youngmon/atlassian-qna huggingface dataset:
apache 2.2.17 mod_authnz_crowd
Asked by Sagy Volkov:

Hi,

My customer needs (for some reason) to use a compied version of apache and not the default that comes with RHEL5.5.

In order to install the crowd module I've downlowded the RPM for RHEL5.5.

the apache install is at /usr/local/apache

I've "opened" the RPM (rpm2cpio mod_authnz_crowd-2.0.1-1.x86_64.rpm \| cpio -imvd) and copied the modules (modules/mod_authnz_crowd.so and mod_authz_svn_crowd.so) to /usr/local/apache/modules.

the scriplet inside the rpm is using apxs to compiile and updated httpd.conf. I've made sure to use the right apxs:

# ./bin/apxs -e -a -n authnz_crowd mod_authnz_crowd.so

\[activating module \`authnz_crowd' in /usr/local/apache/conf/httpd.conf\]

as you can see its installed correctly and httpd.conf was updated correctly:

#grep crowd conf/httpd.conf

LoadModule authnz_crowd_module modules/mod_authnz_crowd.so

when I started apache, I can see the module:

# ./bin/apachectl -k start

\[Tue Dec 27 07:08:09 2011\] \[notice\] mod_authnz_crowd 2.0.1 installed.

and then:

# ./bin/httpd -M\|grep crowd

\[Tue Dec 27 07:08:28 2011\] \[notice\] mod_authnz_crowd 2.0.1 installed.

Syntax OK

authnz_crowd_module (shared)

so all is loaded and working.

however, when I add authentication to httpd.conf:

AuthName "Please enter your NT account information"

AuthType Basic

AuthBasicProvider Crowd

CrowdAppName ZZZZZ

CrowdAppPassword YYYYY

CrowdURL _http://someurl:8095/crowd/

Require valid-user

and just try to verify the httpd.conf syntax, I get:

# ./bin/apachectl -t

\[Tue Dec 27 07:09:36 2011\] \[notice\] mod_authnz_crowd 2.0.1 installed.

Syntax error on line 161 of /usr/local/apache/conf/httpd.conf:

Invalid command '\\xc2\\xa0', perhaps misspelled or defined by a module not included in the server configuration


Answers:
author: Arseny Kovalchuk
body: Nice to hear that you have solved it. I ususlly use 'mc' to see such incorrect symbols, it might be not only BOM but some other, that are not recognized as ascii.


author: Sagy Volkov
body: I've tried dos2unix but it didn't help.

I had to manually type the whole httpd.conf section and that solved it.


author: Arseny Kovalchuk
body: My thought is that the httpd.conf was saved with UTF-8 encoding with BOM. Open the file in midnight commander F4 and look at the begginning of the file. If you see some not readable symbo;s, just remove them and save with F2.


author: Sagy Volkov
body: any thoughts/help?


Tags: apache

mod_authnz_crowd
Error when attempting to create a new application
Asked by Paul Hirst:

I am trying to create a new application in crowd. When I get to the last step in the process and click the button I get the following error:

Your request could not be processed because a required security token was not present in the request. You may need to re-submit the form or reload the page.

I have tried this several times and tried Chrome and Firefox browsers. I don't seem to have any other problems with Crowd/Jira/Confluence/Cruicable/etc, only with this one operation.


Answers:
author: Bruna Griebeler
body: Check if your crowd.properties and your server.xml are properly configurated.

Also double check your Tomcat files.

Cheers
How to use crowd for LDAP authentication without passing the plain password to the application? (like Facebook connect)
Asked by Davia viea:

Hi,

I have a web application (django on Apache) and I want to add authentication (login) page.

I don't want that the users will send me their plain password and I'll send them to the LDAP server.

I'm looking for something like Facebook Connect that uses LDAP instead of facebbok.

I want to add iframe to "Crowd Connect" and I'll get the username and some token to prove that the user did authentication.

Is this possible?

thanks


Answers:
author: Tiago Comasseto
body: Hi there, if I'm not mistaken, applications that use Facebook authentication use oauth, which is an open standard. Crowd doesn't provide oauth authentication by default, but it provides [openID](https://confluence.atlassian.com/display/CROWD/CrowdID+Administration+Guide) that works in a similar way.

You mentioned that your application is behind Apache, I know that there's a [module](http://findingscience.com/mod_auth_openid/) for Apache that provides openID capability, you may want to check this out.

I hope it helps.

Cheers


Tags: ldap
LDAP Configuration
Asked by Jordan Koppole:

Not able to configure a Delegeated Auth Dir.

Our LDAP doesn't have RDN and User Group attributes. And crowd doesn't allow me to configure without these values.

Please let me know how do I configure it.


Answers:
author: Jordan Koppole
body: Tried out few ways and it works with cn as RDN and memberOf as the group attributes


author: Jordan Koppole
body: Thanks for your time .. I got it working


author: Manse Wolken
body: Which LDAP software are you using?

I'm pretty sure that your LDAP server can provide you with the information that you need.

This might help:

<http://www.zytrax.com/books/ldap/apa/dn-rdn.html>

<http://www.ldapman.org/articles/intro_to_ldap.html>


Tags: configuration

ldap
Crowd delegated directory user import, default group membership not respected.
Asked by Yann Debonnel:

I wanted to prepopulate my delegated crowd directory. Here are my steps.

1. Create a LDAP connector directoy.
2. Check all my users are in the LDAP connector directory : OK
3. Use the Crowd import users tool to import users from LDAP Connector -\> Delegated Directory  
   Options : Overwrite = false
4. All users imported but they are not part of the default groups set in Delegated Directory (jira-users, confluence-users).

What can I do ?

I guess I could do it directly in DB (Oracle) but I think that's kind of risky and messy...


Answers:
author: David Yu
body: To do it safer, how about use Bob Swift's Crowd Command line client?

<https://studio.plugins.atlassian.com/wiki/display/CRDCLI/Crowd+Command+Line+Interface>

You can probably script something using it.

I suspect the automatic default group memberships only work when users sign-in for the first time when the user account hasn't even been created yet.


Tags: directory

import
Crowd Delegated Authentication auto create user
Asked by gauravkohli:

We have recently moved to Delegated Authentication because the main LDAP Directory is too big( 50k+ users ), to be directly used in Crowd.

The Problem we are facing now is in Crowd 2.1.1 is, if a user does a successful authentication in any of the application, a user is automaticaly created( even though he might not have any access and he might not even be granted any access in future). So this will create a lot of unnecessary users in Crowd.

I checked the database table cwd_directory_attribute and found this attribute "crowd.delegated.directory.auto.create.user" with a value "true", and I think this is the thing which is creating the users.

Now my question is, if I just change it to false, will it stop creating the users and do I need to restart Crowd server and do we have any other neat/clean way to do this or this is the only solution.


Answers:
author: Stefan Bauer
body: Hi Gaurav,

You have different fields at configuration tab of directory connection.  
These are mapping attributes provided by Active Directory through LDAP interface to your Crowd database.  
"User Display Name Attribute" is used displaying concatinated naem in the list.  
"User First Name Attribute" and "User Last Name Attribute" is diplayed in user details.  

Try different field names for mapping for "User Display Name Attribute" usual attribute names are "fn" or "displayName".
Crowd not looking at JAVA_HOME
Asked by Ben S:

Have spent all morning trying to figure this out. I installed the latest JDK for Crowd to use based on a recommendation by Atlassian support, but no matter what I put in JAVA_HOME, Java Version still reads 1.6.0. Is there a config file somewhere that I could change to point Crowd to the right JAVA_HOME path?

configuration:

Windows XP

Version: 2.3.4 (Build:#526 - 11-10-2011)


Answers:
author: Colin Goudie
body: You also need to make sure JAVA_HOME is in your PATH environment.

Generally, in the environement variable dialog, you would set JAVA_HOME to something, then prepend this to the PATH environment

%JAVA_HOME%\\bin

This adds java's bin directory to the system PATH

comments: author: cliper
body: I've both JRE_HOME and JAVA_HOME added to system var, and on PATH and still not working.

I'm attempting to install Crowd 3.2.1 on a Windows 10 Pro.

Currently stuck at this while browsing some solutions online.

Best,


author: cliper
body: Here's what I'm stuck at with so far

```
C:\Crowd>start_crowd.bat

To run Crowd in the foreground, start the server with start_crowd.bat /fg

The JRE_HOME environment variable is not defined correctly
This environment variable is needed to run this program
```


Tags: java_home
phpBB integration with Crowd and Confluence
Asked by MitchellM:

Has anyone successfully integrated phpBB or other forum software (Vanilla, vBulletin, etc.) with Crowd for SSO authentication and security groups?

I came across this reference to a sourceforge project and support forum but it has very little activity, dating back to 2009.

<http://confluence.atlassian.com/display/CROWDEXT/phpBB+Integration>

<http://forums.consultorpc.com/viewforum.php?f=10>


Answers:
author: Kurt Newcomb
body: +1 -- this would be very useful to have, no replies on this either which surprises me.

comments: author: Tim Mohrbach
body: I would be very interested in this too... Can't find much anywhere...


author: BruceK
body: I'd be very interested in capability as well.
Apache ProxyPass and Crowd Integration
Asked by Rolando Rivera:

Hello,

I have the following apache confivuration on a virtual host

```
<VirtualHost *:80>    ServerName some.server.com    RewriteEngine On    ProxyPreserveHost On    <Location />    AuthName "App Authentication"    AuthType Basic    AuthBasicProvider crowd    CrowdAppName app    CrowdAppPassword app_pass    CrowdURL http://crowd-server.com:8095/crowd/    Require valid-user    </Location>    ProxyPass / http://my-tomcat.com:8080/MyApp/    ProxyPassReverse / http://my-tomcat.com:8080/MyApp/        ErrorLog logs/some.server.com-error_log    CustomLog logs/some.server.com-access_log common</VirtualHost>
```

This is almost working... it is ask for the loggin when you go to [some.server.com](http://some.server.com), which i provide, and, after being authenticated, it proxy the tomcat request. The problem happens when a different path (other than the app root context) on the tomcat server gets selected, it asks for authentication again. Do I need a cookie somwhere? Can anyone help?

-thanks

Rolando

```

```


Answers:
author: Radu Dumitriu
body: See <http://httpd.apache.org/docs/2.2/mod/mod_proxy.html>

Specifically, look for `ProxyPassReverseCookiePath,`ProxyPassReverseCookieDomain (if applicable). The cookie should follow the path, too  
{#ProxyPassReverseCookieDomain}
Crowd with Jira, and other custom apps
Asked by Jamie Geyer:

I have this weird issue that manifests itself in a couple of different ways.

First, when I add users for jira access in crowd, they will not be able to log in to jira until I have them log into confluence first. So, they request access, i add them in crowd, they go log in to jira and get an authentication failure. I ask them to log into confluence, then log into jira again, and it works.

Second - and similar - I developed a custom REST client that we are using with Spring security. We have a very similar situation - a user requests access to our web app that uses spring with the REST client - they get authentication failed. If they go log into the crowd web app, an then go back and try again in our web app, they get in. Very strange!

Any thoughts on either?


Answers:
author: Jamie Geyer
body: For anyone interested, i figured this out - i was passing the wrong credentials to the REST API by accident.


author: Jamie Geyer
body: So, I see this in the logs for crowd:

\[crowd.manager.application.ApplicationServiceGeneric\] User does not have access to application 'crowd' as the directory is not allow all to authenticate and the user is not a member of any of the authorised groups

i add the user to crowd-administrators, and auth with the custom app works. Is this correct? Why would I need to add users to crowd-administrators in addition to the directories visible to the custom app? Am i doing something wrong?
Crowd timing out when querying Active Directory
Asked by Joe George:

I've set-up crowd to query my organization's AD server. Unfortunately, our users are in different OU's off of the root. When crowd is configured to search from the root, it time's out immediately. Increasing the LDAP connection time-out does not appear to have any affect. To work around this, I've had to create a different Directory for each high level OU. This causes our groups to appear multiple times.

Our Confluence instance currently authenticates against the AD (searching off of root) without issue.

How can I configure Crowd to properly query from the root and not time out.


Answers:
author: Joe George
body: Our AD is a read-only DC. Due to where on the network that Crowd and Confluence are installed, they cannot talk directly to the main AD servers.


author: Ivar
body: Will Crowd connect every time you try, or is it sometimes unable to?

We had similar issues with Crowd, and the reason turned out to be the fact that the AD was load balanced. Once I connected to the internal IP adress of one of the AD servers, everything went fine and searches was really fast.

I'm not sure, but I believe that the connector towards AD is different for Confluence and Crowd, so this might be the reason why Confluence works just fine while Crowd have issues.

If load balanced AD, try connecting directly towards one of the internal IP addresses and see if you can notice any change.


Tags: active-directory
Importing users from JIRA does not get all the users
Asked by Kurt Frank:

After going through the Users\>Import Users steps only 2 out of 39 users are imported into Crowd.

I have JIRA configured to use MS SQL 2005 database and looking there I can see where if I run

SELECT \* FROM jiradb . dbo . cwd_user

I get the two users that were imported into Crowd.

But there also is a whole other schema that is also in my JIRA database that seems to have a duplicate table list. If I run

SELECT \* FROM jiradb . jiraschema . cwd_user

I get the entire list of 39 users that I want to import into Crowd. These users show up in my JIRA user administration.

Is there a way to get the import to get those 39 users in the jiraschema ?

I think I may have screwed up the JIRA database by upgrading a little while back that got me with these two schemas.

Should I just delete the dbo schema tables?


Answers:
author: Colin Goudie
body: Yeah sounds like your entity_engine.xml file (?) had an incorrect schema in it when you did an update on an earlier version. If I was you I'd export to xml and recreate the entire JIRA database with a new setup/import xml.
Crowd 2.3 Rest API HTTP Auth
Asked by Jamie Geyer:

Can anyone send me in the right direction for setting up HTTP Auth for Crowd's REST API? I get authentication failed but I'm not sure how to set the username and password. I tried setting it up in the application's web.xml but it does not seem to work.

Thanks!!!


Answers:
author: Jamie Geyer
body: I figured this out, I need to send the username and password for the application
Can't log in to Crowd using Chrome, but can using Safari.
Asked by dustingooding:

My main, preferred browser is Chrome. Unfortunately, I can't log in to Crowd using it. When I get to the login screen at <http://server.name/crowd/console/login.action>, I go through the log in motions you'd expect (user, pass, Log in \>\>)... but the screen just refreshes back to an empty login screen. No errors, just back to square one.

When I do the same with Safari, I log in without any trouble.


Answers:
author: Brendan Patterson
body: I get around this problem by using a Chrome "incognito" window. But I don't yet know the reason either. In Chrome Shift+CTRL + N

Also happens with Confluence sometimes.

comments: author: dustingooding
body: That seems to work, but is obviously just a workaround. I wonder what the actual right solution is?


author: Andrei [errno]
body: * same here - Chrome 16.0.9
* I wrote it off for some combination of cookies/sessions. after cleaning up all my chrome data it works again.


author: charleslcso
body: Yes, I have the same problem with Chrome 17.
JSM Form Customization Question
Asked by Nick Peskoe:

Can someone help me come up with a strategy for my Jira Service Management form? I have a custom issue field called Criticality. The options for criticality are as follows: No Impact, Minimal Impact, Low Impact, Medium Impact, High Impact, and Critical Impact. Using a series of questions, I determine whether the issue is truly critical or not. If the issue is not critical, I allow the user to select from a dropdown list of the other options. If it is critical, I have a separate dropdown with only the critical option selected. Right now, my issue is that I can't have the same linked field in two separate questions. In an ideal world both of these questions could map to the same field in JSM. Another work around I thought of trying was combining all answers to one form, yet somehow restrict the options based on the questions that were answered. For instance, if the issue was critical, showing the other options as not selectable. I don't believe that is an option either. Finally, I thought I could use the same form multiple times to appear conditionally on each individual question, but again that is negated by the field only being linked in one question. Can anyone think of a workaround that doesn't involve adding a paid extension? Thanks.  


Answers:
author: Christopher Yen
body: Hi Nick,

I think you could use an automation to fill the field out depending on the customer response. I think this has some similarities to how we do incident priorities. We ask the customer what the severity and impact is and based on the response we use automation to fill in a priority level on the incident. Your setup seems a little different but hopefully this provides some ideas you can use for your situation.

![p matrix.png](https://community.atlassian.com/t5/image/serverpage/image-id/335095i99BC5996736FAA05/image-size/large?v=v2&px=999 "p matrix.png")![2024-07-11 13_19_17-Window.png](https://community.atlassian.com/t5/image/serverpage/image-id/335096i105BC3997BDCBF55/image-size/large?v=v2&px=999 "2024-07-11 13_19_17-Window.png")

comments: author: Nick Peskoe
body: Thanks Christopher for the great response! I like the way you have laid things out. I originally planned on letting users self diagnose every type of criticality except 'Critical' but this could be a better approach.


Tags: cloud

jira-service-management

jira-service-management-cloud
Atlassian Automation - Alerts based on Product Categorization
Asked by Jason Finke:

Hey Community!

Newbie automation question here! I am looking to craft an alert(email) to specific persons based on product categorization categories. The goal is alert a person(s) when a ticket is created with certain category drop downs. What is a way to go about this?

Thank you in advance for any and all help!


Answers:
author: Mikael Sandberg
body: Hi [@Jason Finke](/t5/user/viewprofilepage/user-id/5402631),

Welcome to Atlassian Community!

In its simplicity your automation would look something like this:

![Screenshot 2024-07-11 at 2.17.00?PM.png](https://community.atlassian.com/t5/image/serverpage/image-id/335105i99713E7233208EFD/image-dimensions/319x451?v=v2 "Screenshot 2024-07-11 at 2.17.00?PM.png")

In this example I am using the smart value compare because my sandbox do not have a product category field, but you can change the if to use the issue field condition instead.

comments: author: Jason Finke
body: Thank you!

How could one add a sun category as well.

For example if my product category was "software" and the subcategory was "Office365".

Would that be {{isue.product.category}} equals Software - Office365?


author: Mikael Sandberg
body: Is the Product category a cascading select field? If that is the case then you would have to parse out the values selected, because if you just use {{issue.product category}} it would return something like this:

```
{self=https://your-instance.atlassian.net/rest/api/2/customFieldOption/10028, value=Hardware, id=10028, child={self=https://your-instance.atlassian.net/rest/api/2/customFieldOption/10029, value=CPD, id=10029}}
```

To get the parent value and the child value you would have to use {{issue.product category.value}} and {{issue.product category.child.value}}.


author: Christopher Yen
body: Hi Jason,

From the automation rule builder you can do this  

* Trigger: Issue Created
  * or Issue Updated if the product categorization is filled out after creation
* IF or ELSE: Add condition options
* Add issue field conditions, select your product categorization field and value
* Then - send email

and you continue this for each product categorization that has a different recipient

An example of how we route our tickets to different teams but you'll be using send email instead of edit issue fields action.

![2024-07-11 14_20_32-Window.png](https://community.atlassian.com/t5/image/serverpage/image-id/335109i2EC40E5D431B50D3/image-size/large?v=v2&px=999 "2024-07-11 14_20_32-Window.png")


Tags: cloud

jira-service-management

jira-service-management-cloud
My company does not support Slack, microsoft and zoom, how can I remove the options in the console?
Asked by Victor Fernandez Garcia:

hello

My company does not support Slack, Microsoft and zoom, how can I remove the options in the console?  

<br />

<br />

<br />


Answers:
author: Mikael Sandberg
body: Hi [@Victor Fernandez Garcia](/t5/user/viewprofilepage/user-id/5442796),

Welcome to Atlassian Community!

Could you give a bit more context on what you are trying to do? Where do you want to remove Slack, Teams and Zoom? From a select field on a request type?

comments: author: Victor Fernandez Garcia
body: Hi sir, sure  
When I open an incident or request in the console on the right side there are all fields listed like Assignee, Request type, priority etc

<br />

also there are fields like   
Slack - Add Channel  
Microsoft Teams - Connect Microsoft Teams  
Zoom - Connect account  
Conference - Start call  

<br />

<br />

<br />


author: Mikael Sandberg
body: Okay, if you go to Project settings \> Request types and then under the Incident category select the request type you want to change. The go to the issue view tab and you will see those fields listed, just drag those fields to the right and they will be removed from the layout.

![Screenshot 2024-07-11 at 2.41.34?PM.png](https://community.atlassian.com/t5/image/serverpage/image-id/335110i1C11A11C9870D545/image-size/large?v=v2&px=999 "Screenshot 2024-07-11 at 2.41.34?PM.png")


author: Victor Fernandez Garcia
body: wow, thank you sir, I have removed those... I appreciate your time and answer


Tags: cloud

jira-service-management

jira-service-management-cloud