youngmon/atlassian-qna huggingface dataset:
Notifications on a scheduled maintenance
Asked by Jules Boiteux:

Hi there,   
I updated our status page with a scheduled maintenance.   
I checked the checkbox: "Send notifications" but still nothing pops-up in the app. I followed the steps to check that the status embed works and it does.   
I don't know what I'm missing here :/


Answers:
author: Sophie Reynolds
body: We had the same issue on 30th May. A statuspage was raised for a new incident but notifications were only sent to some of our subscribers. When I checked my account I was in the quarantined section along with approx 300 others. Our team identified that there was an issue with the SPF setting for certain users which was fixed but I had to reactivate the quarantined subscribers manually.

Strange this issue occurred at the same time as you guys?


author: Paul Hodkinson
body: Sorry,not an answer, but I am seeing the page updating with scheduled maintenance, however notifications are not sending. I am using an audience-specific page and trying to send the notification out to the subscriber group for a component.

I'm raising a support case today.

Good luck,

Paul.
Does anyone have a crowd sizing guide?
Asked by Greg Warner:

Does anyone have some sizing information for a crowd install for 5000 employees? There are guides for most other Atlassian products, but not crowd.

We're planning to hook up Crowd for JIRA and Confluence initially, Bamboo, FishEye and Stash later.


Answers:
author: Justin Justin
body: Hi Greg,

Don't have a "Crowd sizing guide", but here's a benchmark. AppFusions has a client that has JVM MAX \& MIN set to 1024m and Crowd has been running fine for months (really 3+ years). It syncs with AD using 4 directories with \~12k users.

Hope that helps!


Tags: crowd-administration
Is there any open source Maven Repository software that integrates with Crowd?
Asked by raulgd:

I'm trying to setup a Maven repository to use in my Atlassian ALM stack, but I want to be able to have my users created in Crowd to be used in my Maven repository as well to continue having a centralized user management for all my tools.

Is there any tool that supports this? I found that Apache Archiva had an initiative to use the Crowd client API to integrate it, but they were unsuccessful because of Archiva's security architecture limitations, here's the JIRA bug: <http://jira.codehaus.org/browse/MRM-685>

What do Atlassians use internally for artifact management/repository? what is the recommended solution? Keep in mind that we're 3 people and we use the starter license, so we don't have enough money for expensive solutions (like Nexus).

Maybe even there's an opening for another Atlassian product, to have a Maven Repository product that integrates into the Agile process flow, perhaps with Bamboo to have it integrated CI deploy automatically into the Repository for continuous artifact releases, that would be plain awesome!

Thanks,

Raul


Answers:
author: Kerem Caglar [Solveka]
body: Try Nexus. There is a community supported Crowd connector

comments: author: raulgd
body: Like I said on the question, forget Nexus as it's a paid product that we can't afford. Any other alternatives that work with Crowd?


author: Caspar Krieger
body: For completeness: Nexus is what we use at Atlassian (though I'm not sure if we're using the Crowd connector or whether it's hooked up to LDAP directly).Sometimes we do have scaling problems with Nexus but as far as I know we don't have any plans to replace it with an offering of our own or someone else's.


Tags: crowd-administration
crowd user management inviataion
Asked by Niharika Shrivastava:

Can we send invites to users for registration from crowd, same as we can invite users to confluence?

We are integrating confluence and JIRA with crowd,it would be nice to have feature to send invites to users.


Answers:
author: Diego Berrueta
body: Hi @Niharika Shrivastava,

Crowd does not have that feature at the moment. Can you please open a New Feature request at <https://jira.atlassian.com/browse/CWD>? Thanks.


Tags: crowd-administration
Shibboleth problem
Asked by Erkki_Aalto:

We have so far used the Confluence Shibboleth authenticator for our Confluence wiki. Now we are testing the Nordunet Shibboleth authenticator for Crowd and Crowd for authentication.

For local users authentication via Crowd is working as it should, but not for Shibboleth users. Shibboleth authentication causes the user to be created to Crowd and syncronized to Confluence correctly. The user is correctly redirected to Confluence, but a Confluence session is not created. How does Crowd transmit the information about the session to Confluence? Where should I look for the problem?


Answers:
author: Erkki_Aalto
body: I had it finally working. There were a number of problems.

When using the Shibboleth autheticator the user is first sent to the SP, then to Crowd that sets the SSO cookie and finally to the application. It is somewhat complicated and therefore easy to get wrong.


author: Caspar Krieger
body: I'm not sure if this helps, but in the traditional way of connecting Confluence to Crowd, Crowd doesn't transmit information about the session to Confluence. Instead, when a user logs in to Confluence, then Confluence sends that username and password to Crowd, and Crowd gives it back a session cookie which Confluence sets in the user's browser. When that user makes subsequent requests to Confluence, then Confluence sends that session cookie back to Crowd, and if that session cookie is valid then Crowd will send back the associated user to Confluence.

I don't know the Shibboleth plugins affect this, but maybe this will help to clarify your understanding.


Tags: crowd-administration
Does Crowd give you any additional access control over the control you have from within each application (Jira, Confluence, Stash, etc.)?
Asked by Jeff Clement:

We are currently running Jira, Confluence and Stash. We're considering using Crowd to help manage user access, but after trying it out on our test system, I'm not seeing any advantage or increased functionality to how we are currently managing access. Am I missing something?

Thanks,

Jeff


Answers:
author: Jobin Kuruvilla [Adaptavist]
body: In terms of authentication, you can define who can access the application, within Crowd. See the authorisation tab in <https://confluence.atlassian.com/display/CROWD/Adding+an+Application#AddinganApplication-add>


author: Vincent Mutambuki { Mumo Systems }
body: Crowd provides single point to manage user authentication for all Atlassian products and any other custom tools you may have. Perhaps the biggest benefit is SSO (Single Sign on). This cuts out the need to login multiple times to the various tools. In addition to this, Crowd can tie in multiple authentication sources using directories to appear as one to the Atlassian tool set.


Tags: crowd-administration
Crowd Administrative Functions are failing
Asked by Fernanda Souza:

When I try to use some of the administrative functions of crowd, I'm getting this exception:

`Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,COERCIBLE) ``for` `operation ``'='`

In my company it's complicated to send logs so, apologies for this small stack trace ![sad](/html/@C495B4504065515364EB1894F812B34C/images/emoticons/sad.png "sad").

Any information that can help will be more than welcome.

Regards,

Mitch


Answers:
author: Deividi Luvison
body: No problem Mitch, luckly I think I know what is the problem, I believe your crowd mysql database is using the wrong colation, please try running the steps in [this](https://confluence.atlassian.com/pages/viewpage.action?pageId=179077288) guide to fix this.

Make sure to make a database backup before trying those steps.

tks,

David

comments: author: Fernanda Souza
body: Again, sorry for the small stack trace, I will try that after doing a vm snapshot of our crowd environment, thanks again for the direction Deividi.


author: Fernanda Souza
body: Yep, that was the problem, thanks agains for the prompt response Deividi.


Tags: crowd-administration
Has anyone had problems with multiple level subdomains using Crowd/SSO?
Asked by Dana Cleveland:

I have been able to connect most of our products to crowd, and individually they work as expected. I "enabled" SSO for products such as bamboo, stash, and confluence, and of course crowd. Here's the weird part, it works exactly opposite. For example, if I sign in to Stash in a browser, and then open a tab and navigate to confluence, the login page will appear (instead of the landing page, thinking i was already authenticated), and if i go back to the Stash tab, and refresh the page, the session will be expired there as well..

I have the domain in crowd set .mycompany.com

All my the applications are of the domains product.test.mycompany.com

One other thing that shouldn't make any difference, but each product is set up in crowd as

application - \> Directories (Active Directory and Local)

I have it this way so I can use the auto-add-to-group for each application, like for jira-users, but its by application and not across all users/products.

any ideas?


Answers:
author: Caspar Krieger
body: This sounds like the kind of situation that's going to require a few back and forth exchanges to figure out; would you please open a support request at <https://support.atlassian.com> so our support team can help out out? (You can just copy-paste your question initially.)


Tags: bitbucket-server

confluence

crowd-administration
crowd installation error - [net.sf.ehcache.Cache] Unable to set localhost.
Asked by Niharika Shrivastava:

I am trying to install crowd on ubuntu server.I am unable to proceed with the installation. I get the following error in Catalina.out

2014-10-29 11:09:50,292 localhost-startStop-1 ERROR \[net.sf.ehcache.Cache\] Unable to set localhost. This prevents creation of a GUID. Cause was: ubuntu: ubuntu: Name or service not known  
[java.net](http://java.net).UnknownHostException: ubuntu: ubuntu: Name or service not known  
at [java.net](http://java.net).InetAddress.getLocalHost(Unknown Source)  
at net.sf.ehcache.Cache.\<clinit\>(Cache.java:214)  
at net.sf.ehcache.config.ConfigurationHelper.createCache(ConfigurationHelper.java:296)  
at net.sf.ehcache.config.ConfigurationHelper.createDefaultCache(ConfigurationHelper.java:219)  
at net.sf.ehcache.CacheManager.configure(CacheManager.java:762)  
at net.sf.ehcache.CacheManager.doInit(CacheManager.java:463)  
at net.sf.ehcache.CacheManager.init(CacheManager.java:392)  
at net.sf.ehcache.CacheManager.\<init\>(CacheManager.java:352)  
at org.springframework.cache.ehcache.EhCacheManagerFactoryBe

Do I need to do any modification in any particular file to proceed further?


Answers:
author: Wayne Wong
body: Hi there,

I would like to suggest you to raise a support ticket at [support.atlassian.com](http://support.atlassian.com) together with your crowdInstallationDirectory/logs and crowdHomeDirectory/logs these two logs folder so that we could review those logs file, it will help us to narrow down the search.

Thank you.

Regards,

Wayne Wong

comments: author: Niharika Shrivastava
body: Installation is still not resolved. Can we install crowd using installer? If yes why its not listed on crowd download page?And where do I get the installer?


Tags: install
Crowd LDAPS:636 connection SSL Handshake exception on centos
Asked by Cengizhan_SAY?ILI:

Hello,

I have problem on crowd to connecting LDAPS server. I'm sure that server is OK. My system works on Virtual Centos 6.4 machine. I tried import ssl key to keystore on JAVA. But i can not fix this problem.

Would you help me. Thanks.

Crowd-SSLHandshakeException.png  
[](https://community.atlassian.com/t5/Crowd-questions/Crowd-LDAPS-636-connection-SSL-Handshake-exception-on-centos/qaq-p/425217?attachment-id=11466){#link_115a554bbcb3dc}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/1913/1/Crowd-SSLHandshakeException.png){#display_115a554bbcb3dc_0}


Answers:
author: Tiago Comasseto
body: Hi there, the message "*path does not chain with any of the trust anchors* " indicates that you may have not imported all the certificates of your chain into the Java cacerts. You may want to check this [article](http://www.jyothis.co.in/2011/11/12/javax-net-ssl-sslhandshakeexception/) for more details.

Cheers


Tags: crowd-administration
Problem logging in after change of LDAP server
Asked by Atle Rinvoll:

Hi

Our company has a new address for the LDAP server. I have changed this in the LDAP settings of Jira, but JIRA still uses the old LDAP server when trying to log in. I have checked the table cwd_directory_attribute and the settings are correct. I have also deleted the cache and re-indexed Jira.

Are there other places this information is stored where I need to update?

Cheers

\\Atle


Answers:
author: Caspar Krieger
body: That sounds like it might be a bug to me; would you please open a support request at <https://support.atlassian.com> so our support team can collect the necessary information to reproduce it?

comments: author: Atle Rinvoll
body: Yes, I will do that. Thanks for the answer.


author: Atle Rinvoll
body: I see that in the error message in the log file.


author: Caspar Krieger
body: What leads you to believe that JIRA is still talking to the old LDAP server?
The crowd can't login control manger
Asked by web3bot:

?when i restore database ,i was using mysql5.5 logic backup type.but i restart crowd server .now,i can't loging to crowd set crowd manger .This is image is error page.help me .please....

image2014-10-13 18:4:10.png  
[](https://community.atlassian.com/t5/Crowd-questions/The-crowd-can-t-login-control-manger/qaq-p/170355?attachment-id=8717){#link_115a55a90365be}  
[](/tnckb94959/attachments/tnckb94959/crowd-questions/742/1/image2014-10-13%2018%3A4%3A10.png){#display_115a55a90365be_0}


Answers:
author: Diego Berrueta
body: Please contact [Atlassian Support](https://support.atlassian.com/) to receive assistance.


Tags: crowd-administration
How to implement Crowd SSO Correctly
Asked by Mayuri Sahare:

I am Evaluating JIRA, Confluence and Fisheye for my project. Now i wanted to implement SSO using Crowd. I had tried many times but i am unable to do so.

The problem is when i make changes in the config.xml in JIRA directory and uncomment line for SSO implementation and comment the following line

(`<authenticator class="com.atlassian.jira.security.login.JiraSeraphAuthenticator"/>`)

i cant access JIRA. When i try to access the JIRA link through the browser, nothing opens, just a blank page. Maybe i am not adding the correct values in crowd.properties file. The format of keys which i can see in my file is very different than the examples which have been given in the following link (<https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+Atlassian+JIRA>).


Answers:
author: Vishnukumar Vasudevan
body: Are you trying to log in with an internal account ?

Once you enable the SSO, JIRA internal users will not be able to login.

Also, do you see any errors in the log file ?


author: Tiago Comasseto
body: Hi Mayuri, the following questions usually help to identify what's wrong with the SSO:

1. ` What are the URLs being used to access each application?`
2. `What is the `[SSO Domain](http://confluence.atlassian.com/display/CROWD/Domain)` value stored in Crowd?`
3. ` Are both applications using the Crowd authenticator at their `**WEB-INF/classes/seraph-config.xml**` files? Are all the configuration inside `**crowd.properties**` correct?`
4. `How many Directories are assigned to each application in Crowd? If more than one, are they in the exact same `[order](http://confluence.atlassian.com/display/CROWD/Specifying+the+Directory+Order+for+an+Application)`?`
5. `Are proxy servers being used between Crowd and the applications? If so, please add their IP addresses to the `[Trusted Proxy Servers list](http://confluence.atlassian.com/display/CROWD/Configuring+Trusted+Proxy+Servers)` in Crowd.`

Additionally, you can check the logs with debug enabled to get more information about this issue:

1. ` Under Admin -> Logging & Profiling in Crowd, change the com.atlassian.crowd ``package` `to DEBUG.`
2. `Replicate the problem you are having (Logoff from all the apps; Login to your third-party and then ``try` `to access JIRA; Logoff again from all the apps; Login to JIRA and then ``try` `to access your third-party app).`
3. `Check the results into `[atlassian-crowd.log](http://confluence.atlassian.com/x/bAL3CQ)` file.`

I hope this helps

Cheers
How to migrate from Active Directory for Atlassian user managment
Asked by Douglas Fields:

Hi folks,

I currently have five Atlassian applications on my network - JIRA, Confluence, Bamboo, Stash and FishEye/Crucible. Right now, all of them authenticate against JIRA for the users and groups, and JIRA authenticates against Active Directory (on Windows Server 2012). We have about 20 (current) users and 20 groups.

I would like to get rid of Active Directory from our network as the only thing it is doing is handling authentications for JIRA. (The two domain controllers are the only Windows servers on our network.) So, I'd like to move to Crowd instead. My question is twofold:

1. How can I migrate the users from AD to Crowd? If I have to recreate them from hand one by one, that's not a big deal - I will just take the time and do that. I'd like to migrate the passwords but again, if that can't be done, it's not a big deal.
2. How can I then convert JIRA (and the other applications) to using Crowd *without* losing any of the user information? In other words, I don't want two "Doug" users just because I used to be "Doug" in "AD" and now I'm "Doug" in Crowd.

A supplementary question is, can Crowd handle user password management? In other words, can users go there to reset and change their password?

Thanks,

Doug


Answers:
author: Ellen Feaheny [AppFusions]
body: Hi Doug - you are on the right track of using Crowd as the Auth hub .. With the apps registered to it for user, group and authentication management. More than "migrate", I think of it as more "reconfiguring" AD to Crowd. Semantics. Once done, disabling the old configs to JIRA. You will also get SSO between the apps. :smile:

Its hard to give a fail proof answer without specifically seeing exactly what you have running / configd so far but what you want to do is pretty normal and the whole point of Crowd, so I refer you to the Crowd doc.

Btw - indeed there is a pw reset portal for users in Crowd but not typically used. Instead set up the SMTP configs on Crowd and users can reset pw thru email via the app login page. If configd right, once you reset the pw in one app, it will proliferate to the rest.

Can likely do this all in a few hours when know how to do it; maybe a little longer if just learning. Sounds like a good weekend project for you :smile:

[info@appfusions.com](mailto:info@appfusions.com) if need help ...

comments: author: Douglas Fields
body: Thanks for the input!


author: Chag
body: maybe some of this info can help <https://answers.atlassian.com/questions/296039> <https://answers.atlassian.com/questions/4055>


Tags: crowd-administration

jira

jira-administration
How to validate a raw password against crowd encrypted ones?
Asked by Emmanuel Koch:

Hello, I have integrated my own web apps with crowd. What I would like to have is an authentication fallback in case crowd is down. I plan to have a script to copy/sync the user password from the crowd database to my own application database. Once this is done, how can I validate a user password (send by my webapp) against the crowd encrypted one? Do you have any piece of code I could reuse?


Answers:
author: Caspar Krieger
body: We publish crowd-password-encoders as a reusable module for apps outside Crowd. You should just be able to depend on that (and a few other necessary libraries which that module assumes are provided) and use the password encoder classes directly.

I've put together a sample application which shows how to encode and validate passwords from outside Crowd: <https://bitbucket.org/caspar-atlassian/crowd-password-encoder-sample-app> (if anyone finds any problems with it, please raise them as BitBucket issues).

comments: author: Emmanuel Koch
body: Very nice, it works easily! The PasswordEncoder interface is very close to the Spring one. Is there Spring Implementation in the spring integration module that directly implements the Spring PasswordEncoder interface?


author: Caspar Krieger
body: I vaguely recall possibly delegating to impls of Spring's PasswordEncoder interface in at least some cases? (check that rather than taking my word for it - you can download the Crowd source yourself from my.atlassian.com if you have a license.) Looking at the Spring PasswordEncoder docs, it is crazy similar, but we don't have direct implementations of the Spring PasswordEncoder interface that I know of: you'll have to do the tedious but trivial work of wrapping our impls yourself.


author: Mads Tandrup
body: Hi Caspar

Where can I obtain the encoders? Seems like they are no longer available from maven?

Best regards,

Mads Tandrup


author: Scion
body: Latest builds of the encoder can be found here: <https://mvnrepository.com/artifact/com.atlassian.crowd/crowd-password-encoders>  

I had to update the .pom file with the repository reference:  
\<repositories\>  
\<repository\>  
\<id\>plugins-release\</id\>  
\<name\>repo.spring.io\</name\>  
\<url\>[https://repo.spring.io/plugins-release\</url](https://repo.spring.io/plugins-release</url)\>  
\</repository\>  
\</repositories\>
is it possible to import passwords through CSV importers in CROWD?
Asked by Rahul Arora:

I need to import bulk number of users and associated groups in the crowd application. Do we have functionality to import their password too or it can be created only in the crowd?


Answers:
author: Caspar Krieger
body: Crowd's CSV importer wizard (part of the Crowd administration UI) will let you import passwords too (documentation: [Importing Users from CSV Files](https://confluence.atlassian.com/display/CROWD/Importing+Users+from+CSV+Files)). The catch is that either your users' passwords must be unencrypted, or they should be encrypted and stored in exactly the same way that the Crowd directory is storing them in the database.

(Note that I'm using 'encryption' here as a catch all term to cover passwords encoded in some form: generally passwords will be hashed).


Tags: crowd-administration
Resetting passwords of all newly imported users
Asked by sumedh inamdar:

We imported users into Crowd in bulk.

While importing, we used a default password for all of them.

Now we want all of them to reset their passwords. How do we do that?

I found this - <https://jira.atlassian.com/browse/CONF-30236> but it's marked as duplicate of another issue that seems still open.


Answers:
author: Septa Cahyadiputra
body: Hi Sumedh,

There is no such a way to do this for now. I have created a new feature request for Crowd as the mentioned link is for Confluence:

<https://jira.atlassian.com/browse/CWD-4058>

I investigate this issue further and find a workaround that might work for your end. Please try the following steps:

1. Create a database backup of your Crowd for safety precaution
2. Execute this SQL and note the directory_id of the directory that the newly imported users were imported

   ```
   SELECT * FROM cwd_directory;
   ```

3. Once you get the directory_id, execute this SQL query: :warning: This will reset all users from the directory

   ```
   UPDATE cwd_user_attribute SET attribute_value = 'true' WHERE attribute_name = 'requiresPasswordChange' AND directory_id = &lt;Input Directory ID&gt;;
   ```

Hope it helps.

Cheers,  
Septa Cahyadiputra


Tags: crowd-administration