youngmon/atlassian-qna huggingface dataset:
Jira/Confluence direct login very slow
Asked by C. Faysal:

Hi folks..

i am currently evaluatiing for crowd in our company.

i set up a crowd directory connected to a LDAP to read company employees accounts.

Jira/Confluence added to crowd and all works nice...SSO and applinking and all that...perfect.

Scenario 1)

loggin in directly in crowd...i am in immediately...and can switch to confluence or jira without any latency

Scenario 2)

if i log in to jira or confluence instead of crowd...it takes loooooong time and sometimes i get an error at the end saying that i am not permitted to login. after clicking log in again i am in.

what setting is to change to allow flawless log in to any of the tool...crowd, jira or confluence please?

![](../../../upfiles/Screen_Shot_2013-10-09_at_6.14.59_PM.png)


Answers:
author: C. Faysal
body: problem solved.

i switched from a delegated configuration to a connector.

works well now

comments: author: Vladimir Vasilyev
body: Hello, it seems I am experiencing the same problem. Can you please tell what do you mean by this switch? How did you do that?


author: C. Faysal
body: hmmm as i wrote...

i used a different type of directory....chose AD connector instead delegated


author: Vladimir Vasilyev
body: Yes, all users report the same behavior. Strange thing is that it appeared only after upgrade from Confluence 3.5. Before the upgrade I cloned the instance to another server and I don't have any log in related issues there.


author: NathanG
body: Have you tried using a different user and seeing if the problem is user specific?


author: Vladimir Vasilyev
body: Unfortunately I already use AD connector and have the same problem as you have described except I don't receive any errors, but have to wait for 15 seconds avg to log in. Anyway thanks for your answer.


author: Harry Chan
body: Hi, are you seeing any errors in the logs? How far away are Crowd and JIRA/Confluence? Is it on the same server? I would first confirm that there are no network issues between the 2 applications. They could be timing out.

The rest are pretty standard and should just work unless you see errors in the logs.

comments: author: C. Faysal
body: the 3 apps are located on the same host.

only the ldap isn't


Tags: crowd-administration
How can I control "firstname lastname" or "lastname, firstname" representations?
Asked by Rob Wiskow:

We have Crowd set up to delegate authentication to Active Directory. For some reason though, users come back with inconsistent representations of their names. For some users it's "John Doe", other users "Doe, Jane". I can see no difference on the user entry in Crowd.

I think the difference happens in whether I add a user to crowd, or whether the user is automatically added when they try to log in and a user doesn't yet exist.


Answers:
author: Tiago Comasseto
body: Hi Rob, your suspicious may be right. The name of the user is retrieved from the LDAP upon the creation of the user in case it doesn't exist yet.

Crowd will retrieve this information from the LDAP attribute that is defined into the field *User Display Name Attribute* of your [LDAP directory in Crowd](https://confluence.atlassian.com/display/CROWD026/Configuring+a+Delegated+Authentication+Directory?src=search).

To the case that the user is manually created, you can define the name of the user as you wish, which can be different the the value in your LDAP.

In case you want to always use the value in your LDAP, you can mark the option *Synchronise User Details*, this will then update the name of the user with the information from your LDAP as soon as the user perform the login.

I hope it helpes

Cheers


Tags: crowd-administration
Where to Deploy Crowd - Cloud or Local
Asked by Chris Wood:

Say you had Confluence installed in the cloud and wanted to integrate with Crowd and an active directory LDAP at a remote site.

What is the recommended deployment for performance/security?

1) Confluence (Cloud) -\> Crowd (Cloud)-\> LDAP connector (ssl option) to AD (Remote)

2) Confluence (Cloud) -\> Crowd (Remote) with SSL in tomcat, LDAP connector to AD (Remote)

Thank you


Answers:
author: Tiago Comasseto
body: Hi Chris,

Since the LDAP is remote and, even using Crowd, all password authentication requests will be forwarded to your LDAP, the performance shouldn'd be much different between both options.

Even so I would go with opition one, because in case the LDAP communication fails for any reason, the users with a valid token in Crowd will still be able to access Confluence for some time.

Cheers

comments: author: Harry Chan
body: Agrees with going with Option 1. Crowd being "local" to Confluence also means Crowd's caching of LDAP will help with performance.


author: Chris Wood
body: Thanks Tiago and Harry - will stage option 1.


Tags: crowd-administration
cannot login into crowd since update 2.6.5
Asked by chrisi:

i get the errormessage "Your request could not be processed because a required security token was not present in the request. You may need to re-submit the form or reload the page." - no matter what browser i use (chrome, ff, ie, maxthon). i read somewhere that clearing the browser-cache will help but that wasn't a success either.


Answers:
author: chrisi
body: after installing 2.7 everything works fine again.


author: chrisi
body: there is nothing in the crowd-log, instead i have the following lines in the logs of the apache webserver that is configured in front of my crowd instance (connected via mod_jk):

\[05/Sep/2013:16:20:55 +0200\] "POST /console/j_security_check HTTP/1.1" 302 549 "https://crowd.gtidev.net/console/login.action?error=true" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.79 Safari/535.11"

\[05/Sep/2013:16:20:55 +0200\] "GET /console/login.action?error=true HTTP/1.1" 200 2058 "https://crowd.gtidev.net/console/login.action?error=true" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.79 Safari/535.11"


author: Tiago Comasseto
body: Chris, what does Crowd's log say when you attempt to login?
Win 2008 AD LDAP DN configuration
Asked by OneThousand:

I have a win 2008 AD Domain called 'mydomain.us' - CROWD Server and DC are on same subnet. What will be the BASEDN to use - tried ou=10.211.55.7,dc=10.211.55.0,dc=local

When i use cn=administrator for User and the correct password - i get this error

here was a problem communicating with the LDAP server: \[LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1771\]; nested exception is javax.naming.AuthenticationException: \[LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903AA, comment: AcceptSecurityContext error, data 525, v1771\]


Answers:
author: Zul NS _Atlassian_
body: From my understanding, the Base DN should be configured as dc=mydomain,dc=us. Could you try that?

As for the LDAP Error Code 49, please see [this KB article](https://confluence.atlassian.com/display/CONFKB/LDAP+Error+Code+49) regarding it. According to the KB article, the error is saying that the user *cn=administrator* is not found in the Base DN you've specified.


author: OneThousand
body: Figure its pretty easy to get the DN from AD via command prompt, using the following "dsquery"

\> dsquery user -name administrator

'CN=Administrator,CN=Users,DC=mycircleofcare,DC=us'

comments: author: Zul NS _Atlassian_
body: Great to know. I'm not very familiar with AD, the information quite useful to me.

May I know what is the current status of the configuration? Keep us updated.


author: OneThousand
body: This works- thanks

BaseDN : cn=Users,dc=mydomain,dc=us

UserName : cn=Administrator,cn=Users,dc=mydomain,dc=us


Tags: ldap
Getting special "system" user fields from Crowd (updated date, created date, etc.) via REST API
Asked by Ryan Jacobs:

I can use special "system" user fields, such as "Updated Data" and "Created Date", when constructing REST-based searches via the Crowd Query Language (e.g. get a list of users who were updated after July). However, I cannot seem to find a way to simply get these raw values for any specific user via the REST api.

The REST user resoruce offers a way to get most user fields with a request like:

### GET `/user?username=USERNAME&expand=attributes` {#toc-hId-1426053212}

<br />

But nowhere in the results that come back can I find values for "Updated Data" and "Created Date" or anything like that. I'm know it's possible to get these values via direct SQL-based queires on the Crowd database, but we are specifically looking for a "portable" way to get this info via web services.


Answers:
author: Tiago Comasseto
body: Hi Ryan,

Indeed this information is only available into the database. I took the liberty of creating this [improvement request](https://jira.atlassian.com/browse/CWD-3523) to include this information into Crowd UI and via Rest API in a future release.

Cheers

comments: author: Ryan Jacobs
body: Excellent, thanks for for that clarificationa and for the improvemetn request. I think this would be a very handy feature addition.

Cheers!


Tags: crowd-administration

crowd-integration
Merge two Crowd databases into one
Asked by Glenn Mason:

Hi,

I need to merge two Crowd databases into one. I was wondering if backup from CrowdB and restore in CrowdA would be the correct approach?

There only duplication will be with groups and users. I don't expect the duplicate users to be a problem as they are in different directories.

But what about the duplicate groups? Will Crowd be smart enough to handle the groups by group name or will it fail because they are linked by group database key?

I'm asking because I can't get the backup to work correctly (won't create) and I'm running out of time. I might just have to write database extracts, but would prefer not to.

Any help on best way to merge two crowd db's would be appreciated.

Thanks,

Glenn


Answers:
author: Tiago Comasseto
body: Hi Glenn,

Restoring the backup from one Crowd instance to another will overwrite the data. The only feasible way to do what you want is using user/group import as in this [documentation](https://confluence.atlassian.com/display/CROWD/Importing+Users+and+Groups+into+a+Directory?src=search). I believe CSV import is the best option for you.

Cheers


Tags: crowd-administration
Sorry, your userid is required to answer a CAPTCHA question correctly.
Asked by Neeta Dubey:

I am setup a user with specific username and password however when i try to login as that user it gives the below message. I tested a week back and that time i was able to login.Application is ontrak2.0crowd is used to add the user


Answers:
author: Tiago Comasseto
body: Hi Neeta,

Is this ontrak2.0 a [custom application](https://confluence.atlassian.com/display/CROWD/Integrating+Crowd+with+a+Custom+Application) that is integrated to Crowd? If so, the first thing I'd suggest to test is the login to Crowd Application as in this [page](https://confluence.atlassian.com/display/CROWD/Testing+a+User%27s+Login+to+an+Application?src=search).

I hope it helps.

Cheers

comments: author: Neeta Dubey
body: Yes it is integrated with crowd. However i am unable to login with the specified. Credentials in crowd. I can login as administrator on crowd.


author: Neeta Dubey
body: however it was a temp issue and then user was able to login fine automatically.
[Crowd] Manually load ActiveDirectory users
Asked by Werner Mo?ner:

Hi,

I am currently setting up a Crowd Server that uses our companies Active Directory for authentication, but want to use Crowd for authorization in Jira, Confluence, Jenkins and SVN.

Unfortunately there are no ActiveDirectory Groups I could use to import users automatically, so I have to manually add AD users to Groups I created in Crowd. In order to be able to do this, I have ask every user to try to login to Jira in order to have Crowd load the user and enable me to assign that user to a given group. Unfortunately this login fails as the user is not yet assigned to any of the groups that are allowed to use Jira.

Is there a way to manually load an account from AD, so I could add all users to Crowd and setup the goups before a user tries to login? Importing user seems to fail because of different password encoding (I selected the Atlassian-Password encoding, because the setup told me that otherwise it would not work with other Atlassian products)

Chris


Answers:
author: Tiago Comasseto
body: Hi Werner,

In Crowd you have the option of import users from an CSV file, you can see details of this process in this [link](https://confluence.atlassian.com/display/CROWD/Importing+Users+from+CSV+Files), if you're able to export the list of AD users, this option may work for you.

Let me know if it helps.

Cheers


Tags: active-directory

crowd-administration

import

user
How can I populate fields in Crowd when a user doesn't have a field value in LDAP / Active Directory?
Asked by Ali:

Our directory doesn't supply a valid e-mail address, but I'd like to create one automatically when Crowd synchronizes with AD. It would simple append a suffix to the user's ID. How would I go about doing this?


Answers:
author: JustinK
body: You would actually have to implement/extend your own version of the [com.atlassian.crowd.directory.ldap.mapperUserContextMapper](https://docs.atlassian.com/atlassian-crowd/latest/com/atlassian/crowd/directory/ldap/mapper/UserContextMapper.html), and then change the SpringLdapConnector to use your ContextMapper on its call for the [getUserContextMapper()](https://docs.atlassian.com/atlassian-crowd/latest/com/atlassian/crowd/directory/SpringLDAPConnector.html#getUserContextMapper()).

So it isn't exactly 'easy' at present at the moment to provide this type of feature.

We have pondered with allowing users to provide 'programable attributes' for directory configuration:

eg: emailAddress = ${userName}@mycompany.com

Where userName is the value pulled from the user for their name.

Cheers,

Justin

comments: author: Ali
body: The "programmable attributes" feature would be great! Of course, I'm new to Crowd admin, but it seems like a great feature. :-)


author: Bruna Griebeler
body: Hi Ali, the only thing I can think is to create a script that does that, or creating a plugin using Atlassian API. [Here is the documentation about the API](https://developer.atlassian.com/static/javadoc/embedded-crowd-api/2.3.4/reference/com/atlassian/crowd/embedded/api/User.html). There's a method called [getEmailAddress](https://developer.atlassian.com/static/javadoc/embedded-crowd-api/2.3.4/reference/com/atlassian/crowd/embedded/api/User.html#getEmailAddress%28%29)() that can be used.

Hope it helps!

Kind Regards

comments: author: Ali
body: Thanks, Bruna!

Would that be using, for example, [Script Runner](https://marketplace.atlassian.com/plugins/com.onresolve.jira.groovy.groovyrunner) for scripting using the Atlassian API? I don't see how to script anything but JIRA. I do see something about using the various REST APIs:

<https://developer.atlassian.com/display/CROWDDEV/Crowd+REST+APIs>


Tags: crowd-administration
How to reveal Assets in the banner
Asked by Julia R_:

We have created a sandbox and have granted users access to Assets via Schema Roles. The Assets option in the banner within the sandbox is not visible, however. How can this be revealed for the whole organization? We are not concerned about access to Assets because each Schema can be controlled via Roles.


Answers:
author: Tessa Tuteleers
body: Hi [@Julia R_](/t5/user/viewprofilepage/user-id/5525607) ,

Welcome to the community!

You mean the menu item "Assets" is not available for (some) users in your instance,but it is for others?

Can you confirm that those users have a Jira Service Management agent license? To have access to the object schema views, you need to have an agent license.

Please let me know if this is not the case, then we can go into it a little further!

- Tessa

comments: author: Julia R_
body: Thank you, [@Tessa Tuteleers](/t5/user/viewprofilepage/user-id/24152) ,  

Yes, the menu item "Assets". We assumed that, when creating the Sandbox, access would also be pulled over. It looks like that may not be the case, however (which does make sense at this point).  

Adding the 'Agent License' to my user(s) was the key!

Thank you for responding so quickly.

- Julia


Tags: assets

cloud

jira-service-management

jira-service-management-cloud

sandbox
Can I lock a Status for a group?
Asked by Patrick Costello:

On my workflow, once a team member changes the status of an issue to Denied, I don't want them to be able to change it to anything else, essentially locking at that status so it is escalated to a different team to work it through the rest of the work flow.

These are the status's being used and the way that and issue can be moved through them:

To Do -\> Processing

Processing -\> Denied or Paid Or On Hold

Denied -\> Appeal, Paid, Medical Records, Written Off

Paid -\> To Do or On Hold

Appeal -\> Paid or Written Off

Medical Records -\> Paid or Written Off

On Hold -\> To Do

Written Off


Answers:
author: Mikael Sandberg
body: Hi [@Patrick Costello](/t5/user/viewprofilepage/user-id/5551065),

Welcome to Atlassian Community!

Yes, this can be done by setting a condition on the transition in the workflow and it can be based on the user's permission in the project if they can transition to that status or not. If they do not have permissions to do it, they will not see the transition as an option. Check out this KB for more information about [advanced workflow configuration](https://support.atlassian.com/jira-cloud-administration/docs/configure-advanced-issue-workflows/#Conditions).

comments: author: Patrick Costello
body: Thanks Mikael, that looks like it will work if I use the "User Is In Group" condition, and add all the approved users to the group allowed to make the transition.


author: Barbara M_ Swift
body: Thank you for this.  
[Best Time to Visit Iceland](https://besttimetovisiticeland.com/)


Tags: cloud

jira-service-management

jira-service-management-cloud
assignee field
Asked by Toni Tabieros:

hello, i'm having an issue. in JSM, im trying to run a report that shows all of the issues my agents have been assigned to. when i pull this report, i see only names of resolved issues, not all issues they've ever been assigned to.

is it possible to find all of the issues someone ever had assigned to them?

or is it only possible to generate reports based on issues that have the agent is still assigned to when the report is run?

i hope this makes sense!!!


Answers:
author: Mikael Sandberg
body: Hi [@Toni Tabieros](/t5/user/viewprofilepage/user-id/5550794),

Welcome to Atlassian Community!

What report are you using? The Reports section in JSM allows you to create custom reports which can be used to report on open and resolved requests. You can also create your own filter that would show open and resolved requests per assignee/agent.

comments: author: Toni Tabieros
body: right now im using project created between date range and assigned to a specific person.

the issue im finding is that this only pulls up resolved tickets that the agent is still assigned to. it does not take into account that we may have assigned this agent something, then reassigned him something different. is there something that can allow me to do that?


author: Mikael Sandberg
body: The filters that [@Joseph Chung Yin](/t5/user/viewprofilepage/user-id/396739) included below should give you all issues no matter if they are resolved or not. If you only want unresolved issues then you can add resolution = Unresolved to the filters and that will do it.


author: Joseph Chung Yin
body: [@Toni Tabieros](/t5/user/viewprofilepage/user-id/5550794) -

Welcome to the community. In Jira/JSM, issue can be unassigned while it is resolved without assignee assignment.

So I would recommend that try out following JQL queries -

Finding all issues where there are no assignee -

project = xxx and assignee IS EMPTY

Finding all issues where they are assigned -

project = xxx and assignee IS NOT EMPTY

Hope this helps.

Best, Joseph Chung Yin


Tags: cloud

jira-service-management

jira-service-management-cloud
I want to edit the format on the email notifications the agents get for new ticket creation.
Asked by Hernan Ferraris:

I want to edit the format on the notifications the agent gets to show the body of the emails in the ticket description without the format getting all jumbled up. Currently the way our notification scheme is set up this is what shows up in the email for an agent letting them know a ticket was created. I need to be able to separate the body of the email from the signature. Any suggestions?

![Screenshot 2024-07-16 at 3.40.49?PM.png](/t5/image/serverpage/image-id/337475iEEC15753B84D537A/image-dimensions/10x7?v=v2 "Screenshot 2024-07-16 at 3.40.49?PM.png")![2024-07-24_06h03_26.png](https://community.atlassian.com/t5/image/serverpage/image-id/337628i632D8FD33E13CB11/image-dimensions/6x4?v=v2 "2024-07-24_06h03_26.png")


Answers:
author: Igor Medeiros - Modus Create
body: Hi [@Hernan Ferraris](/t5/user/viewprofilepage/user-id/5551032)

Just want to mention that our app [Notification Assistant for Jira](https://marketplace.atlassian.com/apps/1211069/notification-assistant-for-jira-email?hosting=cloud&tab=overview) is able to provide you with fully customizable templates.

Feel free to reach out if you'd like to know more about it.


author: Kai Becker
body: Hi [@Hernan Ferraris](/t5/user/viewprofilepage/user-id/5551032)

welcome to the community and thank you for your question.   
From what I can tell, there is no option to customise these email templates by default.  
And actually I think the real problem is the content of the description field.   

This is a pretty common problem in Jira. As far as I know there is no fix or feature for this in progress. But there are workarounds to tackle this: [https://jira.atlassian.com/browse/JRACLOUD-15129?focusedId=3429016\&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-3429016](https://jira.atlassian.com/browse/JRACLOUD-15129?focusedId=3429016&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-3429016)

If you still want to keep the content in the Description field but rather want to modify the email, you could disable the notification in the notification scheme and rather sent an extra one via Automation.

Hope these ideas help you a little bit.

comments: author: Hernan Ferraris
body: Good Morning Kai,

Thank you for the reply I will have to take a look at the thread you shared and see if I can implement your work around.


Tags: cloud

jira-service-management

jira-service-management-cloud