youngmon/atlassian-qna huggingface dataset:
Office 365 Directory Connector for Crowd
Asked by Bruno Vincent:

Hello everyone,

Please, allow me to make an announcement for a new plugin for Crowd.

We are actually proud to introduce Cleito's Office 365 Directory Connector for Crowd (ODCC): <https://www.cleito.com/products/odcc/>

ODCC allows you to add your Office 365 instance (which actually relies on Windows Azure AD) to your list of Crowd user directories, just like any standard LDAP or internal directory.

Thus, the users and groups you see in Office 365 are the users and groups you get in Crowd and in the rest of your Atlassian server products. Your users do not have to handle multiple accounts as their Office 365 account is also their Atlassian Stack account.

You can see it in action here:

<https://youtube.com/watch?v=SH8R_emN43U>

We hope you'll like it! :-)

Bruno


Answers:
author: Bruno Vincent
body: Please note that Cleito ODCC is now available on Atlassian Marketplace: <https://marketplace.atlassian.com/plugins/com.cleito.odcc/server/overview>


Tags: crowd-administration

ms-office-365
Jira Service Desk Cloud and Crowd
Asked by Doug von Ferber:

JIRA Service Desk Cloud version and Crowd which is installed on a server.   

This is possible to link together correct? Or will I also need to use Service Desk Server version so Crowd can communicate locally with each other? Sorry, new to JIRA products and cant seem to find any info in the documentations.


Answers:
author: Bruno Vincent
body: Hi Doug,

As of today Crowd server can only be integrated with server editions of Atlassian products.


Tags: crowd-administration
Can Crowd and SSO be implemented separately?
Asked by Janene Hoffmann:

SSO is a ++feature++ of Crowd  

Therefore, SSO can be used to authenticate to the Atlassian suite, JIRA, Confluence and JSD.   
AND Crowd used to manage Atlassian suite users?

image2017-1-3 13:3:13.png

Currently users are managed internally in each JIRA, Confluence and JSD which is very labor intensive.

If Crowd is implemented, with the inclusion of SSO for authentication as on this diagram, does SSO nullify Crowd?  

Converting internal users to Crowd should have no impact on existing SSO?

Your insight is appreciated.

[](https://community.atlassian.com/t5/Crowd-questions/Can-Crowd-and-SSO-be-implemented-separately/qaq-p/404802?attachment-id=6957){#link_1163120b8c89e3}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/1794/1/image2017-1-3%2013%3A3%3A13.png){#display_1163120b8c89e3_0}


Answers:
author: Marcin Kempa
body: Hi @Janene Hoffmann

From your diagram I read that you are using SAML SSO with a separate IDP. The SSO provided by Crowd does not implement SAML specification. However you may use Crowd only for authorisation and user management just like any other external directory and still take advantage of other ways of authentication like SAML SSO.

Using Crowd for user management does not imply that products connected to it must use the SSO provided by Crowd. Therefore implementing Crowd and exporting internal users from products to it should not have any impact on existing SSO solution you are using.

As a side note, since you are using SAML SSO, you may be interested in latest JIRA 7.3 Data Center releases which comes with SAML integration [out of the box](https://confluence.atlassian.com/adminjiraserver073/saml-sso-for-jira-data-center-applications-861258328.html).

comments: author: Janene Hoffmann
body: Thank you for helping me understand what has been designed! Obviously I'm not familiar with SSO nor Crowd, but need to get up to speed quickly. Also, before I get too far into converting Internal Directory to Crowd, I need to feel confident of the path I've been directed towards.   
So I can convert all the Internal Directory groups and users to Crowd without impacting SSO.  
Thank you for the clarification!


author: Lars Olav Velle
body: Hello Janene!

In case you havent implemented SSO yet, you might want to check out Kantega Single Sign-on.

We do SSO with Kerberos and SAML even for users in the internal directories.

Have a look at [https://marketplace.atlassian.com/search?query=kantega](https://marketplace.atlassian.com/search?query=kantega?)

If you need any assistance, email us at SSO@kantega.no


Tags: crowd-administration
Using 1 Crowd 2 JIRA User Sync
Asked by JongBum Lee:

Dear All

I want to make 2 JIRA User Sync with one Crowd User Directory.

Both jira will do crowd user sync. (Same user / group information)

```
One of them will be Crowd SSO environment.
```

I wonder if there is any problem in using it like this.

Thanks

Best Regards


Answers:
author: Nic Brough -Adaptavist-
body: You should not have any issues doing that. One of the projects I'm partly involved in has 4 separate JIRA instances with a single crowd installation (and three directories behind it). Plus a couple of Confluences, Bitbucket and some other stuff they've integrated!

comments: author: JongBum Lee
body: Thanks Mr. Nic Brough

Your answer has helped me a lot.


Tags: crowd-administration
Sync users from multiple OU's from Microsoft AD in Crowd
Asked by Duc Pham:

Hi Everyone,

I have a case when using Microsoft AD integrated in Crowd. Since i want to reduce the scope of users to sync to Crowd from AD so that i need to reconfigure my Base DN in directory connector in Crowd. Is there anyway to add multiple OUs in Base DN? for example: OU=container1,DC=example,DC=local;OU=container2,DC=example,DC=local.

I did google all day but it led me nothing ![sad](/html/@C495B4504065515364EB1894F812B34C/images/emoticons/sad.png "sad")

thanks in advance!


Answers:
author: Barry St.John
body: You can't do that with the base DN, but you can use groups in your user filter and only pull in users who are members of specific groups.

Note that I don't use AD with Crowd so you'll need to modify the LDAP syntax a little. This example collects users who are members of either MYGROUP1, **OR** MYGROUP2, **OR** MYGROUPX in the USERGROUPS container in the MYCOMPANY organization.

(\&(objectclass=inetOrgPerson)(\|(groupMembership=cn=MYGROUP1,ou=USERGROUPS,o=MYCOMPANY)(groupMembership=cn=MYGROUP2,ou=USERGROUPS,o=MYCOMPANY)(groupMembership=cn=MYGROUPX,ou=USERGROUPS,o=MYCOMPANY))))

I believe this is correct for AD:

(\&(objectCategory=user)(memberOf=CN=mygroup,OU=mygroupcontainer,DC=mycompany,DC=com))

You can also use a similar filter for pulling in the actual group objects.

comments: author: Duc Pham
body: Hi Barry,

I'm very appreciate that! It's fixed my issued now :smile:

Thanks


author: Bruno Vincent
body: Hi Duc Pham,

Nope, you can't have multiple User DNs in the configuration tab of your directory.

What you should do here is create one directory per OU. Then, still in Crowd, add all these directories to your applications. For each of your applications, check the "Aggregate group memberships across directories" option in the directories tab.

comments: author: Duc Pham
body: Hi Bruno,

Thanks for your suggestion, that's also a solution for me :smile:


Tags: crowd-administration
What is crowd's default password?
Asked by HYE SUN LEE:

What is crowd's default application password?

In this documents , there is no password as a plain text.

<https://confluence.atlassian.com/crowdkb/getting-invalidauthenticationexception-in-the-log-file-when-logging-into-crowd-234653175.html>

there is only encryped password as below.

1. In the `<Crowd-Home>/crowd.properties` file, change the application.password entry to "To7CfmPz";
2. In the database, run the following command:

   UPDATE cwd_application SET credential = '{PKCS5S2}+ebYspXujIGikRoLVenN/BpbtwEg+WfR1u1Okk1BJpFG4nJwbeAr0Sv5U+YG7x5k' WHERE application_name = 'crowd';

**What is this plain password?**

I need this password when I use REST API of crowd.

I can change this password in crowd application on applications menu on crowd, but I can't not change the password in crowd.properties file. How can I change it?


Answers:
author: Nic Brough -Adaptavist-
body: There is no default password. The stuff you've found is about using a known string to overwrite the one you set up when you installed it in case you forgot it.
Crowd behind NGINX both running in Docker containers
Asked by RVal:

We have the following experimental setup for Crowd. There are 3 docker containers running in Ubuntu - Crowd, Postgres and NGINX as a reverse proxy. The idea was that this setup should be easily replicated and started with docker-sompose on different host when needed.

Everything starts up and runs ok. I configured Crowd to connect to Postgres and added new Confluence client application. However when I try to authenticate user in Confluence it shows Crowd exception like the following:

"HTTP Status 403 - Client with address "172.18.0.5" is forbidden from making requests to the application"

172.18.0.5 is one of the internal docker IP addresses - I believe it is one of the NGINX container. I can not figure out why is it showing this address instead of real remote IP. I have these lines in NGINX configuration:

```
location / { proxy_set_header    Host            $host; proxy_set_header    X-Real-IP       $remote_addr; proxy_set_header    X-Forwarded-for $proxy_add_x_forwarded_for; port_in_redirect off; proxy_redirect   http://crowd.example.com/ /; proxy_pass http://crowd:8095;}
```

Shouldn't the X-Real-IP be passed to Crowd ? Anybody had similar setup working or have an idea what I could try ?

Thank you

HTTP Status 403 - Client with address "172.18.0.5" is forbidden from making requests to the application

HTTP Status 403 - Client with address "172.18.0.5" is forbidden from making requests to the application


Answers:
author: lpater
body: Hi RVal,

Crowd will use the X-Forwarded-For header as the source ip for the validating the request, but the proxy IP needs to be added to the Trusted Proxy Servers list in Crowd. Please see <https://confluence.atlassian.com/crowd/configuring-trusted-proxy-servers-158107219.html> for more details.

comments: author: RVal
body: Thank you for your help. Adding my proxy IP to Trusted Proxy Servers made Crowd to use X-Forwarded-For header instead of my proxy IP as a remote client IP. Thanks a lot.


Tags: crowd-administration
ERROR [xfire.transport.http.HttpChannel] javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requ
Asked by lance_lyons:

Hi,

We are getting the error.

ERROR \[xfire.transport.http.HttpChannel\] [javax.net](http://javax.net).ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

when trying to login to crowd console.

We dont have any apps connected other than the crowd apps.

this started after we moved a previous working crowd install to a new machine, new url and same db server.

We have configured the crowd properties file to use the new URL that we have crowd.ourcompany.com

we created certs using both openssl and importing into the java keystore

and we created using the recommended keytool -genkey -alias tomcat -keyalg RSA approach and importing the resulting certificate into the java keystore.

what am I missing. We have a cert in the Java key store (%java_home%\\lib\\security\\cacerts file)

we are just trying to login to the crowd console and get this error.


Answers:
author: Bruno Vincent
body: Hi,

Did you update **ALL** crowd.properties and build.properties files as detailed on [this page](https://confluence.atlassian.com/crowd/configuring-crowd-to-work-with-ssl-151520306.html#ConfiguringCrowdtoWorkwithSSL-Step3:Modifycrowd.properties)?

crowd_ssl.png  
[](https://community.atlassian.com/t5/Crowd-questions/ERROR-xfire-transport-http-HttpChannel-javax-net-ssl/qaq-p/43162?attachment-id=11749){#link_115956c7a625b4}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/186/1/crowd_ssl.png){#display_115956c7a625b4_0}


Tags: crowd-administration
Deleting a users from Crowd - impact to external AD
Asked by Sean Parchmann:

*This question is in reference to Atlassian Documentation: [Deleting or Deactivating a User](https://confluence.atlassian.com/pages/viewpage.action?pageId=33423499)*

If you 'delete' a user from Crowd and you are synchronizing (read/write) with AD, will it 'delete' the user from the external AD?


Answers:
author: Bruno Vincent
body: Yes, it will.

Unless:

* The "remove user" option is unchecked in the permissions tab of your directory in Crowd's admin console  

  OR  

* The technical AD account you defined in the username property of your directory's connector tab has read-only rights in AD (which means non AD Admin in most cases)

comments: author: Sean Parchmann
body: Thanks Bruno!


Tags: documentation
best training for atlassian administrators?
Asked by DD MacRae:

We are currently utilizing JIRA, Confluence, Bitbucket, Bamboo, and Crowd and have been configuring and administrating per the documentation of Atlassian. We have run into some issues with configuring Crowd with SSO and our AD Directory, which we believe some formal training on the administration side of these applications will relieve some of these issues. I notice that Atlassian doesn't offer training for Crowd or some of the devtools and we are inquiring if any other users have recommendations?


Answers:
author: Jonas Andersson
body: Tell us a bit more about the issues that you see, and we might be able to point you to some material. Unfortunately a lot of implementations such as SSL, apache mod proxies is not covered by support and will not be part of whatever training Atlassian or their expert partners have to offer, so it all depends on the complexity of your setup. Elaborate more, and if you feel content check out their expert partners for available trainings.


Tags: training-and-certification
License for Crowd and Maintenance period
Asked by Gerard Hovanessyan:

Hi,  
I have a valid crowd license, which maintenance period ended on "09 May 2014".  
I have upgraded the crowd instance, using eval license to Crowd 2.7.2.

<br />

According to release notes - <https://confluence.atlassian.com/crowd/crowd-2-7-2-release-notes-590254027.html> - Crowd 2.7.2 is released on "13 April 2014".

<br />

According to FAQ - <https://www.atlassian.com/licensing/purchase-licensing#softwaremaintenance-2> - I should be able to get all software updates during the maintenance period.

<br />

"13 April 2014" is before "09 May 2014", so I should be able to get Crowd 2.7.2.

<br />

The reality is that when I update the eval license with the one that I have, I get an error "The supplied license key is not valid for this version of Crowd, please renew your maintenance.".

<br />

How can this issue be resolved?

<br />

P.S. I do not want to downgrade or renew license.


Answers:
author: Marcin Kempa
body: Hi Gerard,

It seems that there was a typo in Crowd 2.7.2 release notes, as I checked our download [archive](https://www.atlassian.com/software/crowd/download-archive) and it turns our that this version of Crowd was released on . This is why your licensed, which expires on cannot be applied for 2.7.2 version of Atlassian Crowd.

Sorry for the inconvenience, I already updated the Crowd 2.7.2 release notes page.

P.S.

Although I understand that you do not want to renew Crowd license, I would still strongly encourage you to do so. With renewing license you will receive our support as well as you will be able to use newest version of Crowd which brings you following benefits:

* security fixes (there were a few since version 2.7.2)
* bugfixes
* performance improvements
* new features and other enhancements

Would you mind sharing with me why you are not interested in renewing license?

Best Regards,

Marcin Kempa


Tags: crowd-administration

licence

maintenance

update
How can I remove text and links from home page of crowd ?
Asked by Nicolas Bauland:

I would like to know how can I remove this part:

2016-10-24_2204.png  
[](https://community.atlassian.com/t5/Crowd-questions/How-can-I-remove-text-and-links-from-home-page-of-crowd/qaq-p/343668?attachment-id=7052){#link_1159573bf77a30}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/1546/1/2016-10-24_2204.png){#display_1159573bf77a30_0}


Answers:
author: Nicolas Bauland
body: I've finally found the file: \<Installation crowd path\>\\apache-tomcat\\webapps\\ROOT\\index.html


Tags: crowd-administration
How do I send SLA breach alerts to a specific TEAMS chat session?
Asked by Paul Hart:

The email notifications work as designed based on rule however my HD team does not look at the dept email queue. We use a dedicates TEAMS chat within the company as an approved channel for communication and is monitored (eyes on glass)


Answers:
author: Anandhi Arumugam
body: Hi [@Paul Hart](/t5/user/viewprofilepage/user-id/5448482) Please follow this documentation

<https://support.atlassian.com/automation/kb/integrate-an-automation-rule-with-microsoft-teams/>

You could send alerts to Teams channel from Automation for Jira using a Webhook URL.

Hope this helps.

comments: author: Paul Hart
body: Helpful, I am new to Atlassian/JSM so at least I now have a better idea on what's involved and what to ask


author: Anandhi Arumugam
body: Glad it helped! Do you have any further questions on this [@Paul Hart](/t5/user/viewprofilepage/user-id/5448482)


Tags: cloud

jira-service-management

jira-service-management-cloud
On Kanban board,"This ticket is not part of an active sprint, therefore cannot be in progress"
Asked by Lebtop:

We are currently using KanbanBoard and whenever the team tries to move Tasks, Defects or Stories to in Progress they come back with this error from the Jira Administrator:

"This ticket is not part of an active sprint, therefore cannot be in progress"

What I tried, I tried to unselect Sprint on the Custom Field on the Card layout, but still the same error happens.


Answers:
author: John Funk
body: Hi Kubeka - Welcome to the Atlassian Community!

Can you share a screen shot of the whole board? Because that sounds like a Scrum board, not a Kanban board.


Tags: jira-align

jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-software

new-to-jira
Notify an specific mail when an issue is approved
Asked by Ariane Giraud:

In our company, we need to notify the Audit department whenever a ticket is approved.

How can this option be configured?


Answers:
author: Aaron Pavez _ServiceRocket_
body: Hi!

That will depend. But yes you can, You need to add a Then: Send email or And: Send email.

![2024-08-12 09_24_24-Rule builder - Automation - CaseSF - Jira - Opera.jpg](https://community.atlassian.com/t5/image/serverpage/image-id/341244iD49E234B8C0E9E01/image-size/large?v=v2&px=999 "2024-08-12 09_24_24-Rule builder - Automation - CaseSF - Jira - Opera.jpg")

![2024-08-12 09_24_24-Rule builder - Automation - CaseSF - Jira - Opera.jpg](https://community.atlassian.com/t5/image/serverpage/image-id/341243i3160A98B25237DAE/image-size/large?v=v2&px=999 "2024-08-12 09_24_24-Rule builder - Automation - CaseSF - Jira - Opera.jpg")

Create or set that on any part of the automation to send an email.

Regards

Aaron


author: Aaron Pavez _ServiceRocket_
body: Hi [@Ariane Giraud](/t5/user/viewprofilepage/user-id/5345190)

You can that with automation.

What Jira are you using? Software? service desk? HR? work management?

A ticket approved means there is a STATUS called approved?

Regards

Aaron

comments: author: Ariane Giraud
body: HI [@Aaron Pavez _ServiceRocket_](/t5/user/viewprofilepage/user-id/4482404)

We have a Jira Service Desk Project with two automation running. One auto-assigns a responsible person for the issue, and once it is ready, a second automation is activated for an approval circuit.  
Can a third automation be added, or must it be embedded inside the approval circuit?


Tags: cloud

jira-service-management

jira-service-management-cloud
Is it possible to configure my customer portal so there are different areas (e.g. PMO, IT service a)
Asked by Anastaseeya:

Hi guys,   

Please advise what should be done if I want my customer portal show different custom sections (e.g. HRD, PMO and System Administration). Should I create 3 different projects?  

Thanks in advance!


Answers:
author: Anandhi Arumugam
body: Hi [@Anastaseeya](/t5/user/viewprofilepage/user-id/5349533)

You could use Request Groups and map the Request types into the Request Groups within the same JSM project. Hope this helps!

comments: author: Anastaseeya
body: Hi Anandhi!   

Thanks for your prompt reply. I got it but I don't see the option to group the request types. Where is it located? I have followed all the guides I find but I don't have this option.


author: Anastaseeya
body: <https://support.atlassian.com/jira-service-management-cloud/docs/organize-request-types-into-portal-groups/>  

I don't have the portal settings option in the project settings.


author: Anandhi Arumugam
body: [@Anastaseeya](/t5/user/viewprofilepage/user-id/5349533) What do you see in the Project's settings.


author: Anandhi Arumugam
body: ![JSM - Portal Groups.png](https://community.atlassian.com/t5/image/serverpage/image-id/341267iB95B7368CE8B9379/image-size/large?v=v2&px=999 "JSM - Portal Groups.png")


author: Anastaseeya
body: Thanks for your help. I've just found out that I don't have this setting since I am in a team managed project when it's only available for company managed. Based on that, I guess my question is not relevant anymore.   

Thanks for trying to help me.


author: Anandhi Arumugam
body: If this is a team managed project, you could try <https://support.atlassian.com/jira-service-management-cloud/docs/group-request-types-in-the-portal-in-team-managed-projects/>


Tags: cloud

jira-service-management

jira-service-management-cloud