youngmon/atlassian-qna huggingface dataset:
How can I configure a user so that its password never expires?
Asked by ian alexander:

How can I configure a user so that its password never expires?


Answers:
author: AnnWorley
body: You cannot do that for an individual user but you can turn off password expiry for the whole Directory the user is in by setting Days until password expiry to 0:

![Screen Shot 2018-06-08 at 4.40.49 PM.png](https://community.atlassian.com/t5/image/serverpage/image-id/24194iFEEFACE719DFD8CD/image-size/large?v=v2&px=999 "Screen Shot 2018-06-08 at 4.40.49 PM.png")
Crowd Embedded Database Error
Asked by Ian Calaunan:

Crowd Installation does not continue because of this error

The following required plugins are not available: \[Crowd REST API, Atlassian Plugins - Web Resources - Implementation Plugin, Atlassian UI Plugin, Atlassian Soy - Plugin\]. See Crowd server logs for details. The setup process cannot continue until the problem has been solved. If you require further assistance, you can contact Atlassian support.


Answers:
author: Daniel Alonso
body: Even when the official documentation says that Java 10 and 11 is supported, I could make it work, I need to install Java JDK 8 to make it work on RHEL 7.


author: Bruno Vincent
body: Hi [@Ian Calaunan](/t5/user/viewprofilepage/user-id/251721)

I guess your Crowd server is using an unsupported JDK (maybe JDK 10?). Please make sure to install JDK 8 (which is the only supported JDK as of today) and set a JAVA_HOME environment variable pointing to it.
crowd session timeout frequently
Asked by Zibo Wu:

I am using a L4 VIP to route user request to a crowd server.

That is <http://crowd.domainname.inc/> -\> <http://servername.domainname.inc:8089/crowd/>

But when I access this new address, crowd frequently redirects me to crowd login page.

Even I relogined, crowd will still redirects. And it looks like my session timeout.


Answers:
author: Matt Wilks
body: I know this is 4 years old...but I came across this question with the same issue so maybe someone else will benefit.   
My Fix: Log into Crowd Console (check "Remember Me") \> Session Configuration \> Uncheck the "Require consistent client IP address". I'm in a unique situation on my instance (running on RKE2 behind an AWS ALB), so it may not apply to everyone.

Hope this helps someone.
Crowd + NGINX + SSL
Asked by Sinan Polat:

I have set up Crowd + NGINX for reverse proxy and doing SSL.

Nginx:

```
server {
 listen 80;
 server_name crowd.cloud.domain.nl;
 return 301 https://$server_name$request_uri;
}

server {
 listen 443 ssl;
 server_name crowd.cloud.domain.nl;
 ssl_certificate /etc/pki/tls/certs/cloud.domain.nl.crt;
 ssl_certificate_key /etc/pki/tls/private/cloud.domain.nl.key;
 location / {
 proxy_pass http://localhost:8095;
 proxy_set_header Host $host;
 proxy_set_header X-Real-IP $remote_addr;
 proxy_set_header X-Forwarded-for $remote_addr;
 port_in_redirect off;
 proxy_redirect http://localhost:8095 https://crowd.cloud.domain.nl/;
 }
}
```

server.xml:

```
?<Connector URIEncoding="UTF-8" acceptCount="100" compressableMimeType="text/html,text/xml,application/xml,text/plain,text/css,application/json,application/javascript,application/x-javascript" compression="on" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8095" redirectPort="8443" sendReasonPhrase="true" useBodyEncodingForURI="true" proxyName="crowd.cloud.domain.nl" proxyPort="443" scheme="https"/>

 <Engine defaultHost="localhost" name="Catalina">
 <Host appBase="webapps" autoDeploy="true" name="localhost" unpackWARs="true">
 <Context path="" docBase="../../crowd-webapp" debug="0">
 <Manager pathname="" />
 </Context>
 </Host>

 </Engine>
?
```

build.properties:

```
# Modify the attributes of this file to quickly adjust the deployment values of Crowd.

# The Hibernate database dialect to use. See https://confluence.atlassian.com/display/CROWD/Connecting+Crowd+to+a+Database
hibernate.dialect=org.hibernate.dialect.HSQLDialect

# The http port you wish to run crowd from, ie: http://localhost:8095/crowd
crowd.tomcat.connector.port=8095

# Tomcat requires a unique port for shutdown
crowd.tomcat.shutdown.port=8020

# Crowd context root
crowd.url=http://localhost:8095/

# Demo context root
demo.url=http://localhost:8095/demo

# OpenID server context root
openidserver.url=http://localhost:8095/openidserver
?
```

I can access the login page using HTTPS, but when I try to log in I am getting in a loop.

What is wrong with my configuration? Thanks!


Answers:
author: Sinan Polat
body: I found the answer myself: <https://confluence.atlassian.com/crowdkb/setting-up-crowd-behind-nginx-causes-a-redirect-loop-724404195.html>

comments: author: Alan Holt
body: I'm running into the exact same issue, only with httpd with reverse proxy instead of nginx.


author: Alan Holt
body: For anyone running into this same problem with apache (httpd), I was able to solve it with the following changes:  

In your vhost file:

```

ProxyRequests off
ProxyPass / http://127.0.0.1:8095/
ProxyPassReverse / http://127.0.0.1:8095/
ProxyPreserveHost on?
```

In your server.xml file, add:

```
address="127.0.0.1"
```

to your Connector.


Tags: nginx

ssl
licensing issue
Asked by Thomas Niemann:

As a Software vendor we have purchased 50 user starter Edition to test crowd

We?ve connected it to our active Directory, and now we cannot Access the System as we have more than 50 AD Users.

We would disconnect the ad, but we cannot enter the configuration:

"Your current license does not permit the number of users you have configured in Crowd, please upgrade to a new license, or contact Atlassian sales support."

What can we to to enter the Software und unconfigure the ad?


Answers:
author: Thomas Niemann
body: Reinstalled - "solved"

Strange Problem...

comments: author: Bruno Vincent
body: Yes, it is, definitely. Did you reconfigure everything or did you import an XML backup (in which case that would be incredibly strange!) ?


author: Thomas Niemann
body: ok, i?ve received a eval licence. The strange Thing is, that now i cannot Login with the admin user as it says "Invalid Login". But the Password wasn?t changed...

Please help again!

comments: author: Bruno Vincent
body: Have you tried to clear your cookies or restart your browser?


author: Thomas Niemann
body: yes, i even used a different browser, no cuccess

i used this statement

select \* from cwd_user u  
join cwd_membership m on u.id=m.child_id join cwd_group g on m.parent_id=g.id  
join cwd_directory d on d.id=g.directory_id

and i see the field active = T - is this right?


author: Thomas Niemann
body: select \* from cwd_user u  
join cwd_membership m on u.id=m.child_id join cwd_group g on m.parent_id=g.id  
join cwd_directory d on d.id=g.directory_id  
where g.group_name = 'crowd-administrators' and d.directory_type='INTERNAL';

(last line was missing)


author: Bruno Vincent
body: Looks good.

Anything in *apache-tomcat/logs/catalina.out* or *\<crowd.home\>/logs/atlassian-crowd.log* ?


author: Thomas Niemann
body: 2018-06-07 17:08:29,553 http-nio-8095-exec-17 INFO \[crowd.console.action.Login\] The user: 'niemann.thomas' attempted to login with an inactive account

But it is (the only) admin account. Seems it was deactivated. i?ve tried to set the user from T to F but it does not work...


author: Bruno Vincent
body: Is the 'crowd-administrators' group active as well? (you should get two 'ACTIVE' fields when running the previous SQL query, the second one actually being the crowd admin group's state)


author: Thomas Niemann
body: actueally i got three times Active, but the log still says

...attempted to login with an inactive account


author: Bruno Vincent
body: What if you create another admin account? (step 4 of [this procedure](https://confluence.atlassian.com/crowdkb/restoring-passwords-to-recover-admin-user-rights-283642653.html))


author: Thomas Niemann
body: same here. i?ve followed the steps, but admin is an invalid Login... :-(


author: Bruno Vincent
body: Hi [@Thomas Niemann](/t5/user/viewprofilepage/user-id/1329387)

You just need to go to my.atlassian.com and generate an evaluation license for unlimited users as explained on this page: <https://confluence.atlassian.com/crowdkb/users-are-unable-to-log-in-after-updating-the-license-223223576.html>


Tags: user
Is there a current list of Crowd build and version numbers?
Asked by Brett Bailey:

I'm attempting to resolve an issue that is similar to this:

<https://community.atlassian.com/t5/Crowd-questions/Crowd-temporarily-unavailable-status/qaq-p/779277>

But I can't seem to find documentation for more recent build numbers. I'm needing the build number for crowd version 3.2.1

Atlassian has a page that I found, but it seems pretty outdated:

<https://confluence.atlassian.com/crowdkb/crowd-build-and-version-numbers-reference-703401603.html>

Can anyone help me out with this?


Answers:
author: Thomas Schlegel
body: Hi Brett,

look here:

<https://confluence.atlassian.com/crowd/crowd-release-notes-199094.html>
Unable to login into bamboo
Asked by Karl Steadman:

We are using bamboo 6.3.2 and installed and configured crowd. I am unable to login into bamboo and see this line in the atlassian-bamboo.log Failure authenticating with BASIC 'Crowd REST Service'. In Crowd I added the bamboo application and typed in the password. Can I verify I have the correct password in the MySQL database? I did change the crowd.properties file in the directoryapplication-data/bamboo/xml-data/configuration to reflect the proper password, but I am not sure if that file is used anymore. The authentication test in Crowd passes for my username. Also I don't know how to disable the Crowd integration, at least temporarily, so I can sign into bamboo.

Thank, Karl


Answers:
author: Robert W
body: Karl,

You can restore Bamboo to use its internal user directory by following the instructions in the **Workaround** section of the following article:

[Bamboo lost connection to external user directory.](https://confluence.atlassian.com/bamkb/bamboo-lost-connection-to-the-external-user-directory-preventing-users-from-logging-in-678691207.html|https://confluence.atlassian.com/bamkb/bamboo-lost-connection-to-the-external-user-directory-preventing-users-from-logging-in-678691207.html)

With regards to not being able to log on with your CROWD directory; did you create a 'bamboo-admin' group within CROWD?

Please see full instructions here:

[Integrating Crowd with Atlassian Bamboo.](https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-bamboo-198785.html|https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-bamboo-198785.html)

comments: author: Karl Steadman
body: Thanks. The workaround section did allow me to log back into Bamboo. I did setup a bamboo-admin group. Once logged into bamboo I selected 'Users and groups from JIRA or Crowd' within 'User repositories' versus 'custom user repository'. I am not sure if I had a problem with the application name being case sensitive.

My next problem is getting SSO to function.
JSM can't even update a dropdown?
Asked by Steven Cavanagh:

Do I have this right? Using the mighty Jira, world conquering market leader, dropdowns can only contain static values entered at design time.

You can't fill it in response to a user's role, or an entry in a text box (yeah I know about cascading dropdowns. That's a small percentage of use cases).

You can't fill it from an external source, like an API.

Hell, you can't even fill it from an INternal source, like a lookup table.

So if the user has to pick from a list of periodically changing data, what are they supposed to do?


Answers:
author: Dave Mathijs
body: Hi [@Steven Cavanagh](/t5/user/viewprofilepage/user-id/5265963) if any user can add any value to a list, that list could grow exponentially in time. In that case, you might wonder whether it's user-friendly to choose from a list of dozens of even hundreds of options... Then you might be looking for other solutions a field type:

* Text field
* Labels field
* Assets field where user actually can add new values

What is your definition of "periodically changing data"? Daily, weekly, monthly?


author: Kevin Patterson
body: Hi [@Steven Cavanagh](/t5/user/viewprofilepage/user-id/5265963) ,

You're not alone in facing challenges as an admin or developer on Atlassian Cloud, especially when dealing with use cases that require dynamic data in fields sourced from lookup tables or external applications. As [@Dave Mathijs](/t5/user/viewprofilepage/user-id/2662590) mentioned, one viable workaround for these limitations is to repurpose Atlassian Assets as internal lookup tables. I use this approach in all of my JSM Premium Implementation projects for common configurations like Impact/Urgency/Priority matrix, Change Risk Scoring, etc.

By configuring custom fields with the appropriate AQL (Assets Query Language), you can populate the necessary objects based on specific criteria making it effective as a lookup table. Additionally, setting up import schedules to run a few times a day can help keep your schema objects updated with the latest data from external sources.

If you decide to implement this approach, I strongly recommend reviewing Atlassian's guidance and try adhering to these recommended limits documented on this resource page: <https://support.atlassian.com/jira-service-management-cloud/docs/recommended-data-structure-for-an-assets-schema/> . There is always a risk that Atlassian might impose stricter limits on object relationships and maximum cardinality in the future replacing recommended limits with actual limits, which could impact the effectiveness of this workaround for lookup Tables.


Tags: cloud

jira-service-management

jira-service-management-cloud
Wanting to use an automation rule to update a permission field
Asked by Vaughan Rivett:

Initially, my goal is as follows: When an individual is added to an issue in the Customer Portal under "Shared with," my intention is for them to gain access to the ticket.

At present, the permissions are configured to limit access to the ticket. However, once an individual's name is entered in the portal, they should be granted access to the issue. I have been unable to find a method to assign a permission to "Shared with."

Consequently, I have established a new custom field intended to duplicate the information from "Shared with." When I manually input someone's name into this new custom field, they receive the appropriate permissions. Yet, the rule I have set up fails to achieve the necessary outcome. Below is my JSON code.

    {  "fields": {    "customfield_10301": [      {        "name": "{{issue.requestParticipants.name}}"      }    ]  }}


Answers:
author: Vaughan Rivett
body: It appears that the field containing the data is "sharedWith".

Below is an update to my JSON, which is still not populating my custom field:

<br />

{  
"fields": {  
"customfield_10301": \[  
{  
"name": "{{issue.sharedWith}}"  
}  
\]  
}  
}  

Another approach I have considered is whether the field types are the same. My custom field is a multi-user picker. I am unable to determine the field type of "sharedWith".


Tags: cloud

jira-service-management

jira-service-management-cloud
Setup rule to create an alert if a ticket is older than 30 mins in Operations (formerly Opsgenie)
Asked by Chris Walters:

Hi Atlassian Community,

I hope you are all doing well.

We have recently moved our Opsgenie into Jira Service Management:

<https://support.atlassian.com/jira-service-management-cloud/docs/start-shifting-from-opsgenie-to-jira-service-management/>

I currently have a Team setup, and I have synced a Jira Service Management project to my Operations within this Team:

<https://support.atlassian.com/jira-service-management-cloud/docs/what-is-sync/>

I am trying setup a rule to create an alert if a ticket in my Jira Service Management project is older than 30 minutes:

![Alert.png](/t5/image/serverpage/image-id/343720iF594A19FB5592B6F/image-size/large?v=v2&px=999 "Alert.png")

The alert isn't getting generated, so I suspect I haven't configured this correctly.

If anyone can advise on how I can achieve this please, that would be great.  

Thank you,

Chris


Answers:
author: Anusha A
body: Hi Chris,

Thank you for reaching out to Atlassian Community!

With the help of JSM automation, you can create an alert in Opsgenie. However, the [Sync](https://support.atlassian.com/jira-service-management-cloud/docs/what-is-sync/#:~:text=Sync%20is%20the%20most%20efficient,or%20constant%20updates%20of%20fields) feature currently does not allow for specifying a condition based on the last updated time within the last 30 minutes. Below is a step-by-step guide on how to add a scheduled trigger.

* **Add a Scheduled Trigger**: Begin by setting up a scheduled trigger in your automation rules.
* **Add Branching Action** : In the branching section, select the option for JQL. Use the following JQL query to filter issues:  

  `project = "subtask event" AND updated <= "-30m"`
* **Add Another Action**: Next, add an action to send a web request. This action will be used to create an alert in JSM operations.
* **Use the API for Creating Alerts** : You can utilize the following API endpoint to create an alert within the "send web request" action: [Create Alert API Documentation](https://developer.atlassian.com/cloud/jira/service-desk-ops/rest/v2/api-group-alerts/#api-v1-alerts-pos).

<br />

By following these steps, you can effectively create an alert in Opsgenie based on the specified conditions, If you have any questions or need further assistance with the setup, feel free to ask!  
Regards,  
Anusha A


Tags: cloud

jira-service-management

jira-service-management-cloud
Adjust priority if a ?critical? CI is linked
Asked by Junie Teudjeu:

Automation rules(new Condition) for Adjust priority if a "critical" CI is linked


Answers:
author: Joseph Chung Yin
body: [@Junie Teudjeu](/t5/user/viewprofilepage/user-id/5488791)

Welcome to the community. Are you referring to "CI" as a part of Assets objects? Please provide more clarification and info, so we can assist you further.

If so, you can take a look at this reference link on how to use smart value syntax to pull Assets objects references into your automation rule, then you can create a condition to compare two values and change your issue's priority value -

<https://support.atlassian.com/cloud-automation/docs/jira-smart-values-insight/>

<https://support.atlassian.com/cloud-automation/docs/jira-automation-conditions/#--smart-values---condition>

Hope this helps and look forward to your information.

Best, Joseph Chung Yin


author: Michael Melton
body: I think more details would be required to help with what you are trying to accomplish.


Tags: jira-service-management

jira-service-management-unknown-hosting-type

unknown-hosting-type
Project Automation How to stop Scheduled job for Sending email if JQL not filter out any Issues
Asked by Ravilal Gunaratne:

HI Mates,

I am running a schedule automation job daily one time to send a report for JQL example

"Status" = Fail AND updated \>= -7d

I have selected following options

Only include issues that have changed since the last time this rule executed and Process all issues produced by this trigger in bulk options.

I am getting one email daily with all the Issues.

But I dont want to receive the email if there are no Issues filted by above JQL criteria.

Regards,

Ravi.


Answers:
author: vikram
body: Hi [@Ravilal Gunaratne](/t5/user/viewprofilepage/user-id/4036071)

Welcome to Atlassian Community.

You can use compare condition

![compare_condition.png](https://community.atlassian.com/t5/image/serverpage/image-id/343693iC817F08FE8929B8A/image-dimensions/353x161?v=v2 "compare_condition.png")

vikram P


Tags: jira-service-desk-data-center

jira-service-management

jira-service-management-data-center

jira-service-management-server

server
creation of a Jira service management instance unsuccessful
Asked by O_ Mega:

Dear all,

My attenpts to create an instance of Jira service management has failed with the following error:

(Issue ID for Atlassian use: cb0ee9526a754b4798bd5f71f44dd00a)

I tried several times with the same result.

Could someone help me move forward with the creation of my instance on Jira ?

Thank you

Omar


Answers:
author: vikram
body: Hi [@O_ Mega](/t5/user/viewprofilepage/user-id/5575934)

Welcome to Atlassian Community.

Please reach out / raise ticket to an Atlassian Support (from below URL) for your case, as it can be resolved by Atlassian Team only.

Your issue might be a region where Atlassian is not supported.

<https://support.atlassian.com/>

Vikram P


Tags: jira-service-desk-cloud

jira-service-management

jira-service-management-cloud
Admin user login is suppressed. How to contact support
Asked by Hari Sankara:

Pls guide us how to resolve


Answers:
author: Rilwan Ahmed
body: Hi [@Hari Sankara](/t5/user/viewprofilepage/user-id/5575915) ,

Welcome to the community !!

Did you try to reset password from <https://admin.atlassian.com/> --\> "can't log in" option ?

If its still not working, you can contact Atlassian support in <https://support.atlassian.com/contact/#/>


author: Joseph Chung Yin
body: [@Hari Sankara](/t5/user/viewprofilepage/user-id/5575915)

Welcome to the community. You can contact support by <https://support.atlassian.com>

Hope this helps.

Best, Joseph Chung Yin


Tags: cloud

jira-service-management

jira-service-management-cloud
My Colleague is admin for JSM Project. But he could not access
Asked by Hari Sankara:

My Team mate who is admin to Atlassian Account at admin level. Now his account is blocked.

What is the problem. It is urgent


Answers:
author: Rilwan Ahmed
body: Hi [@Hari Sankara](/t5/user/viewprofilepage/user-id/5575915) ,'

Welcome to the community !!

1. Ask your colleague to reset password from <https://admin.atlassian.com/> --\> "can't log in" option ?
2. If you know the organization admin, they will be able to re-enable the account from [admin.atlassian.com](https://admin.atlassian.com/). From there, click on **Directory \> Managed Accounts** . Click on the account, and then click **Reactivate account** on the top right. If you do not have these options, then you are not the admin for the organization.
3. If its still not working, you can contact Atlassian support in <https://support.atlassian.com/contact/#/>


author: Lisa Forstberg
body: Hi [@Hari Sankara](/t5/user/viewprofilepage/user-id/5575915) ,

Welcome to the community!

Not entirely sure if your team mate can log in to Jira or not.

If your team mate are not allowed to log into Jira at all:

* check the user status here cog \> User management \> Directory (find the user and perform actions under the three dots

![Screenshot 2024-08-25 at 09.11.18.png](https://community.atlassian.com/t5/image/serverpage/image-id/343663i918CA5B48B793470/image-size/large?v=v2&px=999 "Screenshot 2024-08-25 at 09.11.18.png")

If your team mate can log into Jira but can't access a specific Jira SM project:

* Check first if your team mate has a valid Jira Service Management License (agent license).
* Check the permission scheme and people settings to ensure he has the permission to the specific project

best of luck

Lisa


Tags: cloud

jira-service-management

jira-service-management-cloud