youngmon/atlassian-qna huggingface dataset:
Adding components for existing subscribers through Import
Asked by Yojana Joshi:

If I have existing subscribers in status page and I want to add one more component to their subscription in bulk using "Import" feature, do i have to specify all the component IDs they are/will be subscribed to? or just specifying the new component ID next to the email address enough for Status Page backend to understand that it has to append / add it to the existing subscription?


Answers:
author: Kevin Paulovkin
body: Yes, you will need to include All the component IDs they should be added to, including the ones they were already subscribed to. Using the bulk import feature overwrites, it doesn't append.

Unfortunately, when exporting Subscribers it's not in the same template that is needed to Import. It just has columns for each component, and "X"s indicating if the user is subscribed. This makes gathering all the component IDs more time consuming.

comments: author: Yojana Joshi
body: Alas! thanks a lot for the quick response Kevin!


Tags: cloud

statuspage-cloud
Would it be possible to translate status messages (status.description)?
Asked by Joshua Hazelaar:

We have a small indicator on our website that shows the current status by using teh followinG script:   

$(function(){  
var sp = new StatusPage.page({ page : "abcdefgh123" });  
sp.summary({  
success : function(data) {  
var status = data.status.indicator;  
var title = data.status.description;  
$( ".indicator" ).attr("title", title);  
$(".indicatorIcon").addClass(status);  
$( ".statusText" ).append(title);  
}  
});  
});

Would it somehow be possible to translate the status.description?


Answers:
author: Rafael Meira
body: [@Joshua Hazelaar](/t5/user/viewprofilepage/user-id/4055011)

We do offer an integration with a company called **Localize** , which we cover here: <https://help.statuspage.io/help/translate-your-page-with-localize-dot-js>   

Let me know if this is helpful or if you have any questions about this.
Can I send Crowd groups to Azure AD or AD ?
Asked by Paul Marachlian:

My users are on Azure AD.  
All users are synchronised from Azure AD to Crowd.

In Crowd, we created the groups, and are managing the accesses to different Atlassian products.

Since we want to migrate to Jira Cloud, I'm checking if there is a way to send my groups from Crowd to Azure AD, in order to get them back on Atlassian Access.

Knowing that not all my Atlassian products will be migrated to Cloud for now.

I don't want to make changes on groups on Crowd and Access every time.


Answers:
author: Craig Castle-Mead
body: Hi [@Paul Marachlian](/t5/user/viewprofilepage/user-id/4465098)

The Crowd connector for AzureAD is read only - so you cannot have groups/memberships sync from Atlassian ON-premise back to AzureAD, they can only flow from AzureAD to Crowd etc.

<https://confluence.atlassian.com/crowd/configuring-azure-active-directory-935372375.html>

CCM
crowd setup(CentOS 7)-Database configuration error
Asked by qiyuanlj:

Database configuration {#toc-hId--528036263}
--------------------------------------------

when I choose "Embedded" and click "continue", it says as follows:![1111.png](/t5/image/serverpage/image-id/211560iE958EF826DD2B74B/image-size/large?v=v2&px=999 "1111.png")

The following required plugins are not available: \[Atlassian OAuth Consumer Plugin, Applinks - Plugin - Core, Atlassian Crowd Synchronisation Feedback, Atlassian LESS Transformer Plugin, Atlassian OAuth Service Provider SAL SPI Implementation, Atlassian Crowd Frontend Plugin, Atlassian REST - Module Types, Crowd REST API, Crowd REST API - Application Management, Crowd SAL, Crowd Monitoring Plugin, jquery, Atlassian Plugins - Web Resources - Implementation Plugin, Atlassian UI Plugin, Atlassian Plugins - Web Resources REST, Atlassian Template Renderer API, Atlassian Template Renderer Velocity 1.6 Plugin, Crowd REST Admin API, Atlassian Soy - Plugin, Atlassian OAuth Consumer SAL SPI Implementation, Applinks - Plugin - OAuth, Atlassian OAuth Service Provider Plugin\]. See Crowd server logs for details. The setup process cannot continue until the problem has been solved. If you require further assistance, you can contact Atlassian support.


Answers:
author: Nic Brough -Adaptavist-
body: What do the logs say the problem is? They will contain more detailed errors, or a timeout message when trying to load the plugins.

The usual culprits are incorrect file permissions (look at the user running Crowd and the ownership of all the files in the install), the wrong version of Java in use, and not enough resources being granted (usually too small a Java heap size)
How can we change the Crowd DB host IP address
Asked by Peruma Chinnasamy:

Hi Team,

We are using crowd v4.4.2 DC. We changed the crowd DB host IP address. We took the backup from existing DB and restore the new DB host. But I would like to know if we need to change the DB host IP address in any crowd config file.

Thanks and Regards

Peruma.C


Answers:
author: Craig Castle-Mead
body: [@Peruma Chinnasamy](/t5/user/viewprofilepage/user-id/4879891)

Yes - to connect Crowd to a new database host, you'll need to update the crowd.cfg.xml file - look for the hibernate.connection.url line and update the JDBC string accordingly

Unless the DB username and password are the same, you'll also need to change the lines:

hibernate.connection.password  
and  
hibernate.connection.username

CCM
Which version of Crowd is compatible with 3.5.1 to make an upgrade?
Asked by Sofia Grunspan:

I need to upgrade Crown and i have 3.5.1 version, which version is compatible with this one?

Thanks


Answers:
author: Winderson Souza
body: Hi [@Sofia Grunspan](/t5/user/viewprofilepage/user-id/4996480) and welcome to the community.

I'd recommend you to upgrade to Crowd 5 directly, you can read instructions on how to do it at <https://confluence.atlassian.com/crowd/upgrading-crowd-22544441.html>, just make sure the database you're using is still compatible with that version.

comments: author: Craig Castle-Mead
body: [@Sofia Grunspan](/t5/user/viewprofilepage/user-id/4996480) - while the advice from Winderson about going from 3.5.1 to 5.x should be fine, with any upgrade I'd always suggest actioning on a non-production environment first, especially when you're doing a double-major version jump in one go. Read the release notes carefully as well as while the upgrade may "work" - there have been some changes to default behavior that could change how YOUR environment works.

CCM
Crowd database password encoding
Asked by ??????????? ?????:

Hello, can you tell how it can be posible:

I have Crowd 4.1.1 and when i looked in database in "crowd_application" table i see that in "credential" column i have some encripted string. But on that article  
<https://confluence.atlassian.com/crowd/password-encryption-1026041234.html>  
talk that encription available after 4.2 version


Answers:
author: Craig Castle-Mead
body: Hi,

I don't have a Crowd 4.1 instance I can check, but the docs do indicate that from Crowd 4.2 credentials will be automatically encrypted. Given you've got a key on 4.1.1, I was wondering if this meant that it was OPTIONAL on your version, but cannot find any docs to back this up.

If you're looking to encrypt the credentials, I'd suggest upgrading - and given 4.1.1 was release just over two years ago and there've been numerous security upgrades since, this should be done anyway.

CCM
implementing SSO with two domains
Asked by Gilbert Carroll:

Our set up is like this:

we own our small domain, like childdomain.com. It verifies.

but childdomain.com is part of a larger organization, called 'parentdomain.com'

'parentdomain.com' has its own jira instance, as does 'childdomain.com'

but all the employees at childdomain have an emailaddress of \[person\]@parentdomain.com.

So here is the question: childdomain is needing to implement sso against parentdomain addresses. Can anyone advise what level we need to verify the parentdomain? The parent company already has validated it.


Answers:
author: Craig Castle-Mead
body: Hi Gilbert,

Can you confirm what you mean by "validated" the domain? Crowd does not have a validation step - I'm wondering if this is more of an Atlassian Access question (for Atlassian Cloud services whereas Crowd is generally for on-premise solutions, though it can be used as a SAML provider)

CCM


Tags: sso
Crowd version 3.4.4 - vulnerability check
Asked by Ritaban Bhattacharjee:

Hi, we have received the below link and checked our product versions

<https://confluence.atlassian.com/security/multiple-products-security-advisory-cve-2022-26136-cve-2022-26137-1141493031.html>

We are running on crowd version 3.4.4. Could you please let us know if we are affected by this vulnerability?


Answers:
author: Dave Theodore [Coyote Creek Consulting]
body: Yes. From the doc:
> * Versions \< 4.3.8

comments: author: Craig Castle-Mead
body: [@Ritaban Bhattacharjee](/t5/user/viewprofilepage/user-id/4991318) - Crowd 3.4.4 was released in March 2019 - almost 3.5 years ago. This is a VERY long time in the IT/software space and there have been numerous other CVE's that your environment will be vulnerable to, not just the one you linked.

The Crowd upgrade process has always been relatively smooth for us (and we run a VERY complicated setup), so apart from the tiny downtime window you'll need to schedule to action the upgrade, it should be a smooth process. We run Crowd DC with multiple nodes and Puppet to manage our configuration files and we've got our total downtime for an upgrade to \~ 30 seconds (an A/B approach where we take one node offline, upgrade the application/apply the config changes, begin the outage by shutting down the second/final node and as soon as that node has completed, we start the app one the first node ending the outage, we then can action the same steps on the second node and bring it back online to bring us back in to a state of higher availability)

CCM
When does Crowd 3.7 go out of support?
Asked by Chris Arnold:

When does Crowd 3.7 go out of support?


Answers:
author: Craig Castle-Mead
body: Hey Chris,

I'm not 100% sure what you mean by "out of support" - however, since 3.7 was released in October 2019, and Crowd is now on 5.x - my suspicion would be that if you had any issues you reached out to Atlassian to resolve - bugs/features/security - one of the first steps would be requesting you moved to a MUCH more current version. Crowd does not have an "LTS" ( <https://confluence.atlassian.com/enterprise/long-term-support-releases-948227420.html> ) which means they will not release security updates on 3.7, and there have been quite a number of security fixes since the 3.7 release.

I would HIGHLY recommend upgrading from 3.7 to at least 4.4.x or 5.x - you'll be securing your organisation against a number of security issues, as well as getting stability/performance and functional improvements.

CCM

comments: author: Steffen Opel _Utoolity_
body: Indeed - I'll add that the official [Atlassian Support End of Life (EOL)](https://confluence.atlassian.com/support/atlassian-support-end-of-life-policy-201851003.html) date for Crowd 3.7 has been [Oct 3, 2021](https://web.archive.org/web/20200911020841/https://confluence.atlassian.com/support/atlassian-support-end-of-life-policy-201851003.html).


Tags: server
Can I make a particular user a Crowd group 'owner' without giving them Crowd administrator rights?
Asked by benjamin easter:

We have a large number of Crowd groups which are currently all maintained by our support team, when users need changes made to the Crowd groups they need to raise a request to us to make those changes. Ideally I would like to be able to give a number of users elevated 'owner' permissions of their groups so that they can administer it themselves without having full administrator rights to our Crowd instance. Is this something that is possible?


Answers:
author: Craig Castle-Mead
body: Hey [@benjamin easter](/t5/user/viewprofilepage/user-id/4985804)

If you're using Crowd 3.3 or newer, there is Group Level Administration - <https://confluence.atlassian.com/crowd/group-level-administration-958762255.html> - which can be used to give non-sysadmin users access to manage groups. I believe this could be what you're after.

CCM


Tags: server
What is the SQL query to extract information about what activity a sysadmin performed.
Asked by David Clark:

We are securing our apps and need to track all activity performed by the admins and the users. I need to know the login/logoff times and what actions were performed.  
I need this in SQL query format.


Answers:
author: Nic Brough -Adaptavist-
body: Welcome to the Atlassian Community!

Crowd has some audit tables, the main ones being cwd_audit_log_changeset, cwd_audit_log_entry and cwd_audit_log_entity, which you can join together for a big flat table of all audited changes.

But it won't be as useful as you think it might be - Crowd doesn't record that much detail.

Also, you won't find anything with login/logoff times - that's tracked by the applications, not the user directories, and it's the same for the actions within the applications.

I can see you're trying to do some form of auditing, but I'm not sure you've come up with the best method of doing it. Could you describe the ultimate goal of what you're trying to get to? Forget tables, databases, crowd etc, and give us the high-level goal in human-speak (For example, "my auditors want to know what changes Bob made to Alice's access last Tuesday")


Tags: server
SQL Server question
Asked by Robert Egan:

I have three products (Jira, Confluence, Crowd) all point to the same physical server, but each with their own database.

Jira and Confluence can connect to their respective databases with no issues.

Crowd does not. I am trying to figure out why, and in the course of looking at the three installations I see that Jira and Confluence use these properties:

com.microsoft.sqlserver.jdbc.SQLServerDriver

com.atlassian.confluence.impl.hibernate.dialect.SQLServerDialect

jdbc:sqlserver://\*\*\*\*\*\*\*\*\*:1433;databaseName=\*\*\*\*\*

and Crowd uses these properties:

net.sourceforge.jtds.jdbc.Driver

jdbc:jtds:sqlserver://\*\*\*\*\*\*\*:1433/\*\*\*\*\*

org.hibernate.dialect.SQLServerDialect

Which produces the following error on the SQL Server

Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library.

The DBA has assured me that encryption IS NOT required. However, when I update the properties in Crowd to the same values as Jira and Confluence (and copy the library file), I got the following error

Could not connect to the database: com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to ... (More details about the error can be found in the logs).

So I'm stuck. I would really appreciate any ideas at all. Even crazy ones.


Answers:
author: Robert Egan
body: The answer was to use the JRE 8 MSSQL Library, even though the Java version is JRE 11.

Not having access to the MSSQL Source code, I can only surmise that version 11 defaults to encryption, while version 8 does not.


author: Ruslan Tkachuk
body: Hi [@Robert Egan](/t5/user/viewprofilepage/user-id/4276125)   
I checked your case with SQL Server 2017 (without Encryption) and Crowd 4.4.1 (with default jTds driver v.1.3.1) and all works pretty fine (please see attachments)... I used AWS RDS and EC2 for that. Additionally I connected to DB through the DataGrip client with jTds driver. As recommendations:

- check that DB encryption is disabled

- to be know, that Atlassian applications deployed in different Tomcat containers. <https://confluence.atlassian.com/confkb/can-multiple-atlassian-products-be-deployed-in-a-single-tomcat-container-21>![SQLserver6.png](https://community.atlassian.com/t5/image/serverpage/image-id/201502i1F48D2F5583BE2E0/image-size/large?v=v2&px=999 "SQLserver6.png")8279174.html  
![SQLserver5.png](https://community.atlassian.com/t5/image/serverpage/image-id/201503iE2096E548CA82156/image-size/large?v=v2&px=999 "SQLserver5.png")  
![SQLserver1.jpg](https://community.atlassian.com/t5/image/serverpage/image-id/201505i08C375D7D8EFB065/image-size/large?v=v2&px=999 "SQLserver1.jpg")  

comments: author: Robert Egan
body: The DBA has assured me that he has disabled anything that might be even remotely connected to encryption.


Tags: server
Cannot log in to reduce number of users on crowd as it is requesting an new license.
Asked by Derek Molyneux:

There is no way to reduce the number of Crowd users when you have gone over the limit. We cannot log into crowd to rectify as it is asking for a new license key. There was no warning of exceeding the limit at the time of entering the new user. How can we rectify this as there are a number of users that are no longer needed?


Answers:
author: Nic Brough -Adaptavist-
body: Welcome to the community!

A crowd administrator (not a user with rights to maintain the users in crowd, but the Crowd system admins) can always log in. They have to be able to get in to be able to apply a new licence. They will be able to reduce your user count as well, even when you are over the limit.


Tags: server
JSD customers in Crowd
Asked by Ronnie Simpson:

It appears that all our JSD customers are appearing as users on Crowd and I'm receiving the following message when trying to enter Crowd Admin:

"Your current license does not permit the number of users you have configured in Crowd, please upgrade to a new license, or contact Atlassian sales support."

Grateful for your assistance?


Answers:
author: Roman Kovalov
body: Hi [@Ronnie Simpson](/t5/user/viewprofilepage/user-id/1483682) and welcome to the community.

Looks like the total number of users in the "Can Login List" in Crowd has exceeded the total license limit. Please follow the instructions [Users are unable to log in after updating the license](https://confluence.atlassian.com/crowdkb/users-are-unable-to-log-in-after-updating-the-license-223223576.html) , it might help you


Tags: server
Crowd Connector Microsoft AD User and Group configuration error
Asked by Mark Miller:

I'm reciving this error when testing user and group AD settings in crowd microsoft AD directory in the configuration page:

No results were found from your search. org.springframework.ldap.UncategorizedLdapException: Uncategorized exception occured during LDAP processing; nested exception is java.naming.NamingException: \[LDAP:error code 1 - 000004DC: LdapErr: DSID-0C09A5C comment.: In order to perform this operation a successful bind must be completed on the connection., data 0 v4563\] remaining name 'OU Path listed'

The OU path for users and group in the message is correct. In the connect setting I'm able to connect to AD with no problems. I'm using Crowd 4.3.7


Answers:
author: Craig Castle-Mead
body: Hey Mark,

Guessing at possible options here - do you have a base DN set on the Connector tab, and then you're including the same value in the User/Group DN fields on the Configuration tab? The base DN is auto appended to the User/Group DN

CCM

comments: author: Mark Miller
body: Yes I am. I'm aware that it appends the base DN to the user and group DN. There is some verbiage under the text boxes that states that point. It appears this is a java issue. It does not seem to bind to AD. The URL for AD on the connector tab results in "The server address ad port are valid". So the connection to AD is good but java process will not bind to AD.

Do you have any other suggestions?


author: Ruslan Tkachuk
body: Hi [@Mark Miller](/t5/user/viewprofilepage/user-id/4347854)   
I encountered the same error, I changed the connector configuration several times after which a successful connection was established, but synchronization didn't work correctly: No results were found from your search ... remaining name ...  
It was with Crowd 4.3.7  
After removing of created Directory -\> reboot Crowd -\> re-created a new directory = the problem is gone  
As a guess, it could be some kind of logic related to caching on the Crowd side.  

<br />


Tags: server
Enable unregistered E-Mail Adresses to add comments to tickets
Asked by Pascal Rocksien:

Hello,

We need the functionality to allow unregistered email addresses to add comments to a ticket when replying to an ongoing email history. These email addresses should not have access to the tickets.

Thank you for the Help.


Answers:
author: Sravan Indukur
body: Hi [@Pascal Rocksien](/t5/user/viewprofilepage/user-id/5599339) ,

This can be configured.

If you require this settings for JSM Cloud Project, refer the below link:

<https://support.atlassian.com/jira-service-management-cloud/docs/allow-external-emails-to-be-added-as-comments-on-issues/>

And if it is to be for Jira Cloud, refer the below link:

<https://support.atlassian.com/jira-cloud-administration/docs/allow-anonymous-access-to-projects/>

Regards,

[@Sravan Indukur](/t5/user/viewprofilepage/user-id/5301477)


Tags: cloud

jira-service-management

jira-service-management-cloud
How can a group that is not included in the Issue Security Scheme view an issue in the customer port
Asked by dc06c0e3-09e9-4b84-90a7-e1ef177cdcde:

In the **Tebligat Tracking System** project, there is a security scheme as shown in the image. However, I want to add people other than the existing users and groups in the **Request Participants** field in the customer portal. But I want the added users to only be able to view the details through the portal. How can I do this?

![Jira1.png](/t5/image/serverpage/image-id/348754iAD9275DD594F430D/image-size/large?v=v2&px=999 "Jira1.png")![Jira2.png](/t5/image/serverpage/image-id/348755iCEEF5299616B8087/image-size/large?v=v2&px=999 "Jira2.png")


Answers:
author: Walter Buggenhout
body: Hi [@dc06c0e3-09e9-4b84-90a7-e1ef177cdcde](/t5/user/viewprofilepage/user-id/5486095),

Since your question is about JSM, if the users you refer to are **customers** of your service project and not part of your service team (i.e. not associated with the *service desk team* role in your project), they will only be able to access tickets through the portal. That's how JSM works.

In the portal, via the *My Requests* view they will be able to see (only) tickets they raised or the ones shared with them directly or an organization they belong to.

Hope this helps!


Tags: cloud

jira-service-management

jira-service-management-cloud