youngmon/atlassian-qna huggingface dataset:
Tomcat version in Crowd 4.2.2?
Asked by abbeycode:

We've been made aware of a security vulnerability in Tomcat v8.5.50, which Crowd v4.2.0 (that we're currently using) comes with. Has Tomcat been upgraded if we upgrade Crowd to v4.2.2?


Answers:
author: Gonchik Tsymzhitov
body: Hi [@abbeycode](/t5/user/viewprofilepage/user-id/4108426) ,

Based on release note unfortunately, not yet

<https://confluence.atlassian.com/crowd/crowd-4-2-release-notes-1019381976.html>

Please, share the CVE- and I hope Atlassian security team will check the risks.


author: Gaven Ray
body: You can use this trick

<https://confluence.atlassian.com/jirakb/how-to-upgrade-apache-tomcat-version-used-by-jira-879957866.html>


author: abbeycode
body: I submitted support tickets to Atlassian for Crowd (with two CVEs) and Jira and Bamboo, with one CVE that wasn't patched until Tomcat v8.5.60.

Patched in v8.5.56: [CVE-2020-11996](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11996)

Patched in v8.5.60: [CVE-2021-24122](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24122)
How can I configure the user attributes received in the SAML assertion with Crowd SSO?
Asked by Cosmin Lazar:

Hi,

I'm trying to integrate my app with a Data-center Crowd as a SSO Identity Provider. I've configured the app in Crowd and the authentication is triggered (via SAML REDIRECT BINDING) but on the returned authentication message I get only the "atl.crowd.properties.remember_me" which is not very useful to my use case. I'd like to e.g. get the user's email set-up in the Crowd directory.  

How can I configure Crowd to map user attributes to SAML attributes for my app?


Answers:
author: Serge NG
body: ```
 <saml2:Subject> <saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">admin</saml2:NameID>
```

```
? <saml2:AttributeStatement> <saml2:Attribute Name="atl.crowd.properties.remember_me"> <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:boolean" >false</saml2:AttributeValue> </saml2:Attribute> </saml2:AttributeStatement>
```

Crowd only send this unusable saml attribute

```
<saml2:Attribute Name="atl.crowd.properties.remember_me">
```

Where is the configuration file to send the username attribute in the saml response?
User direcotry and SSO with different groups
Asked by Martin Bens:

Hi,

we are currently using Crowd as a directory provider and a SSO IdP. Crowd itself uses mostly an internal LDAP for user information.

However, we also use local groups in crowd (managing groups via the LDAP is tedious). The groups are mainly used for authorization in Jira and Confluence.

The organization provides another IdP, integrated with several other internal and external services. I would like to use that SAML authentication. There are no additional users in Crowd, only additional groups.

I would like to know if authentication can be done by the IdP and authorization by the Crowd directory?

best regards,  
Martin Bens


Answers:
author: Lokesh Naktode_miniOrange
body: Hi [@Martin Bens](/t5/user/viewprofilepage/user-id/3631084)

Looking at the message, it seems you want to use Crowd as a User Directory to manage user's permission for JIRA and Confluence but want to delegate user authentication from Crowd to IDP via SAML. right?

If this is the case, you can easily achieve this requirement using the [Crowd SAML SSO plugin](https://marketplace.atlassian.com/apps/1218304/mo-saml-single-sign-on-sso-for-crowd?hosting=server&tab=overview) and its connector add-ons for [JIRA](https://marketplace.atlassian.com/apps/1220053/mo-sso-connector-for-crowd-and-jira?hosting=datacenter&tab=overview) and [Confluence](https://marketplace.atlassian.com/apps/1220055/mo-sso-connector-for-crowd-and-confluence?hosting=datacenter&tab=overview). Crowd SAML SSO plugin allows you to enable SAML SSO from IDP and using the SSO connector, any user accessing the application (JIRA or Confluence) gets redirected to IDP for authentication.

Here, all the SAML authentication requests and responses to and from IDP will go through the Crowd server. The user authentication will be done by the IDP and Crowd can still be used to manage user's permissions.

Let me know if you need more details on this or you can reach out to the [miniOrange support](https://miniorange.atlassian.net/servicedesk/customer/portal/2) for further assistance with the configuration.

Thanks and Regard,

Lokesh

PS: I work for miniOrange. One of the top SSO vendors in the Atlassian Marketplace.

comments: author: Martin Bens
body: Thx.

That might be exactly what we need. Do I need the premium plan or is the free plan sufficient?


author: Lokesh Naktode_miniOrange
body: Hi Martin,

In SAML, IDP sends the user information (username, email, etc) in the SAML Response which is used to identify SSO users by mapping the username of the user from IDP to Crowd. If IDP can send the user's Atlassian username (username in Crowd) in the *NameID*attribute of the SAML Response then the free plugin will work for you.

But my recommendation is to move forward with the Premium plugin for advanced usability and security features.

Please note that the SSO connector add-on is not free but available for free TRIAL.

Thanks and Regard,

Lokesh

PS: I work for miniOrange. One of the top SSO vendors in the Atlassian Marketplace.


Tags: ldap

saml

server

sso
Upgrading MySQL for Crowd
Asked by Tom Williams:

Our team is preparing to upgrade some of our Atlasssian Applications we are currently running Crowd 3.4.4..  
We are using MySQL 5.6 and plan to upgrade to MySQL 5.7.We plan to upgrade the database first before upgrading the apps and make sure we are good to go for the upgrade to Crowd.  
Are there any procedures that we need to complete on the different app databases, or any additional factors we need to consider?


Answers:
author: Alexis Robert
body: Hi [@Tom Williams](/t5/user/viewprofilepage/user-id/848300) ,

when upgrading databases, you should have a look at the current and target Supported Platforms page for each product. For example for Crowd : <https://confluence.atlassian.com/crowd/supported-platforms-191851.html>

You can see that MySQL 5.6 is not supported for the latest version, so you will probably need to upgrade to 4.0 (the latest that supports MySQL 5.6).

Let me know if this helps,

--Alexis


Tags: server
Can I use localhost for the database?
Asked by Dave Mattinson:

As part of increasing the security of the Atlassian products it has been suggested that if the server communicates directly with the database that I should use a localhost database rather than a network visible port. I have had a bit of a go, but can't seem to get it to work. I suspect that the database access is from the client rather than the server. Is my suspicion correct or is there something else I'm missing?


Answers:
author: Nic Brough -Adaptavist-
body: There's no harm in setting up a database on the Crowd server for local use - in fact, it's usually easier because most databases, when first installed, only listen locally by default, you have to add settings to them to get them to listen to other places.

The main question here is what you are getting - what are the symptoms of "can't seem to get it to work"?

comments: author: Dave Mattinson
body: Fortunately the problem went away when I started on a new server instance. I presume I'd left some link as the server name. It does seem to work OK now. Sorry only recently gone back to it.


Tags: server
Login screen appears repeatedly . why?
Asked by ss:

Hi,

I just upgraded my crowd instance from 3.x to 4.2.2

After upgrading, I am not able to login into it with my admin id. whenever I give the password, it gives error "incorrect username and password" and login screens keep reappearing...

my password is absolutely correct. nevertheless, I even reset the password by following the reset password instructions. And changed it to admin.

but nothing works.

what wrong am i doing or have done?..this is driving me crazy.

please help anyone.

Regards


Answers:
author: Foo Guan Sim - ServiceRocket
body: Hey there,

There is a high chance this is due to the wrong **crowd.server.url** or application credentials in *CrowdHome/crowd.properties* The Crowd Home is the directory pointed by the **crowd.home** property in *CrowdInstallation/crowd-webapp/WEB-INF/classes/crowd-init.properties .*How was the upgrade performed? Usually a slight change in how you access Crowd post-upgrade will cause this.

Regards,  
Foogie

comments: author: ss
body: Hi [@Foo Guan Sim - ServiceRocket](/t5/user/viewprofilepage/user-id/1146586) ,

I was able to solve the issue. The problem was that the database server link was changed and hence it was not able to connect to it. Unfortunately, crowd did not give any meaningful error message.

after updating the db link. it started working.

regards


author: Foo Guan Sim - ServiceRocket
body: Nice, I'm surprised Crowd still boots up with a login screen despite the database connection issue. But glad you managed to sort it!

Regards,

Foogie


author: ss
body: I tried the solution given in <https://confluence.atlassian.com/crowdkb/logging-in-to-crowd-keeps-failing-and-gets-redirected-back-to-the-login-page-296096569.html?_ga=2.221494608.975977270.1517997617-78558588.1517354308>

but that also did not help me.

can anyone please help...


author: ss
body: I am using postgresql. if that information can help anyone to help me...


author: ss
body: any help will be appreciated.
Automation when Field Value criteria are Met
Asked by Kallan Sanders:

Hello All,

I am looking to create an automation and am not quite sure which options to choose.

At a high level, I have two custom fields (Data Approved Date \& Legal Approved Date) that are filled out automatically when an issue transitions to a certain status in our workflow. I can get more specific if needed, but dates are automatically added to the custom fields.

When do I trigger the rule to run? If the fields are not null/blank, I want to automatically transition to the next status in the workflow, "Ready for Release".

What would be my "When" be? Also, I am wondering if I need to alter my settings to only run if *both* of the conditions are true (like adding an "and" between Data Approved Date and Legal Approved Date).

Any automation experts out there? Thanks!

![Automation Pic.png](https://community.atlassian.com/t5/image/serverpage/image-id/347991i737AA02353C54EFB/image-size/large?v=v2&px=999 "Automation Pic.png")


Answers:
author: Christopher Yen
body: Hi [@Kallan Sanders](/t5/user/viewprofilepage/user-id/4484291) , I was going to say I would use Issue transitioned with if statements

![2024-09-18 15_46_02-Rule builder - Automation - Service Desk - Jira.png](https://community.atlassian.com/t5/image/serverpage/image-id/348028i765359B75B0EC8E7/image-size/large?v=v2&px=999 "2024-09-18 15_46_02-Rule builder - Automation - Service Desk - Jira.png")  

but reading your post more I don't think I'm fully understanding your situation. Can you go into more detail of what you want to happen and when?


Tags: jira-automation

jira-service-desk-cloud

jira-service-management-cloud
why is the view in DASHBOARD for FILTER RESULT changed ? Not only for me personally but also for my
Asked by Katia Cypers:


Answers:
author: Trudy Claspill
body: Hello [@Katia Cypers](/t5/user/viewprofilepage/user-id/5595576)

Welcome to the Atlassian community.

Your post seems to be incomplete.

Can you provide more information?

Can you provide a screen image of what you see currently?

Can you describe how it appeared previously that is different from the current presentation?

comments: author: Katia Cypers
body: the view i see is not what it was before and I seem not able to change it again. ![Capture.JPG](https://community.atlassian.com/t5/image/serverpage/image-id/348081i13A87DC0D9045EB2/image-size/large?v=v2&px=999 "Capture.JPG")


author: Trudy Claspill
body: How is that different from what you saw before?


Tags: cloud

jira-service-management

jira-service-management-cloud
Remove "topics" part from the portal
Asked by Olivier Rocher:

Hello team,

please find what my portal looks like:

![portal with topics.png](https://community.atlassian.com/t5/image/serverpage/image-id/347948iE9299278B47E0FFA/image-size/large?v=v2&px=999 "portal with topics.png")

The "Topics" part, circled in red is different from the "portal-groups" part below, and I am not able to figure out why (it turns me nuts ;-) )

here is my portal group configuration:

![portal-group.png](https://community.atlassian.com/t5/image/serverpage/image-id/347949iB0F29D3601955686/image-size/large?v=v2&px=999 "portal-group.png")

Ideally, I would like the "topics" part to be similar to the portal group ; or it could be removed.

But I am not able to figure out where/how this "Topics" part can be customized, it seems it is not in the Jira Service Management settings.

Thank you for your help.

Best regards,

Olivier


Answers:
author: Susan Waldrip
body: Hi [@Olivier Rocher](/t5/user/viewprofilepage/user-id/5593553) , welcome to the Community!

A Jira Admin can change the content of the Topics section or remove it entirely. Navigate to your Help Center URL \> Profile avatar \> Page Layout. Here, you can change the content of the Topics or just delete them all. Hope this helps!

comments: author: Olivier Rocher
body: Hi Susan,

thank you so much, I could indeed edit the "Topics" part.

Have a great day


Tags: cloud

jira-service-management

jira-service-management-cloud
Automatically creation of subtask for each description line
Asked by Francesco Marchesini:

Hi all,

as described in the summary, I would like to automatically create subtasks for each description line.

I mean, if a ticket is open with 2 lines in "Description" field I would like to create 2 subtask, each one with the description of the related line.

Is it possible?

Thanks

Francesco Marchesini


Answers:
author: Jim Knepley - ReleaseTEAM
body: I haven't tried implementing it, but I think you need to use ScriptRunner for Jira or something similar to do something that dynamic.

ref: [https://marketplace.atlassian.com/apps/6820/scriptrunner-for-jira?tab=overview\&hosting=cloud](https://marketplace.atlassian.com/apps/6820/scriptrunner-for-jira?tab=overview&hosting=cloud)


Tags: cloud

jira-service-management

jira-service-management-cloud
Workflow Issue (Bugs and Sub Tasks)
Asked by Sushmita Chakraborty:

I have two separate workflow, one for tasks \& Sub tasks and secondly for one for bugs. When I am making change to the workflow of bug it is affecting my Task workflow. Why so?

Do I need to have separate workflow scheme?

Please assist


Answers:
author: pinky_reddy
body: Hi [@Sushmita Chakraborty](/t5/user/viewprofilepage/user-id/5492389)

Welcome to the Atlassian Community

If your project is Company Managed, See if the issuetypes task,Bug are sharing the workflow in the workflow scheme.

A project can have only one workflow scheme but it can have multiple workflows assigned to each issue type.

you can Create a separate workflow and assign to the issue type in that case. This need Jira admin permission.


Tags: cloud

jira-service-management

jira-service-management-cloud
How to track customer visits to help desk
Asked by Gabriel Rojas:

There is a way to track the Total number of unique visitors to the help desk portal. We use a custom domain


Answers:
author: Anusha A
body: Hi Gabriel,

Thank you for your inquiry on community. Currently, Jira Service Management Cloud does not offer native functionality to track unique visitors. However, I recommend checking the [Atlassian Marketplace](https://marketplace.atlassian.com/) for potential third-party apps that might fit your needs.

If you have any other questions or need further assistance, feel free to reach out!

Regards,

Anusha A


Tags: cloud

jira-service-management

jira-service-management-cloud
Can not write end date in the epic - the date disapears after 1 s
Asked by Anita Lundin:

Trying put the end date in an existing Epic. The date disapears after 1 s. I have the app Big Picture and turned off the sync, but still not working.


Answers:
author: Nikola Perisic
body: Welcome to the community [@Anita Lundin](/t5/user/viewprofilepage/user-id/5595529) !

Do you have the edit permissions in your project? Have you tried clearing your cache and also running in incognito mode? Is this only happening to you or there are other users affected?

comments: author: Anita Lundin
body: It is solved. I had a conflict with the app Big Picture. I turned off the sync, and then it started to work again.


Tags: cloud

jira-service-management

jira-service-management-cloud
Automation to change status every time service desk customer adds a comment
Asked by dei:

I have an Automation to change the status from "Waiting for Customer" to "In Progress" if a service desk customer adds a comment to the issue.

This works. But when I ask a question to the customer and put it manually back to "Waiting for Customer", the status does not change if the customer adds a new comment to the issue.

The goal would be to have the status automatically changed every time to "In Progress" when the issue is in "Waiting for Customer" and the customer adds a comment, not just the first time.

Any hints?

![automation_comment.png](/t5/image/serverpage/image-id/347933i26BB4578E04F0A7E/image-size/large?v=v2&px=999 "automation_comment.png")


Answers:
author: Neil Fletcher
body: Hi [@dei](/t5/user/viewprofilepage/user-id/4729083)   

Here's a rule I use, you might be able to adapt it to suit.  

Basically, if the status has been set to Pending or Completed, then a Customer adds a new comment, it updates the status to Work in Progress and adds a new comment  

<br />

![2024-09-18_13-50-45.png](https://community.atlassian.com/t5/image/serverpage/image-id/347935iEE90041A4291DF89/image-size/large?v=v2&px=999 "2024-09-18_13-50-45.png")

comments: author: dei
body: [@Neil Fletcher](/t5/user/viewprofilepage/user-id/5127667) Adapting it to my needs is working. Every time and not just once, also when manually going back to "Waiting for customer". That's great.

But I assume that if I'm making a comment, it's triggering the automation as well. So I have to limit it to customers only.

![Bildschirmfoto 2024-09-18 um 16.34.57.png](https://community.atlassian.com/t5/image/serverpage/image-id/347966i55B528A58233E6AF/image-size/large?v=v2&px=999 "Bildschirmfoto 2024-09-18 um 16.34.57.png")


author: Neil Fletcher
body: Try adding a user condition that looks for users in customer group aswell  

![2024-09-18_16-47-22.png](https://community.atlassian.com/t5/image/serverpage/image-id/347968i226094DCCC69B493/image-size/large?v=v2&px=999 "2024-09-18_16-47-22.png")


author: Jakub Koc
body: Hi Dei,

In Jira you already have a legacy automation which would do the thing for you,

Only thing you would have to change is status of your transition as default works on 'waiting for customer' and 'waiting for support' .

comments: author: dei
body: [@Jakub Koc](/t5/user/viewprofilepage/user-id/5446949) Sorry, I don't find it. What's the name of the automation?


author: Jakub Koc
body: Hi Dei,

It's 'Comment updates reply status' .

Just to mention, if agents are also creating tickets, you might need to adjust that automation a little.


author: dei
body: Agents don't have to create Tickets, but thanks!


Tags: cloud

comment

jira-automation

jira-service-management

jira-service-management-cloud

status
Command Palette - Due Date suggestions one day off
Asked by Curtis Marcotte:

When Attempting to change the Due Date via the Command Palette (Ctrl/Command + K) all the suggested dates appear to be offset.

![2024-09-18 06_05_28-.png](/t5/image/serverpage/image-id/347925iC2AF7642B8D1D515/image-size/large?v=v2&px=999 "2024-09-18 06_05_28-.png")

Currently its 6:00am EST (GMT -5) on Sept 18th 2024.

"Current", which I'm not sure if this is the current value in the field or the today's date, states that its Sept 16th 2024. Which would be wrong on either account.

"Tomorrow" states that its Sept 18th 2024 which is currently Today.

The "In 1 Week" and "In 2 Weeks" estimates are also one day off as if today was being registered as Sept 17th 2024.

I found an issue [JSDCLOUD-10490 - Due date field on portal My Requests page shows incorrectly](https://jira.atlassian.com/browse/JSDCLOUD-10490 ) where the Due Date is being stored or processed as a midnight time and that timezone corrections were having the value be offset by a day. This would line up with many things.

I've tried to set my Personal JIRA Account's Timezone to GMT +0 and GMT -6 but neither would correct this offset.

Am I missing a Setting somewhere to account for this?

Also semi-related but the Tool-tip for the Due Date (which recently showed up yesterday) states that the issue is 2 days overdue, however its only been one day. I can kinda see this being the case if the Due Date is Due by the start of that and and not by the end of that day.


Answers:
author: Anusha A
body: Hi Curtis,

Thanks for creating this post.

We may need to examine the configuration of your instance in more detail. I have created a support ticket for you, and the details will be emailed to you shortly.

Have a good day ahead.

Regards,

Anusha A


Tags: cloud

jira-service-management

jira-service-management-cloud
CRON
Asked by Kieron Brent:

I would like to write a CRON expression to only trigger on a weekday between the hours of 0800 and 1800 and once every 45 minutes. I thought I had solved this using this CRON expression but it doesn't seem to work. Any help welcome, thanks.

0 45 8,18 ? \* 1-5


Answers:
author: Kishan Sharma
body: Hi [@Kieron Brent](/t5/user/viewprofilepage/user-id/5567152)

Welcome to the Atlassian Community!  

You can try below cron expression for your use case, since you want to use an hour range, you should use **-** instead of **,** for hour field, so that it triggers only between that hour range(i.e between 8AM -6PM)

<br />

**0 0/45 8-18 ? \* MON-FRI \***

comments: author: Kieron Brent
body: I have put this in to see if it works - I will let you know


author: Kishan Sharma
body: Hi [@Kieron Brent](/t5/user/viewprofilepage/user-id/5567152) If my response was helpful, feel free to mark it as accepted; it can assist other users facing similar questions.


author: Susan Waldrip
body: Hi [@Kieron Brent](/t5/user/viewprofilepage/user-id/5567152) , welcome to the community!

(Edited to correct the expression per [@Kishan Sharma](/t5/user/viewprofilepage/user-id/554991)'s answer \[he's correct\] for future reference by others, thx!)

Have you tried 0 0/45 8-18 ? \* MON-FRI \* ? Also, there are a couple of good sites I use for CRON expressions, [crontab.guru](https://crontab.guru/) and a Community page [Constructing cron expressions for a filter expression](https://confluence.atlassian.com/servicemanagementserver0422/constructing-cron-expressions-for-a-filter-subscription-1142233522.html). Hope these help!

comments: author: Kieron Brent
body: I will let you know a little later if this has worked - Thanks


author: Kieron Brent
body: 0 0/45 8-18 ? \* MON-FRI \* has indeed solved the problem thanks all


Tags: cloud

jira-service-management

jira-service-management-cloud