youngmon/atlassian-qna huggingface dataset:
Crowd Username change
Asked by aram.dermenjian:

We currently use single sign on for all of our products, but we are trying to figure out how to change some usernames. Is there anyway to go and change a person's username? Would I need to do it in the database itself? (if so, where would that be?)

Theoretically when transitioning from one to another I'd prefer all content to be remapped to the new name. I don't mind 'deleting' and then 'creating' a new account as long as when I create a new username (that theoretically would have the same email as the previous) that all the content would still be there in JIRA and Confluence.

Is that possible? It would be super nice to be able to do =D  
Thanks!


Answers:
author: Jobin Kuruvilla [Adaptavist]
body: Changing username is not supported in any of the Atlassian apps. There are workarounds to do it in individual apps but no easy way to do it in single place. "Deleting" and "Creating" another account doesn't make any difference either.

comments: author: aram.dermenjian
body: Do you know whether it will one day be supported?


author: Jobin Kuruvilla [Adaptavist]
body: They are already doing it but it will be for individual apps. For example, renaming is supported in JIRA 6.0 I guess.


author: aram.dermenjian
body: O! I see what you mean by individual apps now. So since our crowd installation handles all the authentication for JIRA, even when we move over to JIRA 6.0 we wouldn't be able to alter usernames for that instance correct?


author: Jobin Kuruvilla [Adaptavist]
body: Nope because it won't work in other apps. Once all apps are equiped for username change, you can probably do that in Crowd.


author: hhung
body: Renaming usernames is currently not supported in Crowd at this stage. It's on our radar of priorities to implement but is not something that will be fixed in the short term, as we are dedicating time to improving Active Directory support/integration.

You can vote on the JIRA ticket for renaming users support here: <https://jira.atlassian.com/browse/CWD-1133>


author: Ivan Kovnatsky
body: This is outdated. As newly released crowd version of 2.7.0 gives the ability to rename usernames.


Tags: crowd-administration
CrowdID inaccessible
Asked by Tobias Zimmermann:

Hello,

I'm currently evaluating using Atlassian products for my projects. I installed Crowd today and got everything, but CrowdID to work. Following the guide here (https://confluence.atlassian.com/display/CROWD/Removing+the+'crowd'+Context+from+the+Application+URL) to remove the context path from my installation. I doubt this is relevant, but I also set up a reverse proxy using nginx for more convenient access. I'm now wondering how to access the CrowdID web interface. I guess I would either have to remove the context path and rewrite the URLs using nginx or set up another connector in Tomcat. Is there a way around this? In case setting up another connector in Tomcat is in option, what exactly would I have to do?

Thanks in advance,

Tobias


Answers:
author: Ryan Goodwin
body: Hi Tobias,

Can you access it from ?

<http://localhost:8095/openidserver/>

comments: author: Tobias Zimmermann
body: Hey, thanks for your answer. Unfortunately no. Accessing the page from localhost still returns the Tomcat 404 page.


author: Ryan Goodwin
body: Hi Tobias,

Are you accessing regularly from localhost or a machinename or proxy address? What is the URL you're currently using to access crowd?

Ultimately, you've changed the way crowd is accessed by removing the context, but you should still be able to set up another context resource that allows you to access the other areas of crowd.

If you add another 'context' resource in the crowd's server.xml pointing to the appropriate docbase, the /openidserver/ should resolve properly. You'll need to ensure that the nginx proxy is proxying properly to point those requests to the appropriate connector.


author: Tobias Zimmermann
body: Hey,I'm currently running Crowd (and the other products aswell) on a dedicated server. Hence I'm accessing them through [crowd.example.com](http://crowd.example.com), [stash.example.com](http://stash.example.com), ... This is why I preferred to have a reverse proxy, those port numbers look ugly ;) I will try to setup another connector later today. Thank you for your reply.


author: Ryan Goodwin
body: I totally understand that - entering ports is horrible for users. I pose this question to you though, how many users are actually logging into crowd? Should be very few (only your crowd admins). Crowd isn't an end user application :)


Tags: crowd-administration
Crowd/Subversion 1.7 Authentication Problem with mixed case repositorynames
Asked by Francisco Villar Romasanta:

Hi all,

I have a very strange problem with my Crowd 2.6.1 / Apache 2.2.22 / Subversion 1.7 setup.

Everything seems to work fine for repositories with lowercase name, but when I have a repository with mixed case I sometimes get access denied errors.

I am using SVNParentPath and AuthzSVNCrowdAccessFile.

This is an excerpt from the **AuthzSVNCrowdAccessFile**:

```
[TESTrepo:/]username = rw
```

Error from svn log when commiting a file:

```
[Wed Apr 10 11:38:49 2013] [error] [client xxx] Access denied: 'username' MERGE TESTrepo:
```

However I can commit a file when I add the repository in lowercase to the AuthzSVNCrowdAccessFile:

```
[testrepo:/]username = rw
```

Is there an option to treat the access file case insensitive? I rather not want to add every repository with upper and lowercase into the access file.

Thanks in advance


Answers:
author: Francisco Villar Romasanta
body: Hi Joseph, thanks for your answer but the problem is not with usernames but with the name of the SVN-Repositories.


author: joe
body: Take a look at [Enforcing Lower-Case Usernames and Groups for an Application](https://confluence.atlassian.com/display/CROWD/Enforcing+Lower-Case+Usernames+and+Groups+for+an+Application); you can configure this in Crowd so that Subversion will only see the lowercase versions.


Tags: apache

svn
adding users from multiple OU's
Asked by d:

In AD i have users grouped into OU's based on department and im trying to get crowd to load the users from two diffrent OU's and read the groups from a third OU

is the possible to do using only one directory or will i have to setup a directory for each OU i want to connect to?


Answers:
author: d
body: It seems that this was caused by a DNS issue which was preventing the subtree search of the domain


author: JohnA
body: Hi there,

When I read the title my immediate thought was mutilple directory connections, and that is what I would still recommend to you now whilst reading this. I don't know if you could figure out a way to get it to pick up from multiple OUs on one connector but I wouldn't advise it when multiple directory connectors will do the job.

All the best,  
John

comments: author: d
body: I've just set it up with 3 directories, 1 for dev users, 1 for qa users, and 1 containing groups that have members from the other two OUs.

Crowd sees the users fine, but when it but it comes to reading the groups it thinks that they are empty?

I'm still running crowd 2.5.2 if that would make any difference?
How to import only specific set of users in the 'External User Importer' functionality in Crowd
Asked by Raghuram:

I maintain two user directories

* Crowd Internal Directory - people who do not have AD access or have problems using AD credentials.
* Delegated Authentication Directory - Linked to AD which uses AD authentication

Now my question is

How to make sure certain users are not added in the import. We have an issue where set of users for eg a,b,c have problem using atlassian tools by using their AD credentials for which I created the same user names in a **crowd internal directory** and deleted the users from **Delegated Authentication Directory.**

Now when I import or update the Delegated Authentication Directory with the AD, it picks up the deleted users and adds them back, which actually triggers a situation where both the directories have now users a,b,c and due to that they have problems logging in JIRA and Confluence.

How to handle this ?


Answers:
author: Zul NS _Atlassian_
body: If it is a small number of users, you can creata a User Object Filter to not include some users. If it is a large number of users with a particular AD group, Group Object Filter could help as well. The following links might help:

\* <https://confluence.atlassian.com/display/CROWD/Configuring+a+Delegated+Authentication+Directory>

\* <https://confluence.atlassian.com/display/CROWD/Restricting+LDAP+Scope+for+User+and+Group+Search>

\* <https://confluence.atlassian.com/display/DEV/How+to+write+LDAP+search+filters>


Tags: import

user-directory
Generating report
Asked by Gaurav Mishra:

Hey,

Is there an easy way to generated reports in crowd ? for example, I want to get a list of all direct and indirect users of a group who are active.

thanks in advance


Answers:
author: William Zanchet [Atlassian]
body: Hi Gaurav,  

We don't have this feature yet. The only to get 'raw reports' is through the database. However I think this is a good feature request. That's why I took the liberty to raise this feature request in our System as you can see here:  

<https://jira.atlassian.com/browse/CWD-3240>  

<br />

I would strongly suggest that you vote on this issue to increase its popularity and add it to your watchlist for future updates.  

Cheers,  

WZ

comments: author: Gaurav Mishra
body: Hey William, I can't open that issue. thanks


Tags: report
disable profile editing
Asked by Hermann Schmidt:

Is it possible to disable the profile editing by the User?


Answers:
author: petry
body: There is no option to achieve that through the UI, just doing some code changes. I raised a feature request for it, and you can check it [here](https://jira.atlassian.com/browse/JRA-32344).

Feel free to post any comments there, it will reach the developers directly.

Hope that helps.

Cheers,

Andre


author: Ramiro Pointis
body: It looks like it can't be done without some coding. I checked for confluence and I found this documentation:

<https://confluence.atlassian.com/display/CONFKB/How+to+Disable+Profile+Editing+by+Users>

Maybe it can be used to same changes on Crowd.

Hope this helps.

comments: author: Ramiro Pointis
body: At least for now the only way is to do some "underground" changes. Not possible from inside.


author: Hermann Schmidt
body: Ok thats an Idea, i can edit the file edit_profiles.jsp .

but can I am searching for something like global settings
Crowd Apache connector
Asked by Patrick van der Rijst:

Hi,

I'm trying to install the crowd-apache connector on CentOs 6.x but it seems the connector is not compatible for that..

--\> Processing Dependency: libcurl.so.3()(64bit) for package: mod_authnz_crowd-2.0.1-1.x86_64  
--\> Finished Dependency Resolution  
Error: Package: mod_authnz_crowd-2.0.1-1.x86_64 (/mod_authnz_crowd-2.0.1-1.x86_64)  
Requires: libcurl.so.3()(64bit)  
You could try using --skip-broken to work around the problem  
You could try running: rpm -Va --nofiles --nodigest

Any suggestions?


Answers:
author: joe
body: For [Installing the Crowd Apache Connector on Red Hat Enterprise Linux](https://confluence.atlassian.com/display/CROWD/Installing+the+Crowd+Apache+Connector+on+Red+Hat+Enterprise+Linux) there are separate RPMs for 5.5 and 6. Are you using the 'el6' RPM?


author: Patrick van der Rijst
body: Hi Joseph,

I was able to get it working on our ACC environment. See <https://support.atlassian.com/browse/CWDSUP-7924> for the solution. Though I don't want this install package on production.. I'd like to use the generated sources and copy them to our PRD environment..


author: joe
body: And what's the soname of the library? Does that include libcurl.so.3? It could be a version issue or a path issue.


author: Patrick van der Rijst
body: Installing:  
libcurl-devel x86_64 7.24.0-5.25.amzn1


author: joe
body: Which version of libcurl.so is provided when you install the curl-devel package?
MySQL Queries to get list of all users in all groups from CROWD
Asked by Gaurav Mishra:

Hey, We are trying to automate a way where we can get list of all users of all groups, and then remove the deactivated users and get a finalized list. We have 170 groups, so its not easy to do things thru UI.

I was working with bash + querying database. Query to get list of all groups -

```
#mysql -u$user -p$password --batch -e "use $db; select lower_group_name from cwd_group;"  &gt; /tmp/crowdgroups
```

And then I wrote a procedure to recursively get all Groups / Childrens of that particular group. This pretty much seems to work for me. I am still searching for loopholes and probability of failure.

```
One such seems to be the cyclic group thing. Group1 (is member of) Group2, Group2 (is member of) Group3, and then Group3 (is member of) Group1
```

Any ideas on making this script perfect or other nicer ways to do this? I know there is REST APIs but I did not try them yet.  
Procedure is here -  

```
findmembers(){#Find all Users in this group and append it to a filemysql -u$user -p$password --batch -e "use $db;  select lower_child_name from cwd_membership where membership_type='GROUP_USER' AND lower_parent_name='$1';" | tail -n+2 &gt;&gt; /tmp/mygroups# Check if Group has children groups in it, if so, run recursive for all groupsif [ `mysql -u$user -p$password --batch -e "use $db; select membership_type,group_type,lower_parent_name, lower_child_name from cwd_membership where membership_type='GROUP_GROUP' AND lower_parent_name='$1';"|wc -l` -ne 0 ]then#echo "$1 has groups in it"# Find all groups nested in this group mysql -u$user -p$password --batch -e "use $db; select lower_child_name from cwd_membership where membership_type='GROUP_GROUP' AND lower_parent_name='$1';"|tail -n+2 &gt; /tmp/tmp_$1# Go through each group and find all the children in it. while read tgroupsdofindmembers $tgroupsdonefi}
```

```

```

```

```


Answers:
author: Gaurav Mishra
body: Well this is gonna be unanswered.


author: Michael Katze _ Trivadis Germany GmbH
body: This is my MySQL query to find all groups for each directory and their members:

```
SELECT CD.directory_name AS 'directory',       CG.group_name AS 'group',       (        SELECT GROUP_CONCAT(U.user_name ORDER BY U.user_name ASC SEPARATOR ',')        FROM cwd_membership M           LEFT JOIN cwd_user U ON M.child_user_id = U.id          LEFT JOIN cwd_group G ON M.parent_id = G.id        WHERE G.id = CG.id        ) AS 'members'FROM cwd_group CG  LEFT JOIN cwd_directory CD ON CG.directory_id = CD.id-- WHERE CD.directory_name = 'Confluence Internal Directory'ORDER BY CD.directory_name, CG.group_name;
```


author: jira-fxit.support db
body: error


Tags: sql
How to Configure "Delegated Authentication Directory"
Asked by Grant Paterson:

I want to configure "Delegated Authentication Directory" to be able to have real-time changes in Active Directory reflected on Authentication. In other words, once a user chagnes his/her password, I do not want to need to synchronize Crowd Directory, and Crowd delegates authentiction to Active Directory, but the problem that I faced is that I when I use the same settings that I used for Connector Directory causes problem with this type of Crowd Directory. Event though I can search successfully, I can not update the settings and I got error message.

The other problems is that the configuration screen does not look like snapshot in the documentation of this type of directory configuration.


Answers:
author: Rodrigo Girardi Adami
body: Hi Grant,

I could only find [this documentation](https://confluence.atlassian.com/display/CROWD/Configuring+a+Delegated+Authentication+Directory) for setting a delegated LDAP directory on crowd. Actually using the exact same setting for a delegated and a connector directory may be possible, but I believe it won't be good to use both directories for the same application in crowd.

If you want to use the delegated user directory, I would recommend to remove the connector directory from the same application window and set just the delegated user directory for that specific application.

Cheers,

Rodrigo


Tags: crowd-integration
Change Crowd Password Reset Token Expiry Period from 24 hours
Asked by Glenn Mason:

We are using the Crowd password reset process to send out emails to new users of our application.

Unfortunately users are not activating their accounts within the default 24 hours, resulting in the password reset token is expiring and our support team having to re-issue the reset request.

Is there a way to change the default 24 hours token expiry to a different duration?

Cheers,  
Gm


Answers:
author: joe
body: The lifetime is configured in Crowd's crowd-ehcache file, located in crowd-webapp/WEB-INF/classes/crowd-ehcache.xml. Increase the times in seconds for ResetPasswordToken from the current value.


author: cloud-operations
body: Is there an equivalent for JIRA server?

Thanks!
Change the colour of the portal user icon
Asked by SAFE Customer Support:

Hi all,

We are trying to standardise our users in a single team with one Public Name (so SAFE Customer Support) but when we look at the customer portal, we are different colour icons.

So one of us is a yellow icon with initials and the other is blue - this obviously means that the customer has managed to work out who is who and we were trying to avoid this if possible.

Is there a way of changing this so we are the same?


Answers:
author: SAFE Customer Support
body: Ok, we've done it - if you change your profile picture visibility to anyone and then edit it to the generic one, it appears on the help center and overrides the settings somewhere - it just means that we are generic everywhere!


author: Christopher Yen
body: if I go to <https://id.atlassian.com/manage-profile/profile-and-visibility>and click the profile photo it gives me an option of creating an initials avatar and select the color. Another option might be to create a logo file and have everyone use the same avatar photo

![2024-07-22 19_46_53-Window.png](https://community.atlassian.com/t5/image/serverpage/image-id/337170iA193BA723AD9B3A3/image-size/large?v=v2&px=999 "2024-07-22 19_46_53-Window.png")![2024-07-22 19_47_04-Window.png](https://community.atlassian.com/t5/image/serverpage/image-id/337171i3A431A9B78102B07/image-size/large?v=v2&px=999 "2024-07-22 19_47_04-Window.png")

comments: author: SAFE Customer Support
body: Hi Christopher, Yes we've tried that but that doesn't control what it displayed on the external customer portal (Help center)

Thank you though :)


author: SAFE Customer Support
body: This is where i mean

![Screenshot 2024-07-23 102916.jpg](https://community.atlassian.com/t5/image/serverpage/image-id/337276i567EB7F572E7D519/image-size/large?v=v2&px=999 "Screenshot 2024-07-23 102916.jpg")


author: SAFE Customer Support
body: We've sorted it - solution in the answer


Tags: cloud

jira-service-management

jira-service-management-cloud
Satisfaction report shows OK in comment field
Asked by Bob Plank:

For some reason, our default satisfaction report shows 'OK' in the comment field, unless a reporter actually fills in a comment. If the customer doesn't fill in the field, I would expect it to be blank. Does anyone else experience this kind of behavior?

![satisfaction.png](https://community.atlassian.com/t5/image/serverpage/image-id/337032iA17A2669D28DFA9A/image-size/large?v=v2&px=999 "satisfaction.png")


Answers:
author: Cristian IONESCU
body: Hi Bob,  

Hope you are doing well.  
Here are a few steps you can take to investigate and potentially resolve this issue:

<br />

**Scripting** : If you are using any scripting add-ons like ScriptRunner, check if there's a script that sets the comment field to 'OK'.  

**Automation Rules**: Check if there are any automation rules set up that might be populating the comment field with 'OK' under certain conditions.


author: Dan Breyen
body: Hi [@Bob Plank](/t5/user/viewprofilepage/user-id/4321720) welcome to the community. I don't have that filled in on my Satisfaction Report so I'm pretty sure that's not coming from base code. It almost looks like someone has defaulted that information into the field.

Do you happen to have an Automation that is filling in that field? Or do you have a form that is defaulting 'ok' into that field? I wonder if when the score is saved, if nothing was filled in, the 'ok' is being defaulted.

Hope that helps.


Tags: cloud

jira-service-management

jira-service-management-cloud
using jwt token for allow customers create and manage support request swithout sing in
Asked by Oumayma Meddeb:

I am creating a Java application that allows my customers to be redirected to my support portal to create and manage support requests. I want this redirection to be done automatically without needing to log in. I have created the customer account using an API and obtained the accountId. I have set up the application and successfully generated the JWT token, but every time I try to redirect to the support portal, I get a 401 unauthorized error.

<https://myDomain.atlassian.net/servicedesk/customer/portal/1?jwt=generated_jwt_token>


Answers:
author: Nadhila Savira
body: Hi Oumayma,

Since you are creating an application here, I'm thinking that our Developer support might be your best course to get some help on this matter. Could you please reach out through <https://developer.atlassian.com/support> with your question?


Tags: cloud

jira-service-management

jira-service-management-cloud
SSL for Webhook communication to on-premise environments
Asked by ???:

Since I am Japanese, I use machine translation. I apologize if the English is difficult to understand.

We would like to implement a webhook from the cloud version of JSM to an Ansible server in an on-premise environment.

When I make a request using "Send Web Request" from JSM automation, I get an error about SSL certificates.

The error text is "500 Unable to validate SSL connection"

For SSL communication, should there be a valid certificate set up on the Ansible server that is not self-certified?


Answers:
author: Radek Dost?l
body: It could indeed be that it refuses to communicate with Ansible as it does not trust a self-signed ssl certificate. Is it actually reachable from the internet?

"Unable to validate SSL connection" could technically also mean that it cannot connect to the url at all, albeit it would be a misleading message if this was the case.

Though, I can't really find anything on this in documentation other than that it should support both 80/443 ports, but perhaps it only cares about the certificate authority if it's https only.

If you don't get a better answer here, I'd say you might want to clarify this with Atlassian via a support ticket if they can confirm what the cause of the error is.

comments: author: ???
body: Hi,Radek.

Thanks for the reply.

I then put in a public certificate instead of a self certificate and that solved the problem.

Thank you for your assistance.


Tags: cloud

jira-service-management

jira-service-management-cloud
Follow Parent Status if Parent being moved
Asked by Thomas A:

I want to create an automation to move status following the parent status. In the board there are 3 types of issue Epic, Task, and Sub-Task. I already create rule like iamge below. But it does not work well.

![sync1.png](https://community.atlassian.com/t5/image/serverpage/image-id/336932iA7D0E92154A01A20/image-size/large?v=v2&px=999 "sync1.png")![sync2.png](https://community.atlassian.com/t5/image/serverpage/image-id/336933i2F9CD247E21FB2AE/image-size/large?v=v2&px=999 "sync2.png")


Answers:
author: Fabian Lim
body: Hi [@Thomas A](/t5/user/viewprofilepage/user-id/5491929)

There could be multiple issues why this would not work. For example, can you confirm that the tasks and subtasks share the same workflow statuses and transitions as the main epic? If the transition/status is not available for a child or subtask, it will not move. Are there any validators in the workflows that are causing it not to transition?

If you share a specific example or the logs it will help pinpoint the issue.

Regards,

Fabian


Tags: automation

cloud

jira-service-management

jira-service-management-cloud

jira-work-management-cloud