you've paid goes towards the cost of the 250 tier (the next step up from 100 if my memory is working ok)